Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/18d35945a9aeb18e3289b37d62760a38904460c5.cer
File:                     18d35945a9aeb18e3289b37d62760a38904460c5.cer (raw, json)
Hash identifier:          nsWnLWoIK5Nby++zYTIPO6OvlJB/rX+wO/4+33TEOCk=
Subject key identifier:   C3:5B:B5:CB:32:3C:0A:2E:1F:F1:14:6E:22:07:99:A4:49:29:8A:2E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6971F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5e60571-b849-4ee4-8d82-5e0b3d48bcad/18d35945a9aeb18e3289b37d62760a38904460c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5e60571-b849-4ee4-8d82-5e0b3d48bcad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 16:10:49 +0000
Certificate not after:    Thu 04 Apr 2024 17:56:39 +0000
Subordinate resources:    AS: 270023
                          IP: 186.148.196.0/22
                          IP: 2803:39e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15111967 (0xe6971f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 16:10:49 2023 GMT
            Not After : Apr  4 17:56:39 2024 GMT
        Subject: CN=18d35945a9aeb18e3289b37d62760a38904460c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:dc:c3:f2:e6:86:cb:d5:85:a6:66:05:a6:34:
                    30:47:21:ea:a8:e0:43:32:4f:f6:5c:ad:bf:65:70:
                    31:96:67:22:15:bb:03:97:af:eb:83:c2:ed:52:fd:
                    ec:bb:2d:88:ef:ae:e4:21:42:43:0f:34:77:79:6c:
                    a6:f0:7f:2b:cb:d1:9d:31:d3:93:39:9d:cf:67:b4:
                    50:6d:47:03:12:b4:55:3f:58:ae:8b:e1:10:44:6c:
                    ba:c4:7d:80:7b:76:d8:6c:7b:68:e7:58:67:4e:d6:
                    d8:20:e3:85:f7:25:06:af:52:88:d0:ee:19:c8:38:
                    d5:92:5d:28:39:2e:80:c6:64:35:ce:c6:b3:3b:ea:
                    a9:c8:94:a7:73:fa:79:d5:2d:a4:b9:36:bb:e6:3a:
                    f6:44:85:29:c9:25:f9:47:99:32:95:ec:8f:57:22:
                    46:b4:ae:1f:de:f7:e4:80:51:80:e8:fc:b6:03:bb:
                    4b:77:36:b5:01:a6:9d:cc:23:b3:42:ac:c4:90:3c:
                    51:53:b1:83:0c:dd:64:2a:cb:e9:ec:a2:ff:27:b1:
                    b1:43:9a:63:0e:66:b1:f6:81:28:62:9c:d9:2e:32:
                    2f:f1:c1:e0:0c:d0:21:70:81:1c:11:50:68:2a:f2:
                    15:a2:32:56:7d:61:b1:1b:e8:09:61:97:3f:c0:99:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:5B:B5:CB:32:3C:0A:2E:1F:F1:14:6E:22:07:99:A4:49:29:8A:2E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5e60571-b849-4ee4-8d82-5e0b3d48bcad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5e60571-b849-4ee4-8d82-5e0b3d48bcad/18d35945a9aeb18e3289b37d62760a38904460c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.196.0/22
                IPv6:
                  2803:39e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270023

    Signature Algorithm: sha256WithRSAEncryption
         6d:15:db:72:04:6d:3e:6e:a9:ee:56:1a:9c:e0:a5:3c:a4:d0:
         2f:db:4c:de:13:f8:0a:f7:de:ce:c7:aa:e6:d2:d9:b6:5a:d9:
         b0:d6:93:bf:d4:af:d9:c1:51:07:af:d5:fc:d2:5a:18:43:b5:
         88:9b:78:85:8e:f5:21:db:bb:66:ee:85:c4:41:08:e8:3a:00:
         f1:c0:24:bf:5b:7c:34:10:99:39:b9:53:13:66:9e:1f:eb:aa:
         68:33:e3:4f:2f:a2:76:13:45:94:0e:d9:d7:e9:32:3a:4f:11:
         82:5a:85:1f:81:b4:29:37:03:ba:10:e5:8a:7d:bb:5e:41:ec:
         39:b7:a1:db:10:9e:7d:bc:b4:78:1d:f1:f2:09:3c:a9:c8:f2:
         02:0d:6f:0d:b8:97:2f:12:5f:b7:3c:66:e9:19:5d:86:99:e1:
         8d:d6:85:44:7c:ca:c1:f0:c2:2c:ec:45:17:c7:d2:82:ac:61:
         18:8e:e1:a9:15:7d:fe:97:6e:ce:29:69:86:89:81:9b:09:5d:
         17:98:1c:c1:3f:d7:c3:01:68:71:46:bb:af:9d:51:80:b4:6b:
         e4:9c:d3:66:4b:4a:45:12:9a:42:f8:8e:7c:71:56:06:f7:dc:
         08:10:84:6a:af:97:4c:c9:b2:89:32:fa:ac:1e:eb:01:a5:76:
         29:f1:8e:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----