Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a3b95fe9d581b4e12edf0884b053a4b1728b654.cer
File:                     2a3b95fe9d581b4e12edf0884b053a4b1728b654.cer (raw, json)
Hash identifier:          SGfhZLZUk5mHcnouVWNp9FdLU7D1Cjji7sMGMYFLjJk=
Subject key identifier:   60:88:E4:08:DE:AC:31:7B:2C:3D:1F:07:AD:A7:2D:F5:F1:80:9C:15
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD016A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/2a3b95fe9d581b4e12edf0884b053a4b1728b654.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 24 Jan 2023 18:04:14 +0000
Certificate not after:    Sun 29 Sep 2024 04:36:45 +0000
Subordinate resources:    AS: 265561
                          IP: 45.167.92.0/22
                          IP: 2806:30f::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14483818 (0xdd016a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 24 18:04:14 2023 GMT
            Not After : Sep 29 04:36:45 2024 GMT
        Subject: CN=2a3b95fe9d581b4e12edf0884b053a4b1728b654
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:b0:62:22:16:6c:b0:d6:09:d9:be:95:1b:
                    ff:ad:a9:35:7d:b2:82:fc:c1:fb:48:3d:6e:65:05:
                    22:5d:93:40:81:8b:8b:eb:e4:10:a7:28:4c:3c:30:
                    c1:51:de:c6:6c:04:49:e6:8b:fc:10:94:3b:75:75:
                    43:6a:1d:75:aa:d3:38:42:ee:03:61:c6:6d:dc:3e:
                    06:aa:54:f7:c5:eb:8a:bc:f6:32:09:0c:9c:36:fb:
                    06:ed:cf:0f:b4:65:6e:01:3c:12:84:56:81:bd:41:
                    51:7b:07:43:d1:05:e9:e5:d9:84:af:40:72:55:a2:
                    70:f0:b9:42:9f:a2:e7:d9:a5:a3:da:f8:7b:ca:8a:
                    f5:3e:c7:ba:63:12:d7:c7:31:8a:d3:7e:7d:96:46:
                    fb:02:65:06:00:12:25:45:d0:5d:d7:93:29:75:39:
                    88:58:3d:38:37:ed:d7:c8:14:1b:73:06:b2:fd:e8:
                    90:35:f6:b3:ad:66:06:7f:8e:36:af:73:d2:5a:f4:
                    cf:82:ec:bd:b8:5c:b7:69:4a:a1:2e:6e:27:da:28:
                    c9:c0:0a:46:6c:84:18:a5:1a:ed:9e:fe:18:4a:ba:
                    61:59:5a:0b:95:c5:df:c2:46:47:82:51:75:7a:74:
                    15:b3:f6:54:e0:e1:8d:05:ea:12:33:56:09:49:dc:
                    56:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:88:E4:08:DE:AC:31:7B:2C:3D:1F:07:AD:A7:2D:F5:F1:80:9C:15
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3d253a6-f9c8-4f37-802c-e6ef5e5eb001/2a3b95fe9d581b4e12edf0884b053a4b1728b654.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.92.0/22
                IPv6:
                  2806:30f::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265561

    Signature Algorithm: sha256WithRSAEncryption
         16:33:2b:9c:ab:e2:c1:8f:d1:04:d1:1e:3b:77:7a:ae:63:72:
         1f:84:c2:6c:ef:00:3e:04:bd:df:f4:c4:05:a8:25:f5:d4:bf:
         52:9d:1d:bd:c1:99:dc:44:96:aa:ac:34:f6:4a:bb:0d:5d:2c:
         29:05:5d:71:0c:c0:16:6f:62:b8:54:f3:1f:ba:b7:89:1f:9a:
         fd:d7:bc:c2:1d:83:de:0f:b5:18:90:ae:91:7e:ee:e2:b3:e1:
         2a:1a:74:56:b4:ac:94:5c:b7:a2:04:30:15:3f:0c:1d:68:98:
         c2:99:ea:9d:b8:95:ca:ac:79:bf:58:e2:23:9a:b1:c5:64:6a:
         fa:2d:85:4d:a9:f0:fd:ed:e7:3a:aa:c6:a3:08:2c:87:48:44:
         84:4c:7f:fc:df:e2:99:ef:6a:6c:89:af:10:85:c8:04:0e:63:
         77:a7:b0:8e:d1:b7:b8:25:4a:e2:76:af:9e:47:d5:2d:b8:53:
         94:69:97:1b:a8:e2:92:4a:cd:9e:9e:1d:eb:4f:a4:d6:ef:b9:
         5f:6d:d4:82:da:a3:fa:8b:95:f0:66:8f:a5:6c:8c:f3:15:25:
         ff:0c:27:04:05:a2:d4:b5:f9:07:2c:43:e1:22:80:36:ea:3a:
         11:6e:d9:cf:04:74:74:ac:07:05:be:3e:0c:e4:72:95:af:d6:
         c9:d9:04:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----