Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3098f1be5c71093ee297851f7b711b67ca6390cc.cer
File:                     3098f1be5c71093ee297851f7b711b67ca6390cc.cer (raw, json)
Hash identifier:          xx3QCOOcpR6dMTN3zsbtw3AswsnHrtv+nKEhSyzBgiM=
Subject key identifier:   80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01090308
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/3098f1be5c71093ee297851f7b711b67ca6390cc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Feb 2024 01:21:34 +0000
Certificate not after:    Sun 23 Feb 2025 00:01:01 +0000
Subordinate resources:    AS: 265582
                          IP: 45.174.248.0/22
                          IP: 2806:337::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17367816 (0x1090308)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  1 01:21:34 2024 GMT
            Not After : Feb 23 00:01:01 2025 GMT
        Subject: CN=3098f1be5c71093ee297851f7b711b67ca6390cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f6:e7:07:89:17:1f:3e:8c:ee:ae:1e:2c:11:
                    75:a2:81:6f:4f:54:db:4e:92:1d:72:e8:cf:c0:05:
                    c9:75:44:22:34:e7:66:72:ae:fd:32:2f:33:fe:81:
                    5f:80:c0:32:15:b5:da:6e:4f:47:26:5f:b5:20:96:
                    47:1a:f1:e8:cf:9d:1e:c9:e0:47:21:d2:cc:90:e6:
                    d3:07:e2:42:f7:6d:a6:9c:66:b4:80:a4:38:14:1d:
                    a5:a6:95:81:69:81:4f:f6:3a:3d:e7:2b:85:14:55:
                    6d:93:5e:a6:28:f8:d7:f7:6a:2c:4b:ef:96:a9:08:
                    a7:68:7b:68:e6:1e:2b:af:49:d9:82:60:be:2b:5d:
                    9c:13:78:76:b0:64:07:6b:f9:59:fc:f4:b1:1c:c0:
                    29:b3:31:3a:e4:64:75:6c:90:29:fd:35:5a:9b:fa:
                    0a:f3:c3:14:88:0e:85:0d:8a:fc:70:61:c6:fe:f0:
                    8b:e5:e1:98:4f:ae:54:02:cf:c9:e4:11:bf:d5:37:
                    70:06:82:bc:07:17:a0:ab:48:60:0e:62:52:6e:66:
                    e3:13:96:32:87:3f:c6:ee:01:84:fe:23:b8:f6:da:
                    44:8b:29:29:b0:0f:7d:6a:34:15:b3:3f:ff:4e:11:
                    92:60:0e:5a:9f:8a:4e:01:5d:43:fc:c4:f3:ee:68:
                    26:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:0E:E1:D6:B4:1F:28:41:0A:23:C8:72:9B:28:3D:65:2D:EC:72:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b966cb2d-708c-409e-bb8e-813e9725edc3/3098f1be5c71093ee297851f7b711b67ca6390cc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.248.0/22
                IPv6:
                  2806:337::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265582

    Signature Algorithm: sha256WithRSAEncryption
         8a:b0:a8:c7:09:2e:67:a1:29:a7:c0:89:85:6d:c4:c0:a1:86:
         d9:9c:7a:45:8a:c6:9d:f0:b0:ab:bd:a6:ef:60:db:f7:8a:12:
         f8:fe:d0:56:b6:48:ee:36:a5:f2:30:92:7c:46:ff:b3:b4:ff:
         e0:b9:f3:4f:67:0d:cb:ce:06:f0:0a:83:ba:27:3c:49:eb:99:
         69:4d:9d:fd:e0:34:f9:92:d5:2a:23:83:e0:67:04:77:51:1c:
         0e:cb:32:66:69:4f:b7:4b:f4:7d:6f:ee:69:7b:fa:ce:ed:98:
         21:2f:19:39:93:0f:36:1c:72:b6:f1:98:66:7a:3d:a2:6c:f5:
         83:59:fc:ca:51:2b:86:2a:30:77:bc:6e:9b:a6:60:3d:df:1b:
         28:8e:cf:e2:bb:ff:8e:c5:d4:ec:ac:8e:2b:34:b0:9e:c6:a6:
         85:91:c8:70:71:6c:08:e6:59:2f:27:36:ba:86:27:41:47:ac:
         2c:8f:d1:0b:a9:5d:3a:a8:f8:84:fc:5f:05:49:bd:cc:ef:8a:
         a2:fe:bd:a6:71:54:f6:7c:c1:d2:1f:ec:26:c8:ce:69:a6:31:
         83:8c:ef:fd:0f:74:09:08:0e:bd:14:c1:79:ef:50:52:62:5e:
         57:a7:dc:be:93:ac:a3:2e:be:9b:33:f0:15:6c:02:7f:70:14:
         41:cf:28:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----