Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2cb1f8f0ab557791cd1caf685cc3fbebd9778444.cer
File:                     2cb1f8f0ab557791cd1caf685cc3fbebd9778444.cer (raw, json)
Hash identifier:          ECJXA9vnPRYPZ/QA8Fa5pW/td2DZ7sjymmyzFbmGi9I=
Subject key identifier:   FA:0B:A7:38:E0:63:2C:3C:6B:CD:A7:FB:05:BA:08:EC:33:2C:8C:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E74FF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/69a54d4b-b226-4acb-88e4-144f76e840b0/2cb1f8f0ab557791cd1caf685cc3fbebd9778444.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/69a54d4b-b226-4acb-88e4-144f76e840b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Apr 2023 01:30:50 +0000
Certificate not after:    Sat 22 Feb 2025 00:47:52 +0000
Subordinate resources:    AS: 272126
                          IP: 190.113.63.0/24
                          IP: 2803:3f10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15159289 (0xe74ff9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 26 01:30:50 2023 GMT
            Not After : Feb 22 00:47:52 2025 GMT
        Subject: CN=2cb1f8f0ab557791cd1caf685cc3fbebd9778444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4e:ba:f1:e2:2f:e3:7a:88:86:3e:5e:e6:8e:
                    79:d3:f6:6a:c0:93:28:d4:e5:16:5d:8b:4a:b7:ab:
                    64:cd:0c:b7:e2:0f:37:b8:fd:61:1c:81:81:7c:b8:
                    6a:3b:01:85:1d:f7:c7:80:ee:54:17:5c:9c:58:5d:
                    eb:2b:4c:5f:27:21:28:c5:49:00:b4:75:b0:97:3f:
                    32:22:7b:d2:bd:96:2e:c9:36:0d:d7:ff:bb:1e:54:
                    94:8a:7d:78:66:1d:88:e7:d6:7b:c5:4e:ce:74:87:
                    8c:ed:0c:e2:d3:a6:a5:d6:9b:26:7b:6d:b2:30:fd:
                    7d:fe:fa:01:39:01:67:99:d5:74:74:92:48:22:fd:
                    30:f6:6a:ff:63:d3:0d:31:b5:41:5f:90:ed:12:75:
                    c7:9b:16:db:df:67:d8:ac:b9:85:6d:94:29:18:3d:
                    16:dd:03:d1:72:4c:a3:b9:37:ac:90:d1:26:f3:39:
                    e5:51:68:61:d7:97:6f:99:ab:1e:cd:a3:df:36:de:
                    b5:36:92:32:06:b5:39:b4:b6:6c:be:99:3d:b8:68:
                    89:ff:e8:4b:1e:35:9e:3b:4c:b7:02:a7:dd:38:c8:
                    f9:9d:6b:1e:42:8a:df:2d:3c:67:f7:f4:65:7d:8c:
                    9b:5f:6e:0b:14:c0:51:7a:97:fa:25:df:a7:16:2d:
                    4c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0B:A7:38:E0:63:2C:3C:6B:CD:A7:FB:05:BA:08:EC:33:2C:8C:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/69a54d4b-b226-4acb-88e4-144f76e840b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/69a54d4b-b226-4acb-88e4-144f76e840b0/2cb1f8f0ab557791cd1caf685cc3fbebd9778444.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.113.63.0/24
                IPv6:
                  2803:3f10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272126

    Signature Algorithm: sha256WithRSAEncryption
         16:85:a2:14:a9:6a:ef:22:90:71:78:72:a1:2d:ac:99:d2:4e:
         a9:08:58:2d:ba:db:94:c5:5d:11:b9:31:33:5b:7d:c6:f8:86:
         66:8d:d4:f5:4c:30:7a:9e:99:bc:ca:c2:c1:ba:c8:36:f9:7a:
         08:81:b5:79:69:06:cf:fb:44:f5:d8:da:dc:a7:97:67:35:d6:
         16:c2:ba:d2:56:02:d6:df:70:07:02:55:9b:85:2b:30:73:eb:
         b5:1b:b9:a3:8d:91:a5:2a:f8:43:30:bf:ae:77:dd:e2:39:85:
         02:d8:49:5c:09:fb:b0:95:8a:c5:44:2b:d0:73:66:c3:5d:b6:
         61:9d:14:1b:8a:09:d9:d3:91:9e:57:74:39:9b:d5:85:b5:aa:
         65:b3:ba:b9:a3:bf:2f:55:72:e2:a3:4a:83:bd:ce:36:b7:5f:
         c7:f2:79:64:61:3f:15:07:eb:b4:56:bd:92:eb:7d:1a:7b:32:
         54:ee:82:23:d5:5c:0e:6b:e0:89:c3:3a:cf:0a:8c:db:71:53:
         ae:f4:e4:c8:ab:20:f0:95:b0:c1:24:ab:ae:ae:3e:41:de:71:
         d3:a1:24:59:f4:f5:0c:5c:b9:2f:9a:db:29:f6:b1:39:82:68:
         8c:f3:20:e4:e6:ca:d3:01:8d:e2:0e:0e:73:59:55:e9:c0:0c:
         3a:38:8c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----