Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31.cer
File:                     276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31.cer (raw, json)
Hash identifier:          l7DC+87mT+rlaC1yu/OM5wOKgIzxMVBdnA87/xdKHqA=
Subject key identifier:   FD:40:08:E1:06:B8:B0:ED:0D:D5:06:5F:E6:8B:96:68:97:3B:46:40
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6FEE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1eca909f-3052-46ac-8acd-c98320feb167/276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1eca909f-3052-46ac-8acd-c98320feb167/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 28 Aug 2023 21:55:38 +0000
Certificate not after:    Sat 17 May 2025 02:21:45 +0000
Subordinate resources:    IP: 45.239.76.0/22
                          IP: 2806:304::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16187106 (0xf6fee2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 28 21:55:38 2023 GMT
            Not After : May 17 02:21:45 2025 GMT
        Subject: CN=276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f9:2e:b9:c9:1b:ea:e2:e8:a9:48:3a:47:54:
                    7a:dd:fb:88:d9:e2:43:74:d2:1c:df:5c:28:48:76:
                    ea:88:81:85:bb:ff:7f:9b:82:f4:d5:aa:d5:7c:3e:
                    34:e8:67:c9:28:3a:8f:de:c3:48:73:f0:8a:a3:1b:
                    73:c3:1f:27:04:1c:f3:ec:3b:bb:54:92:74:f0:ce:
                    35:46:7c:45:40:25:b4:55:12:cd:13:ea:42:4b:19:
                    e9:f6:1b:86:95:e5:4f:85:b0:08:a1:36:f9:74:6b:
                    dd:77:42:6c:b8:50:3b:d9:69:39:94:60:29:21:b5:
                    53:36:cb:b0:eb:39:a8:fd:57:17:d8:6a:9b:b5:b5:
                    fa:b5:0d:15:fa:18:bd:cb:5b:17:77:5e:b2:6f:e7:
                    2f:e5:d8:a3:7b:42:96:85:a7:b1:0f:20:81:53:84:
                    68:0c:24:d3:72:5d:bb:21:aa:e6:95:61:e8:ba:8a:
                    38:17:08:dd:ab:59:50:96:0a:43:19:e5:28:82:02:
                    a7:00:07:96:56:f2:76:f1:28:21:d7:61:cb:91:e9:
                    31:87:2b:58:e6:85:2b:b6:0d:21:6b:a6:8e:b5:3f:
                    a1:1d:a4:99:7e:8a:4e:fb:70:b1:05:59:26:fb:65:
                    c6:64:a9:cc:90:0f:2b:fc:52:7a:06:b6:f5:51:f4:
                    e9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:40:08:E1:06:B8:B0:ED:0D:D5:06:5F:E6:8B:96:68:97:3B:46:40
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1eca909f-3052-46ac-8acd-c98320feb167/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1eca909f-3052-46ac-8acd-c98320feb167/276ddbcbb1cf91f9e890ca9cdc81b012d40f2a31.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.76.0/22
                IPv6:
                  2806:304::/32

    Signature Algorithm: sha256WithRSAEncryption
         c2:80:e1:d4:0d:99:f0:c1:7e:5f:dc:b8:85:14:67:61:e5:87:
         d9:fa:84:a2:ab:20:e6:a7:1f:52:d5:74:53:7e:c8:f4:3a:11:
         4d:6b:1a:ba:35:11:d5:bc:39:6c:a3:96:4d:60:9e:3f:e2:bd:
         22:4a:97:45:f2:fd:ef:65:47:41:49:ec:6f:0a:47:7d:22:f5:
         77:c4:82:84:f8:e7:68:58:9e:50:04:5c:54:8a:2e:f5:af:0f:
         4c:42:a6:01:94:79:2d:47:2f:40:c1:22:be:7e:17:ea:3a:f2:
         ea:e9:46:f2:48:7c:f7:71:61:3c:e1:5d:f9:a9:70:13:51:c9:
         2b:21:32:4d:36:15:79:97:66:39:f4:44:29:af:0a:d9:1a:5e:
         29:c5:a6:93:79:39:53:9d:03:d7:d0:dc:aa:df:83:2e:f1:e9:
         6c:b4:85:01:8e:d7:6e:49:ff:b6:6f:2d:90:2f:d7:19:c5:dc:
         15:c4:52:0c:be:8c:80:86:cd:d1:14:81:e4:35:e8:97:bb:7d:
         be:aa:3f:5c:4d:31:af:b3:5a:96:a5:dd:e5:66:de:c2:ad:ee:
         76:ae:a8:22:dd:31:1e:96:1b:b4:ac:f1:38:c1:f7:c6:2e:f5:
         5f:0f:dd:92:ff:d8:ff:fe:ac:55:ce:52:b4:eb:dc:24:70:b1:
         56:7c:39:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----