Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d1743db2cb312e5d82c80f415db5186cfe3fe6.cer
File:                     25d1743db2cb312e5d82c80f415db5186cfe3fe6.cer (raw, json)
Hash identifier:          DI9tkpbWfhQvxgie8Ng297QwJeHjl69c2DRpy+8NHsE=
Subject key identifier:   07:B6:BC:01:5D:14:9E:D5:1F:18:DB:22:03:37:1C:5C:71:DA:0D:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF67BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c22e142-b86b-4a43-abdf-ca694934193b/25d1743db2cb312e5d82c80f415db5186cfe3fe6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c22e142-b86b-4a43-abdf-ca694934193b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:18:52 +0000
Certificate not after:    Wed 26 Feb 2025 20:28:39 +0000
Subordinate resources:    AS: 263098
                          IP: 167.249.180.0/22
                          IP: 186.208.252.0/22
                          IP: 186.233.92.0/22
                          IP: 2804:176c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16738239 (0xff67bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:18:52 2023 GMT
            Not After : Feb 26 20:28:39 2025 GMT
        Subject: CN=25d1743db2cb312e5d82c80f415db5186cfe3fe6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:4a:8a:5f:d1:31:fd:da:23:2b:ac:d7:f6:
                    e3:94:f9:27:e4:29:8c:0d:da:c8:19:2a:09:59:c4:
                    29:f3:0b:6e:bc:94:04:a0:33:c9:71:aa:d0:34:54:
                    c6:e5:e8:11:d2:19:cf:4d:35:26:d0:66:c5:40:1a:
                    1a:22:12:5c:bc:b9:05:d2:0f:40:af:2f:e5:15:97:
                    b9:b0:23:0a:03:1d:a0:84:8e:4a:21:92:77:9c:01:
                    e9:8d:40:61:43:60:15:74:e1:04:7b:41:c9:93:e3:
                    76:d5:a6:68:02:21:e4:b2:1e:14:bd:4a:54:2e:27:
                    24:a0:8d:f3:45:0b:c1:a2:ad:0d:4c:cd:9d:54:ac:
                    d3:d8:98:26:25:83:5d:f3:a7:a0:76:29:dd:af:e8:
                    d0:aa:a5:9e:4b:5f:8d:6a:a8:58:e9:64:38:d7:fb:
                    42:fc:f4:82:84:e1:2a:4f:e0:2a:06:60:42:35:11:
                    a3:dc:8e:a4:2e:14:b1:c9:2a:9a:ad:ee:35:be:f5:
                    a7:43:1f:4c:cb:52:b5:23:36:e3:93:e9:08:1f:50:
                    33:76:81:93:ff:c1:78:e9:8b:5c:7f:11:ee:de:18:
                    30:46:07:da:82:89:94:2a:47:6b:2d:cc:ad:ce:23:
                    43:4c:43:be:1c:fc:b3:f3:88:36:45:9f:30:65:ed:
                    d3:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B6:BC:01:5D:14:9E:D5:1F:18:DB:22:03:37:1C:5C:71:DA:0D:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c22e142-b86b-4a43-abdf-ca694934193b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c22e142-b86b-4a43-abdf-ca694934193b/25d1743db2cb312e5d82c80f415db5186cfe3fe6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.180.0/22
                  186.208.252.0/22
                  186.233.92.0/22
                IPv6:
                  2804:176c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263098

    Signature Algorithm: sha256WithRSAEncryption
         ab:bc:e3:4b:3d:ff:52:37:5d:c0:5f:0b:b7:27:71:50:83:3d:
         06:8a:8b:60:2b:8d:2a:97:da:e5:7f:24:26:05:c4:47:f0:e7:
         f3:1a:10:a9:44:b3:d0:aa:ac:85:75:7e:e8:13:af:6b:3f:8a:
         84:c4:4f:ea:cb:c2:d1:42:df:31:ea:0a:5f:1f:03:25:fc:07:
         bf:17:e5:c7:3a:ad:b3:ed:b8:a3:2d:7a:5a:23:54:9b:2a:06:
         7b:07:18:56:b9:ac:15:8b:30:6d:c9:32:1b:25:6e:cd:7d:1e:
         83:97:36:51:7c:ad:fe:c4:27:61:c8:00:47:63:f6:aa:a4:c9:
         5a:ce:1c:1d:f2:4c:d7:93:7a:de:56:aa:c8:a3:1c:c6:ea:e1:
         54:65:44:c4:c2:6f:e7:80:fc:cd:96:91:b8:24:ee:22:8c:ab:
         f7:2c:23:3e:8d:9b:b8:c6:a9:e0:f1:db:89:6b:4d:f6:5f:b3:
         25:63:29:88:8f:d7:c4:2c:b1:0c:e1:7c:54:8a:ae:bf:3b:06:
         98:6d:61:45:1d:8e:08:9b:66:15:a6:58:81:b4:73:68:60:4c:
         5d:49:fe:02:4d:c9:6c:8e:49:82:d8:52:89:50:fd:a5:75:d1:
         44:ed:af:10:16:11:5a:b4:1f:82:39:ed:e0:39:33:31:87:14:
         a1:25:92:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----