Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d626a21428a6fb9d749d430c1fd9292bcc6851f.cer
File:                     1d626a21428a6fb9d749d430c1fd9292bcc6851f.cer (raw, json)
Hash identifier:          ikgyDn9ByCpvIzMdplXqAIe9LjtGzaOAeu0ldtBbwtY=
Subject key identifier:   C1:26:74:D4:59:F7:82:C9:74:59:29:9D:6D:AD:BA:FF:0E:9E:23:CA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAD917
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7d92d14c-8372-4f5d-ba4f-73557eca3186/1d626a21428a6fb9d749d430c1fd9292bcc6851f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7d92d14c-8372-4f5d-ba4f-73557eca3186/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 13:58:40 +0000
Certificate not after:    Fri 13 Jun 2025 17:43:43 +0000
Subordinate resources:    AS: 273065
                          IP: 143.208.48.0/22
                          IP: 2803:1be0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16439575 (0xfad917)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 13:58:40 2023 GMT
            Not After : Jun 13 17:43:43 2025 GMT
        Subject: CN=1d626a21428a6fb9d749d430c1fd9292bcc6851f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:33:a7:f1:ba:3e:8b:e3:4d:e7:fa:8d:46:70:
                    53:ec:67:36:01:fc:02:40:8e:fd:f7:e5:51:42:67:
                    fa:73:54:f7:90:13:4a:eb:be:92:e0:94:31:76:4c:
                    37:96:f9:45:58:ed:4d:28:5b:d3:74:35:1c:1e:85:
                    a8:0d:f9:1d:aa:91:f6:e1:e8:95:c2:a2:9a:dc:dd:
                    65:56:6f:02:ae:c4:ef:9c:31:d9:79:50:0a:81:52:
                    a4:22:1c:14:03:52:e2:be:72:f8:e9:16:a4:7c:7f:
                    67:fd:11:fc:fc:8f:92:45:ce:8b:65:13:9f:1f:17:
                    e4:20:15:90:de:75:2f:ab:c9:1b:e6:1c:ab:c6:0f:
                    38:05:9e:40:76:00:53:35:4d:05:29:2a:0c:23:02:
                    9f:0b:43:98:8a:b2:6f:7f:db:e9:cc:b1:ef:42:89:
                    88:86:3a:f6:3d:09:a2:3c:cf:ba:75:e0:3e:71:33:
                    91:71:e4:68:68:37:9d:bd:0f:f3:88:0b:ff:8d:bc:
                    1d:c0:ea:5c:1c:72:69:e9:84:8f:df:b5:61:77:65:
                    0a:66:fe:6b:f9:92:3f:ba:2b:1c:cb:29:c7:cf:c3:
                    33:8e:16:fa:34:15:43:08:f4:b2:ff:00:07:43:9d:
                    fb:a0:26:b8:ea:b9:bd:a0:21:da:37:d8:dc:11:d3:
                    69:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:26:74:D4:59:F7:82:C9:74:59:29:9D:6D:AD:BA:FF:0E:9E:23:CA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7d92d14c-8372-4f5d-ba4f-73557eca3186/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7d92d14c-8372-4f5d-ba4f-73557eca3186/1d626a21428a6fb9d749d430c1fd9292bcc6851f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.48.0/22
                IPv6:
                  2803:1be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273065

    Signature Algorithm: sha256WithRSAEncryption
         c3:5a:55:f9:57:ff:67:ef:71:03:ad:c1:ea:f7:86:2e:e6:c7:
         b8:5c:9e:5c:2b:6a:dd:17:fc:70:93:21:5f:0a:28:2d:90:2c:
         f2:3a:4e:7c:75:b3:63:5b:91:1c:0f:ac:57:32:85:57:bd:ed:
         d2:cd:46:af:21:8d:11:58:90:91:9a:78:2f:d2:76:08:ef:ee:
         e9:0a:33:47:6b:da:c0:37:c8:e8:1f:be:4b:a6:2b:55:d7:cd:
         95:38:06:2c:8c:a0:82:6a:2b:ec:fa:16:51:db:3d:70:5a:b7:
         11:65:3e:50:6e:75:a7:d7:35:f4:6a:a4:26:e5:20:74:ad:bc:
         a4:94:2b:d2:e3:3d:47:ad:d0:b7:c0:16:61:24:19:51:5a:2e:
         67:2f:b6:c6:65:cc:d9:1d:66:92:52:22:13:56:f6:f8:a8:48:
         96:32:18:1b:c2:dc:17:c1:f6:6e:88:57:c9:bc:db:cc:71:1a:
         ea:b1:e6:e9:71:ac:d7:d5:bb:5d:1f:e5:d4:00:20:23:9c:ed:
         41:aa:f5:81:bb:13:af:45:d8:dc:ce:c8:4f:05:7a:94:33:ac:
         25:11:23:f7:49:8c:10:6f:de:27:31:00:f3:a6:81:fb:e4:ae:
         16:57:64:d5:9a:77:36:6d:fc:9f:f5:30:21:40:73:a6:d7:74:
         1b:b2:5d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----