Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b4e33e73076eb5cec650b23cba56cb71dbedbde.cer
File:                     1b4e33e73076eb5cec650b23cba56cb71dbedbde.cer (raw, json)
Hash identifier:          FCAjKIq2spwoyGKLMy6CqW6D3V+9gEJPnoc5x+FoyDY=
Subject key identifier:   91:C0:4F:B8:7A:44:07:C0:83:5E:CF:43:5A:91:F0:2E:C1:26:16:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01092077
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dedfb824-4ab4-43ea-9523-cc02b74dc6de/1b4e33e73076eb5cec650b23cba56cb71dbedbde.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dedfb824-4ab4-43ea-9523-cc02b74dc6de/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 15:49:54 +0000
Certificate not after:    Sun 11 May 2025 15:59:18 +0000
Subordinate resources:    AS: 273035
                          IP: 168.232.100.0/23
                          IP: 2803:2b90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17375351 (0x1092077)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 15:49:54 2023 GMT
            Not After : May 11 15:59:18 2025 GMT
        Subject: CN=1b4e33e73076eb5cec650b23cba56cb71dbedbde
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fb:4c:55:c0:18:7b:f6:39:1c:e0:a4:2a:fe:
                    ae:53:9a:5c:54:87:7d:9f:be:7e:40:9b:08:74:f7:
                    77:27:a1:be:56:33:14:98:36:b8:6e:98:ee:40:6d:
                    05:1f:fc:89:7b:94:5e:fe:18:9a:71:a6:77:d1:6a:
                    a1:c3:f1:43:dd:46:37:e0:49:ab:6e:5a:a1:c5:32:
                    97:13:19:4d:38:73:37:67:36:24:37:3e:19:fd:6b:
                    b8:ca:94:e7:74:4e:62:58:0a:e9:fb:fb:b1:08:aa:
                    38:9e:66:86:de:ae:67:1f:dd:7b:32:14:b4:ff:7a:
                    0f:b0:d3:2f:dc:df:56:d6:22:2d:bb:b1:63:a9:1f:
                    c6:98:e3:60:d8:72:07:e7:6b:b6:47:c4:76:86:b1:
                    cc:1b:72:3e:8a:c5:bd:44:5f:de:9b:9e:68:16:22:
                    48:cf:1e:87:8a:b9:6e:92:4d:c3:bf:ae:2d:4e:1a:
                    9e:82:05:d2:a6:5d:5b:92:06:e9:2c:2f:db:92:a5:
                    2e:bb:e7:a5:e7:95:47:6c:de:1d:da:08:6f:57:55:
                    67:31:a1:e6:6f:5b:85:67:44:47:b4:2f:0e:dd:49:
                    c5:86:c7:76:06:c1:84:f1:21:82:91:6c:be:50:5a:
                    d6:59:fa:8b:ba:10:c8:1a:72:9b:ea:33:83:3d:0f:
                    22:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C0:4F:B8:7A:44:07:C0:83:5E:CF:43:5A:91:F0:2E:C1:26:16:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dedfb824-4ab4-43ea-9523-cc02b74dc6de/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dedfb824-4ab4-43ea-9523-cc02b74dc6de/1b4e33e73076eb5cec650b23cba56cb71dbedbde.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.100.0/23
                IPv6:
                  2803:2b90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273035

    Signature Algorithm: sha256WithRSAEncryption
         b4:4a:e0:45:e5:4b:ab:98:ef:a7:22:5c:86:96:ad:2d:76:94:
         46:80:70:11:22:cb:e9:81:1c:b3:56:6a:74:94:4c:1c:27:b9:
         b9:a1:11:bd:e2:6a:77:7e:2c:05:0c:de:d6:b1:9e:6b:2c:0f:
         fb:01:31:64:1a:e1:7f:ad:aa:16:ca:45:d9:ac:05:b5:7c:b6:
         d0:9c:8f:1b:7a:43:7b:b6:e3:c9:5a:07:85:8b:58:54:60:50:
         77:62:b3:d2:70:23:30:cd:9e:12:37:80:97:40:c5:65:ac:74:
         fd:9d:c5:bf:96:5a:be:0c:76:69:de:eb:0a:f5:27:73:f5:6c:
         ca:b2:21:f8:56:9f:05:05:48:30:36:10:79:af:6a:42:b5:0f:
         8c:44:49:7b:59:7a:85:b3:6a:6f:a8:c4:f8:4b:16:66:26:7c:
         74:8c:cd:17:cd:50:40:99:c9:f1:45:05:e7:37:b4:8a:66:1d:
         12:4b:a4:65:db:d0:f4:e5:fa:43:41:72:3d:80:4c:f2:7e:77:
         be:a3:65:35:c1:3b:67:dc:d8:da:05:2b:57:29:b3:f4:06:fa:
         76:23:2f:7d:1d:a0:f4:dc:77:e0:51:7a:e3:df:5b:e7:05:fb:
         f8:a6:ec:6d:a6:30:55:8c:fd:ce:76:f6:39:50:5d:51:f3:02:
         aa:55:4a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----