Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c21d722bd00272b9fb52ed4267fb7e4167915d.cer
File:                     32c21d722bd00272b9fb52ed4267fb7e4167915d.cer (raw, json)
Hash identifier:          eWKFKRVmaMj3BIW5n0x/Sukx/8OZHJjhkm6Gh+r5K4g=
Subject key identifier:   44:99:5F:7A:B9:39:D5:AA:F8:C1:76:58:5B:7B:84:C1:CE:AB:A0:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F21266
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/864e1d49-093c-4c7b-bfc0-c005b6eb229d/32c21d722bd00272b9fb52ed4267fb7e4167915d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/864e1d49-093c-4c7b-bfc0-c005b6eb229d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 12:30:22 +0000
Certificate not after:    Wed 30 Apr 2025 22:15:42 +0000
Subordinate resources:    AS: 265759
                          IP: 131.196.192.0/22
                          IP: 2803:3bc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15864422 (0xf21266)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 18 12:30:22 2023 GMT
            Not After : Apr 30 22:15:42 2025 GMT
        Subject: CN=32c21d722bd00272b9fb52ed4267fb7e4167915d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:56:22:b1:bf:57:cf:92:1f:cf:d2:c8:4e:79:
                    27:29:ad:89:a0:e0:94:a6:3b:d3:cd:1d:47:d8:6e:
                    aa:98:93:3b:0e:51:8e:c4:1f:c1:ff:55:c3:59:93:
                    82:55:ca:20:11:d7:73:8a:88:80:d4:96:6e:da:d4:
                    3a:78:ca:c9:fd:36:28:00:60:65:fe:36:1a:22:56:
                    c1:b0:68:04:66:cc:45:77:b4:5a:94:a7:14:f5:b8:
                    cd:31:c0:d2:fa:f4:fc:9d:b5:34:ad:f3:c9:15:72:
                    4b:60:e5:4c:17:57:b5:54:e8:94:b3:a9:dc:e3:9d:
                    9b:f4:32:24:98:bf:4a:32:4a:37:b8:fa:2f:43:78:
                    69:7f:0b:e8:26:d1:6c:d8:40:d0:61:cf:c7:44:c7:
                    3e:b2:74:3b:8c:f2:32:23:02:12:a5:f6:fa:59:66:
                    a8:6c:7f:10:ae:dc:52:92:34:e8:b8:13:ba:9a:51:
                    0a:bc:06:f0:c9:c0:49:9a:86:16:7e:b5:dc:ec:1d:
                    bb:d5:15:5b:3d:31:c6:4b:0f:b8:fb:e8:7a:04:28:
                    e2:cd:18:59:61:24:79:6e:2f:e8:0e:66:40:ad:a7:
                    53:f6:e8:56:41:0a:89:79:dd:7b:5e:c3:28:7b:1d:
                    20:4c:75:c8:6c:f5:3e:a5:b5:69:a9:ac:85:15:d9:
                    d4:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:99:5F:7A:B9:39:D5:AA:F8:C1:76:58:5B:7B:84:C1:CE:AB:A0:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/864e1d49-093c-4c7b-bfc0-c005b6eb229d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/864e1d49-093c-4c7b-bfc0-c005b6eb229d/32c21d722bd00272b9fb52ed4267fb7e4167915d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.192.0/22
                IPv6:
                  2803:3bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265759

    Signature Algorithm: sha256WithRSAEncryption
         66:80:04:f8:42:a2:82:9a:e9:08:52:67:e8:91:07:eb:0d:ff:
         bb:14:78:1c:06:8b:f0:5b:ab:a0:49:4a:e7:dd:c6:f4:f9:05:
         37:d1:ea:ca:0c:63:7b:54:7f:64:ad:d0:34:02:38:8c:5d:7e:
         5c:56:a9:63:35:e3:48:fb:1f:ba:ac:72:03:67:6c:75:a4:06:
         14:28:35:3f:c4:a7:53:10:57:0b:db:70:25:d7:b9:4b:64:03:
         9d:c0:18:f2:da:f8:8f:89:9b:72:d2:ec:2e:6b:e2:f8:1a:d0:
         f0:5c:e4:ce:a8:00:02:bf:45:fb:24:c9:ff:3d:27:9a:63:cf:
         6f:30:62:ef:a5:4a:3b:af:b9:1d:a0:d8:f5:2c:67:87:f2:e0:
         78:71:59:7a:0e:2a:72:3a:1b:50:68:53:c9:48:db:e4:66:82:
         47:65:cc:a9:1d:48:86:b4:70:4b:a0:a2:99:4b:83:13:d4:fc:
         14:ca:42:a8:32:bb:5f:a6:43:80:48:8d:63:59:2d:f8:f9:ef:
         f7:e9:58:a5:05:9d:18:13:e4:fe:45:15:a3:99:f4:15:31:e0:
         f5:68:d4:26:0f:80:33:ee:7c:83:52:4e:7b:68:cd:e8:d7:63:
         7d:c0:5c:d7:93:ed:66:a8:5e:5a:55:43:b4:7f:a0:b5:b8:63:
         5a:7d:ea:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----