Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a1acb517753fee30cfdad7733fba319d387546f.cer
File:                     2a1acb517753fee30cfdad7733fba319d387546f.cer (raw, json)
Hash identifier:          lHwgInI1KdKf6TVX9JkgZtajDutYZDDGTm2JGtd8suM=
Subject key identifier:   BC:F3:B8:D6:46:DB:60:C5:8F:FD:42:0E:08:7E:02:45:32:E2:3E:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5C133
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ece54aeb-e964-492d-a3d3-5aec8feb674d/2a1acb517753fee30cfdad7733fba319d387546f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ece54aeb-e964-492d-a3d3-5aec8feb674d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 15 Apr 2023 17:00:07 +0000
Certificate not after:    Wed 20 Mar 2024 18:05:40 +0000
Subordinate resources:    AS: 270003
                          IP: 24.152.58.0/23
                          IP: 189.50.210.0/24
                          IP: 2803:b1e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15057203 (0xe5c133)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 15 17:00:07 2023 GMT
            Not After : Mar 20 18:05:40 2024 GMT
        Subject: CN=2a1acb517753fee30cfdad7733fba319d387546f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ec:99:5f:9f:03:7a:61:2e:ab:ad:0f:cc:b1:
                    46:b1:3f:29:5b:9c:1a:0e:19:55:7a:90:7d:98:f2:
                    5d:5b:b1:96:ab:b9:41:c3:dc:56:53:72:bf:84:ff:
                    f2:44:5d:ef:a0:63:eb:35:af:fc:e9:c0:d4:e6:cf:
                    b7:f2:5a:cb:6c:6c:1c:50:e0:45:c0:6c:18:4b:cc:
                    04:10:72:a5:c6:cf:48:a3:a6:0b:75:bb:27:15:19:
                    a0:ad:1c:10:37:ce:9e:68:c6:42:1b:2f:e2:b9:3e:
                    41:5d:e5:d8:7b:2d:31:d8:dd:34:bc:f2:64:27:30:
                    f6:d2:ac:b4:30:d5:91:00:a9:a7:cb:21:23:d7:36:
                    e7:f5:90:3a:15:7b:c6:2e:4f:50:22:87:73:22:1e:
                    4a:a4:82:9e:71:2f:f1:0c:13:3a:a8:59:02:27:47:
                    36:0c:63:e9:07:1a:ba:31:32:85:a7:f2:2e:32:7a:
                    33:b0:3e:ce:bd:24:e3:22:67:61:b6:b5:90:75:79:
                    78:c9:7c:eb:06:58:2a:2e:32:80:61:e6:f3:fc:f8:
                    ed:1a:07:5f:1a:83:67:11:16:0d:e5:a3:9d:dc:d7:
                    9d:71:8f:7d:f0:cf:6b:45:43:de:2a:44:9a:07:a4:
                    e8:6b:43:fb:40:52:78:79:40:a6:be:fe:15:ab:ee:
                    d9:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:F3:B8:D6:46:DB:60:C5:8F:FD:42:0E:08:7E:02:45:32:E2:3E:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ece54aeb-e964-492d-a3d3-5aec8feb674d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ece54aeb-e964-492d-a3d3-5aec8feb674d/2a1acb517753fee30cfdad7733fba319d387546f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.152.58.0/23
                  189.50.210.0/24
                IPv6:
                  2803:b1e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270003

    Signature Algorithm: sha256WithRSAEncryption
         b4:c7:85:0b:d7:cb:7b:ea:28:a5:ce:9b:58:a6:59:52:d3:88:
         b9:e3:2c:80:4d:5c:47:38:82:9c:8b:b9:e8:cb:63:9a:ab:09:
         8d:ab:8b:46:cd:5a:34:30:bd:9f:4d:f2:59:40:7a:6f:76:b0:
         2d:00:80:44:aa:ed:6b:34:3e:4c:6f:38:21:8e:1e:9a:41:42:
         49:71:4d:e9:09:e1:1c:aa:d2:66:f7:3e:11:19:27:51:ac:bb:
         11:c8:a8:ee:f7:ae:80:1d:1b:f8:7e:b1:e1:dc:96:a3:0b:b4:
         f7:53:c3:f8:0e:37:b4:3a:ad:16:37:ee:0c:4b:e3:f6:6f:7e:
         c8:c7:02:2d:8a:4d:53:37:db:10:b1:33:da:2e:91:84:04:87:
         a7:1a:f6:dd:be:69:60:67:29:e5:14:f7:a6:f9:5c:14:e2:2d:
         ae:ce:33:66:d9:8a:71:43:bc:f7:73:6d:4b:29:11:e4:d4:15:
         e1:50:bc:b8:89:94:fe:38:3c:a3:ed:7f:a3:7a:6e:dc:a5:f9:
         5f:b9:eb:a2:f5:7b:18:88:26:a8:60:94:24:e4:4c:27:2d:2e:
         b8:ac:d1:d0:fd:6f:3e:ca:af:da:04:89:5e:a6:70:9b:7c:8c:
         1f:07:52:22:7d:77:67:97:70:e8:12:d8:2a:b5:ea:c4:aa:fe:
         92:c1:2f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----