Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2be966f827b9a5497e87a7c4d2832bcc3c133424.cer
File:                     2be966f827b9a5497e87a7c4d2832bcc3c133424.cer (raw, json)
Hash identifier:          0ac3fCSJroWEjplw52TGznAOlRxkecn0A4RjQYNV6Tw=
Subject key identifier:   02:97:43:19:13:4C:BE:97:4D:D0:F5:C9:FE:50:B4:5B:FC:A1:99:5E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF0756
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d8772d76-0607-40ff-b0a8-49915afac463/2be966f827b9a5497e87a7c4d2832bcc3c133424.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d8772d76-0607-40ff-b0a8-49915afac463/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:50:47 +0000
Certificate not after:    Tue 25 Mar 2025 15:00:00 +0000
Subordinate resources:    AS: 22381
                          AS: 28320
                          IP: 131.108.184.0/22
                          IP: 170.78.232.0/22
                          IP: 177.126.0.0/24
                          IP: 177.126.2.0 -- 177.126.5.255
                          IP: 177.126.7.0/24
                          IP: 177.126.9.0/24
                          IP: 177.126.12.0/24
                          IP: 177.126.14.0/24
                          IP: 187.120.0.0 -- 187.120.11.255
                          IP: 187.120.13.0 -- 187.120.15.255
                          IP: 189.39.208.0/21
                          IP: 189.39.220.0/22
                          IP: 200.150.160.0/22
                          IP: 200.150.166.0/24
                          IP: 200.150.168.0/24
                          IP: 200.150.171.0/24
                          IP: 200.150.173.0/24
                          IP: 201.87.129.0 -- 201.87.130.255
                          IP: 201.87.132.0/24
                          IP: 201.87.138.0/24
                          IP: 201.87.143.0/24
                          IP: 201.87.145.0/24
                          IP: 201.87.151.0/24
                          IP: 201.87.154.0 -- 201.87.156.255
                          IP: 201.87.158.0/23
                          IP: 2804:368::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16713558 (0xff0756)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:50:47 2023 GMT
            Not After : Mar 25 15:00:00 2025 GMT
        Subject: CN=2be966f827b9a5497e87a7c4d2832bcc3c133424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:4c:6e:4a:3a:a5:39:0e:4c:0c:e9:7b:99:88:
                    ed:14:ad:3a:1d:b3:45:81:be:91:7c:16:c4:58:24:
                    00:ad:c0:78:14:01:87:39:0c:27:f6:c3:8a:d3:06:
                    f2:ac:f5:66:65:f4:9f:e5:b2:80:0f:e9:8e:ea:38:
                    d2:a1:e1:bc:25:67:2a:5e:dd:81:f3:b4:f7:d9:5c:
                    fe:28:6d:50:d6:05:a7:85:86:76:cc:7a:1f:4e:a2:
                    3e:0c:df:9c:23:61:7d:37:ff:32:d3:9b:b2:8a:22:
                    b9:46:cd:18:52:55:a8:23:c1:34:87:fa:d5:66:80:
                    88:09:b2:27:da:2d:8b:37:35:c9:1d:11:fa:5b:85:
                    ef:83:85:b7:9b:fa:4c:a8:e7:2d:f4:ae:28:8d:30:
                    3f:35:be:1c:a2:b2:97:f3:02:e1:ca:66:ad:ef:af:
                    ae:61:01:b8:97:d6:5d:ef:0d:68:7e:35:21:13:e5:
                    65:e7:38:32:0c:0d:23:d7:b9:8b:36:d2:be:4a:d7:
                    b4:66:1c:ee:c8:bc:55:24:c3:89:95:ef:9d:c3:ac:
                    73:06:93:31:85:39:1c:63:3c:2a:12:be:2c:a3:e0:
                    7b:23:8e:95:b8:d9:dd:1f:bc:1f:69:b9:29:47:c1:
                    af:c3:ba:76:37:f8:57:b0:47:21:c7:45:21:90:52:
                    12:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:97:43:19:13:4C:BE:97:4D:D0:F5:C9:FE:50:B4:5B:FC:A1:99:5E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d8772d76-0607-40ff-b0a8-49915afac463/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d8772d76-0607-40ff-b0a8-49915afac463/2be966f827b9a5497e87a7c4d2832bcc3c133424.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.184.0/22
                  170.78.232.0/22
                  177.126.0.0/24
                  177.126.2.0-177.126.5.255
                  177.126.7.0/24
                  177.126.9.0/24
                  177.126.12.0/24
                  177.126.14.0/24
                  187.120.0.0-187.120.11.255
                  187.120.13.0-187.120.15.255
                  189.39.208.0/21
                  189.39.220.0/22
                  200.150.160.0/22
                  200.150.166.0/24
                  200.150.168.0/24
                  200.150.171.0/24
                  200.150.173.0/24
                  201.87.129.0-201.87.130.255
                  201.87.132.0/24
                  201.87.138.0/24
                  201.87.143.0/24
                  201.87.145.0/24
                  201.87.151.0/24
                  201.87.154.0-201.87.156.255
                  201.87.158.0/23
                IPv6:
                  2804:368::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22381
                  28320

    Signature Algorithm: sha256WithRSAEncryption
         0d:70:0f:b9:98:96:eb:d5:4f:a9:5e:02:1e:b0:97:eb:14:0f:
         67:1b:91:3e:84:34:eb:6a:47:d9:82:cc:a5:e5:f7:43:2b:ae:
         80:87:5c:b9:c9:1a:b0:4d:cc:36:d3:bd:60:3e:83:5b:14:ad:
         05:2d:00:b9:19:32:16:13:6e:7e:e6:ee:49:6c:12:2e:95:c7:
         94:16:32:0d:87:99:20:9f:1f:17:c5:5f:62:eb:52:c9:4f:77:
         ab:e1:49:5c:d2:95:0c:1c:fb:a4:43:f8:60:0a:1d:a3:5b:de:
         ed:f4:fc:f8:a1:ec:e8:41:5d:e0:84:b7:a5:ec:39:3c:a5:00:
         90:d2:b4:bd:00:b9:b7:9a:9f:66:ff:62:3f:1f:6a:70:67:5b:
         dc:76:df:8b:ba:6e:34:e4:93:b9:7a:ed:15:29:51:79:a2:d9:
         c4:a3:2d:8d:b5:42:bd:3b:d1:49:2c:3c:5d:d1:9d:9f:59:f2:
         21:35:2f:71:2e:6a:e6:32:dd:2f:8e:76:bb:20:71:18:63:fe:
         6e:21:8f:64:65:7c:b8:10:ce:34:8a:ea:a0:78:03:94:1d:16:
         8b:94:5a:1f:a0:1c:23:cb:da:54:35:47:d4:ab:28:06:2d:d6:
         8a:e1:5e:d2:16:3e:8f:0d:5f:88:c9:38:5e:02:6d:06:52:20:
         5b:72:0f:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----