Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25d19738e269ec170203b5c4767bdf0fe844b512.cer
File:                     25d19738e269ec170203b5c4767bdf0fe844b512.cer (raw, json)
Hash identifier:          j/+oWPgFIIoGc5ekfX9piE3+ju9mhJ9Y8CM4b02nWDs=
Subject key identifier:   9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010F6496
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/25d19738e269ec170203b5c4767bdf0fe844b512.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Apr 2022 22:05:18 +0000
Certificate not after:    Tue 21 Oct 2025 14:26:14 +0000
Subordinate resources:    AS: 64160
                          IP: 181.233.124.0/22
                          IP: 2803:e510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17786006 (0x10f6496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 25 22:05:18 2022 GMT
            Not After : Oct 21 14:26:14 2025 GMT
        Subject: CN=25d19738e269ec170203b5c4767bdf0fe844b512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:0f:b1:ef:e5:ab:84:22:01:65:77:c5:76:9d:
                    c5:48:44:71:26:58:60:b1:62:f6:50:2d:24:1c:c0:
                    e1:78:60:7e:c7:ec:6b:eb:d4:7d:1d:48:21:ab:b4:
                    4e:d6:35:a0:8b:a4:33:32:97:a7:e1:40:8e:bc:56:
                    db:1b:20:83:c7:81:ce:97:cc:1f:8b:6a:54:ab:46:
                    95:ac:7c:a3:49:f6:d7:40:16:18:13:a0:11:5e:05:
                    87:88:53:75:49:38:d0:d8:85:58:49:51:62:71:cf:
                    49:a3:f9:3c:a7:ed:fc:bb:14:f1:22:cb:03:32:84:
                    5d:0e:72:f5:44:05:ab:b8:13:bf:9c:97:19:be:ed:
                    c9:f3:80:7b:bf:a9:29:c9:56:7b:e2:ee:ba:a8:42:
                    04:ff:27:b9:eb:20:9d:81:23:57:a1:5f:c1:07:c0:
                    62:aa:f0:af:89:3c:7f:15:db:8b:33:ba:b7:65:80:
                    5e:05:4b:5b:78:45:d5:67:9e:a0:6c:9b:a1:f7:22:
                    1a:a6:25:43:a6:4f:59:16:35:db:32:ad:91:cb:37:
                    07:29:99:30:27:2d:27:6f:c0:48:e7:f9:c2:26:c0:
                    f1:55:5e:8c:91:a7:9b:d7:e7:b3:18:e2:d9:cf:9a:
                    f0:87:25:46:61:24:46:fc:b3:04:95:9d:f4:57:0a:
                    f0:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:5D:4F:6F:81:61:00:0E:20:0B:D2:5B:CA:8C:2A:BF:01:77:D3:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5eeaf313-69f6-417b-8c15-e36b29868830/25d19738e269ec170203b5c4767bdf0fe844b512.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.124.0/22
                IPv6:
                  2803:e510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64160

    Signature Algorithm: sha256WithRSAEncryption
         57:a1:ad:9b:15:0d:14:d3:b5:69:ff:92:13:55:dd:ef:51:f6:
         72:eb:05:f9:eb:8f:a2:67:4a:f0:13:3a:50:d8:b0:d1:e8:7e:
         bc:50:eb:1c:2f:d4:86:f2:fe:ad:e1:3c:ea:6a:41:86:2e:44:
         b8:c4:46:39:4b:32:73:03:33:68:02:a5:ee:1b:e9:90:f8:a9:
         56:91:1f:89:fa:32:b2:9c:cd:5e:48:66:a9:25:b2:28:29:1b:
         cd:a4:1c:8d:25:65:cd:d6:42:93:50:ec:93:f5:da:15:5a:9d:
         e8:22:bc:08:ff:ad:32:36:1e:b9:1b:31:af:30:62:eb:e8:42:
         ea:8d:e8:a0:43:4f:e3:ef:a8:fe:f6:8e:53:ae:de:49:56:14:
         ff:88:64:0a:8e:21:c5:00:6f:4a:88:47:80:bb:47:f7:6c:06:
         81:3f:19:89:29:e8:c5:c7:8e:48:22:de:01:7a:c6:cc:ee:60:
         22:05:84:c8:6f:dd:87:79:d1:0d:1c:38:7f:7f:41:7a:6a:ac:
         74:e4:cf:5b:ff:0a:d1:42:fc:eb:7a:dc:ec:2f:fc:0e:3b:5d:
         ab:6d:9f:f4:03:af:35:34:b9:fe:04:e0:46:c7:af:89:00:59:
         8f:3b:d3:bf:f8:39:40:81:11:41:28:07:f2:cd:58:9f:88:cb:
         36:92:2c:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----