Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1fa5eca85b7c2fa6f966d945c1534d6b66cfa676.cer
File:                     1fa5eca85b7c2fa6f966d945c1534d6b66cfa676.cer (raw, json)
Hash identifier:          EcBhjUixlv6vHxnvdMZaboNgZyVQOsonxtZt9nUuaio=
Subject key identifier:   D6:3B:42:4E:DE:52:D5:D0:EC:7D:B1:6B:94:F4:91:C3:C9:C1:4A:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC4FB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/157f4d8c-0d21-47dd-bf52-e6a9f859247d/1fa5eca85b7c2fa6f966d945c1534d6b66cfa676.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/157f4d8c-0d21-47dd-bf52-e6a9f859247d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 18:34:06 +0000
Certificate not after:    Mon 23 Sep 2024 17:36:21 +0000
Subordinate resources:    AS: 265882
                          AS: 266663
                          IP: 45.227.8.0/22
                          IP: 2803:7e20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16535480 (0xfc4fb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 18:34:06 2023 GMT
            Not After : Sep 23 17:36:21 2024 GMT
        Subject: CN=1fa5eca85b7c2fa6f966d945c1534d6b66cfa676
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:36:1b:f5:da:0d:c7:32:41:13:15:46:8a:0f:
                    dd:b5:55:f9:b6:2d:17:52:1f:79:bf:f5:98:a4:18:
                    20:8d:30:92:9d:ba:78:4f:25:6c:54:c1:db:e8:42:
                    d9:ad:85:a0:7b:4b:46:63:19:23:73:e6:c8:a5:4b:
                    4f:2d:95:88:60:1b:aa:d8:81:c2:01:75:72:19:bf:
                    27:4b:56:d4:0f:f1:7b:93:3e:47:c7:23:03:ee:3c:
                    3b:5b:1f:c8:f6:ef:38:65:6a:92:8a:34:2a:7c:c5:
                    03:f1:92:cc:b6:d0:d4:54:cb:a8:b1:c9:88:e8:34:
                    85:9d:0c:99:18:37:9f:d8:eb:bf:c8:58:bc:cf:df:
                    44:5c:0b:86:d2:af:fa:51:52:33:62:be:55:e3:be:
                    f9:48:3b:55:bc:30:06:be:79:f4:05:d0:7e:fb:be:
                    d5:f5:c2:79:ef:19:fd:2a:cd:11:45:bd:37:60:1c:
                    53:1f:6f:16:08:62:2a:7b:5f:a4:c4:56:11:a4:a8:
                    c5:e3:d9:7e:20:f5:6e:09:2a:42:ed:37:96:69:38:
                    de:78:fb:d7:81:98:6c:03:69:cf:17:0a:19:b5:6d:
                    87:e1:1a:09:82:54:21:b8:e6:01:7f:e1:b6:ba:0e:
                    4d:d4:8f:03:75:7a:eb:10:2a:27:aa:46:7c:71:6f:
                    58:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3B:42:4E:DE:52:D5:D0:EC:7D:B1:6B:94:F4:91:C3:C9:C1:4A:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/157f4d8c-0d21-47dd-bf52-e6a9f859247d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/157f4d8c-0d21-47dd-bf52-e6a9f859247d/1fa5eca85b7c2fa6f966d945c1534d6b66cfa676.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.8.0/22
                IPv6:
                  2803:7e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265882
                  266663

    Signature Algorithm: sha256WithRSAEncryption
         6d:c3:08:35:ee:06:e5:02:a9:1a:06:ba:5d:19:5d:b7:ec:eb:
         34:79:fb:82:fd:60:6b:26:39:c1:bd:45:fa:ff:72:8a:b3:fa:
         d8:5d:99:80:cd:6c:6b:f8:32:39:1e:c5:b8:d7:61:9c:d1:6d:
         32:66:41:df:74:2b:b9:e1:e5:36:67:1f:de:ff:81:aa:dd:b1:
         33:38:7b:0d:d5:77:0d:e8:ff:b7:1b:e9:d7:85:cd:59:02:6f:
         45:22:a9:14:d5:b3:f1:46:2f:98:c3:cd:4e:1c:fe:24:a4:21:
         50:15:29:e5:2a:73:63:7c:43:a4:1d:1d:a7:fb:66:da:01:7e:
         c1:48:2c:71:8d:f3:14:68:9c:9e:5c:46:a6:4d:ac:7a:3e:fd:
         48:99:f2:fb:9f:d0:24:ca:7a:c3:9d:60:2e:ea:9b:fd:39:15:
         04:4c:76:91:ca:85:a8:06:22:70:05:cd:54:f6:3c:64:7b:2e:
         86:4d:ee:53:02:e6:34:e7:ad:e1:69:04:b2:38:14:4a:ea:6b:
         28:8f:0f:c9:13:5d:71:43:c8:ea:43:4c:17:7c:93:e1:11:84:
         a4:e6:40:ce:73:9d:f0:f1:ef:18:52:1d:e1:7e:88:77:fe:3e:
         11:1d:31:96:c2:cb:f8:b5:fa:12:11:e1:5b:d7:7a:44:6c:41:
         dc:7a:70:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----