Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ed45c5071ccf933f657b23db4c8aa63528bfc9b.cer
File:                     2ed45c5071ccf933f657b23db4c8aa63528bfc9b.cer (raw, json)
Hash identifier:          KxWZvSNp6LwBTLGlJLwgCd6ahh5L5sQ//mie55Mu7dk=
Subject key identifier:   FB:E5:AE:C3:53:20:0A:8A:9B:DA:CE:E0:C3:85:4B:39:CE:D5:10:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA4A6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2286423e-bb0b-4ef1-8464-c22f8af64e9c/2ed45c5071ccf933f657b23db4c8aa63528bfc9b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2286423e-bb0b-4ef1-8464-c22f8af64e9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Sep 2023 16:46:08 +0000
Certificate not after:    Fri 13 Jun 2025 15:29:47 +0000
Subordinate resources:    AS: 270084
                          IP: 177.86.142.0/24
                          IP: 186.232.242.0/24
                          IP: 201.131.103.0/24
                          IP: 2803:ebe0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16403052 (0xfa4a6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 20 16:46:08 2023 GMT
            Not After : Jun 13 15:29:47 2025 GMT
        Subject: CN=2ed45c5071ccf933f657b23db4c8aa63528bfc9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:00:a0:ba:6e:52:21:af:d2:88:1e:7a:df:c2:
                    8c:6c:28:d6:94:2b:4a:b6:f4:54:91:56:96:6b:03:
                    09:32:d0:8b:15:ef:0c:58:16:27:cd:f9:bf:6c:30:
                    58:39:ec:6c:36:76:74:79:cd:bb:83:9d:7d:17:28:
                    8b:0b:03:2a:c6:1d:bb:d6:06:f0:97:a5:5b:3c:be:
                    30:4f:25:c4:f2:e7:b7:59:d1:65:68:4d:e1:50:7d:
                    de:96:a7:39:06:38:fc:7c:65:d5:85:4f:59:8c:82:
                    2d:84:68:1a:17:c4:c9:bc:c6:b8:89:16:38:79:2f:
                    15:e9:d2:ae:98:7c:6e:15:a5:b1:a5:ce:5e:b5:20:
                    5a:09:4b:1f:77:89:6d:5a:16:ea:08:41:65:19:0d:
                    87:24:5c:70:be:99:58:c0:51:3c:b7:d1:05:70:e3:
                    35:a7:2f:fa:15:c1:a4:e4:fc:81:9f:32:e9:27:5c:
                    2b:39:88:d6:57:31:58:db:d4:0d:f5:f2:3e:2a:f7:
                    13:13:64:38:06:a8:18:44:22:fc:7c:c6:b1:90:7e:
                    f2:55:fd:f7:1d:e2:0a:d2:cd:c1:15:4b:56:01:44:
                    19:10:94:93:20:f5:77:52:e2:bb:e5:5c:df:35:bd:
                    cb:9d:bd:a0:9b:8f:59:cb:80:35:f7:00:d2:b8:0d:
                    cf:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:E5:AE:C3:53:20:0A:8A:9B:DA:CE:E0:C3:85:4B:39:CE:D5:10:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2286423e-bb0b-4ef1-8464-c22f8af64e9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2286423e-bb0b-4ef1-8464-c22f8af64e9c/2ed45c5071ccf933f657b23db4c8aa63528bfc9b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.86.142.0/24
                  186.232.242.0/24
                  201.131.103.0/24
                IPv6:
                  2803:ebe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270084

    Signature Algorithm: sha256WithRSAEncryption
         1a:12:a7:aa:a9:68:72:bc:30:50:a1:ad:4b:bf:7c:78:01:2f:
         ab:3c:79:56:2c:e5:fc:98:46:f1:32:52:39:16:c5:62:1f:f4:
         9c:3c:52:de:9c:e3:b1:4e:01:2b:15:0a:31:65:8c:19:55:70:
         c4:d0:9f:18:4e:8e:b0:47:2c:50:b3:66:e5:e5:e9:58:da:c4:
         96:5c:af:bb:14:23:29:21:b3:4f:59:57:5c:86:1e:fb:ac:21:
         5e:2a:73:34:ba:94:91:3b:cf:5c:e4:1b:e5:34:b8:7c:0e:f9:
         5f:97:c6:b8:46:6d:aa:20:9a:70:6b:58:6d:0a:b4:01:25:89:
         ec:48:ea:a6:de:32:3a:fa:41:ce:9a:2f:7e:7b:71:cd:11:56:
         09:5f:de:48:2a:6b:5e:1b:d3:1a:3b:33:c6:ad:c8:a2:c3:8b:
         1a:7a:77:e3:87:fa:ee:ea:39:83:c2:50:5a:78:59:27:ac:de:
         d8:43:59:94:30:bc:bb:ae:a3:9e:2e:15:4d:87:46:be:10:ee:
         8a:72:18:e7:8c:ee:ad:8d:fa:c5:81:15:5e:79:af:4f:1b:e8:
         a0:73:01:48:13:4f:06:c1:88:c7:64:8a:7e:f7:b9:b3:9e:8a:
         fb:69:5a:44:87:eb:49:fe:b6:73:65:5b:16:8a:ce:64:d8:bb:
         31:c1:58:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----