Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32b7dede0ee425fb7f77655ae699df21e4d9273b.cer
File:                     32b7dede0ee425fb7f77655ae699df21e4d9273b.cer (raw, json)
Hash identifier:          oSbZM6wrisrcLZlXRSuoYxIi+Ve36fD3wSD6avV4iWc=
Subject key identifier:   8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E954E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/32b7dede0ee425fb7f77655ae699df21e4d9273b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Jun 2022 14:39:31 +0000
Certificate not after:    Mon 10 Jun 2024 20:40:21 +0000
Subordinate resources:    AS: 270080
                          IP: 186.195.247.0/24
                          IP: 191.241.62.0/23
                          IP: 2803:be0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15291623 (0xe954e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 30 14:39:31 2022 GMT
            Not After : Jun 10 20:40:21 2024 GMT
        Subject: CN=32b7dede0ee425fb7f77655ae699df21e4d9273b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:32:ba:46:53:b1:e1:1e:a0:61:60:3a:99:5f:
                    0d:e2:a8:82:2b:b6:e2:2c:da:c9:c4:0b:4e:dc:1e:
                    5b:fc:16:e9:88:a8:8e:c8:3d:59:43:db:78:5d:36:
                    3b:76:6c:24:a2:5a:e3:cb:fa:de:e9:ad:94:43:be:
                    61:9b:8d:d5:c7:b4:eb:d3:5e:a2:94:ed:ad:f4:9d:
                    b0:e8:89:c6:69:9c:01:85:86:8b:20:27:f9:b5:d8:
                    6e:e8:9d:cd:9e:39:a0:d2:78:41:24:10:22:97:f9:
                    94:97:12:88:10:35:3f:b7:fc:83:bf:0b:13:7f:ea:
                    b0:8a:35:35:c9:88:8f:1e:8c:38:d5:59:fc:32:6e:
                    ca:73:aa:51:27:78:3e:21:8f:8b:c4:7d:20:32:5d:
                    8c:e5:27:04:b4:9a:74:14:72:a3:3b:0d:3e:64:d1:
                    c6:f7:76:a1:60:1a:7f:90:53:b9:ed:1f:6f:48:f4:
                    5f:97:a2:e7:af:1d:c1:8c:98:2a:d7:11:26:eb:5c:
                    70:88:f3:5e:ed:3d:eb:be:d2:de:3a:fc:ff:78:73:
                    02:a0:af:bb:e8:9d:95:68:b0:97:a3:41:ea:99:9a:
                    45:4b:a7:45:30:2a:ce:d5:4f:83:d7:4d:77:5b:09:
                    f7:d5:94:75:75:68:7a:cb:e8:7f:55:8b:22:82:f9:
                    6e:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:4C:F3:18:96:14:32:80:C7:4E:47:1C:52:24:2B:74:70:DA:79:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e88b7959-c9d1-4871-85ef-a042c98b1996/32b7dede0ee425fb7f77655ae699df21e4d9273b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.195.247.0/24
                  191.241.62.0/23
                IPv6:
                  2803:be0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270080

    Signature Algorithm: sha256WithRSAEncryption
         7c:66:9f:74:d2:60:be:52:4b:ca:34:ec:13:29:05:54:0d:ea:
         ef:63:31:9e:ab:42:4d:a1:b9:c4:8d:f6:bf:8c:df:b9:b9:35:
         f2:2c:79:cb:ef:17:a2:28:21:09:b9:14:a0:68:0d:90:10:e9:
         18:df:f6:64:68:23:41:75:d5:35:e9:5f:15:4c:6e:8c:5e:29:
         52:32:5e:0b:a8:bb:5e:f0:07:25:f1:7a:40:1f:4f:11:8d:aa:
         cb:38:1b:2f:b6:94:bd:60:3b:87:cf:fc:13:41:10:bd:ee:be:
         80:37:65:dd:7f:4e:09:a3:bf:39:b0:b1:c7:ff:47:a4:b8:84:
         cc:31:f9:73:d6:f1:66:52:77:bf:ac:69:fc:2d:78:e0:48:29:
         22:ca:4a:34:5b:0b:8d:88:28:91:ec:0b:cb:c3:36:b3:02:64:
         51:2f:eb:d8:1c:4b:2f:0c:a2:2f:56:63:37:01:7e:25:cc:ee:
         14:4a:e7:29:dc:b0:34:83:8f:26:2e:34:88:db:c6:a8:fe:ea:
         5c:a2:9d:7a:75:5f:8e:28:fe:69:26:6d:a2:1a:c4:b7:7e:4d:
         e5:42:31:7d:00:74:d5:0a:d9:e2:32:39:30:b4:86:9c:29:24:
         1b:e5:bd:d3:5a:5a:b6:f8:52:9e:66:fc:53:81:24:52:33:44:
         62:64:18:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----