Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/26454e7695148dbc143a5a733eb5ab750dc68a19.cer
File:                     26454e7695148dbc143a5a733eb5ab750dc68a19.cer (raw, json)
Hash identifier:          CXI2TOTHFGOZUst4N7+tG8+3OTp0vFnw5OJcHvOc8HY=
Subject key identifier:   FA:85:36:A6:E0:AF:D5:73:21:33:83:FD:31:39:35:CE:7D:DB:0E:E6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E349B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cb7c2651-6835-4a74-a046-caa8f969de35/26454e7695148dbc143a5a733eb5ab750dc68a19.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cb7c2651-6835-4a74-a046-caa8f969de35/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 15:20:47 +0000
Certificate not after:    Mon 06 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 27735
                          IP: 45.232.120.0/22
                          IP: 2803:5b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14895538 (0xe349b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 15:20:47 2023 GMT
            Not After : Jan  6 05:00:00 2025 GMT
        Subject: CN=26454e7695148dbc143a5a733eb5ab750dc68a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:57:43:c0:36:60:39:bf:ea:ad:89:2c:43:01:
                    27:9b:45:89:71:f7:e7:de:63:0c:10:0c:b8:81:b3:
                    f9:d7:81:43:f1:61:8b:2d:94:7c:84:a5:a7:9c:1d:
                    1b:d0:7c:f2:91:08:a5:b3:51:ea:9f:84:c8:84:dc:
                    4b:35:ac:de:c6:a1:b1:79:b8:4a:0b:03:db:f1:0c:
                    4b:1b:2f:72:7a:ab:da:be:0e:5c:98:bd:5a:98:b0:
                    85:c8:9a:c7:f6:9b:03:cc:42:1f:45:62:5f:37:3a:
                    40:1b:b0:50:5a:e0:4a:f0:b6:00:83:2a:88:1e:97:
                    5a:e7:31:36:70:57:3f:1d:94:35:e2:12:df:4a:b3:
                    ed:14:68:4a:05:79:2a:5c:be:bf:bb:a2:6f:91:77:
                    1f:7e:1e:14:5e:17:3f:f2:56:81:a9:d5:67:79:bd:
                    db:c0:b6:24:fc:e5:82:71:4d:ba:3a:5e:63:3f:6f:
                    8d:d6:fe:b5:ea:fe:b3:96:14:dc:e5:d5:85:3d:07:
                    46:fd:52:3a:b1:42:96:9c:23:d7:dd:16:c3:48:81:
                    13:55:8c:10:c8:ee:9c:9d:36:d0:b8:eb:af:ad:c6:
                    3c:8d:ff:b4:35:bb:0c:de:18:21:87:e4:c6:9e:bb:
                    33:64:49:18:67:a2:44:e2:83:f1:70:76:09:a2:a5:
                    31:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:85:36:A6:E0:AF:D5:73:21:33:83:FD:31:39:35:CE:7D:DB:0E:E6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cb7c2651-6835-4a74-a046-caa8f969de35/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cb7c2651-6835-4a74-a046-caa8f969de35/26454e7695148dbc143a5a733eb5ab750dc68a19.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.120.0/22
                IPv6:
                  2803:5b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27735

    Signature Algorithm: sha256WithRSAEncryption
         7d:bf:8b:23:e7:d4:7a:4e:89:e0:40:4b:76:3d:d7:ce:f4:cd:
         0d:d0:40:72:7a:e9:f6:39:45:62:0d:46:82:0e:bb:05:29:4d:
         12:bf:b2:17:2b:bf:e7:cb:03:b5:a5:4d:2e:43:20:e2:23:73:
         4d:93:9a:79:56:e8:0b:e6:d5:90:ab:29:f4:17:26:42:9b:07:
         93:5b:7b:7c:c3:cd:8a:13:b9:62:ea:77:51:a0:cb:5a:23:fa:
         80:62:69:de:2e:62:93:af:e6:4e:a5:e3:21:92:87:b5:d3:c7:
         26:28:c2:49:da:27:28:db:75:7e:48:e4:e9:3d:ab:7a:70:e9:
         bc:2e:74:a5:ed:4e:3f:af:ce:ba:b1:4e:69:02:8c:3f:9c:7e:
         93:d8:a8:9f:9e:19:6c:a3:fc:a2:81:17:84:35:20:b2:90:bf:
         1c:cd:01:78:5d:83:05:6b:fc:35:df:41:38:66:aa:b1:e7:f2:
         e5:00:f8:06:c9:13:ab:e3:41:a8:2e:31:52:02:7f:34:58:85:
         45:b2:f6:34:fd:6f:98:b3:56:00:43:28:b4:05:7f:b1:71:60:
         77:c6:4a:d4:7a:93:3b:50:a5:0b:b2:4f:31:3a:1a:e8:b4:da:
         b7:97:d3:3f:3a:da:19:7f:b2:61:d7:ad:11:d9:eb:41:f5:15:
         e2:03:d7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----