Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33844bc7d8cd507f9860bd888963066293f86ef7.cer
File:                     33844bc7d8cd507f9860bd888963066293f86ef7.cer (raw, json)
Hash identifier:          k+ngL3wBtcEefqWfkb5CmrEZkn011QyJRWKuipbG5vk=
Subject key identifier:   1B:5A:9D:32:A5:F1:EE:7A:BE:EF:AF:B8:AC:D7:12:71:10:BE:88:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE65C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4a49deb6-60b7-4a7e-ae6c-b7a9ee19b5f7/33844bc7d8cd507f9860bd888963066293f86ef7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4a49deb6-60b7-4a7e-ae6c-b7a9ee19b5f7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 13:40:33 +0000
Certificate not after:    Sun 05 Jan 2025 19:39:56 +0000
Subordinate resources:    AS: 263249
                          IP: 191.102.32.0/22
                          IP: 2803:ca80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15623621 (0xee65c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 13:40:33 2023 GMT
            Not After : Jan  5 19:39:56 2025 GMT
        Subject: CN=33844bc7d8cd507f9860bd888963066293f86ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:10:7b:08:6c:06:1e:52:44:8b:69:19:23:74:
                    66:e0:23:69:c1:82:cb:4b:8b:4f:67:58:b8:c2:0a:
                    5a:c0:d9:85:cb:49:49:1d:6b:b4:a6:fb:4b:db:f2:
                    b5:5b:d7:8b:cf:28:2a:29:9b:e6:b6:35:53:7a:be:
                    62:0a:87:1b:ac:eb:8c:e9:2b:cd:25:0c:cc:4d:89:
                    fd:c1:4a:6f:06:f2:9e:09:de:df:13:9e:8c:4e:fd:
                    d7:f3:7b:98:79:0c:f4:96:dc:63:6d:b1:84:3f:49:
                    ad:92:4e:4f:80:02:76:33:dd:f0:e5:22:0f:23:21:
                    51:fb:99:25:fb:70:ff:0e:99:ef:58:e0:e8:f1:0a:
                    c9:72:9e:24:a0:25:de:4c:2c:b2:28:03:2f:0d:f6:
                    f2:d9:cc:f1:6d:c2:a4:03:19:43:87:f4:ed:d4:ea:
                    12:97:86:ee:7e:3a:5d:45:35:57:fa:73:15:d9:39:
                    78:0f:7e:d9:f4:27:b4:ae:cb:dd:48:fc:9c:b0:8b:
                    7c:53:c1:1f:3a:fb:e2:35:9c:ff:19:9a:4f:85:ff:
                    9f:18:91:f2:8b:12:07:85:ec:6d:5d:90:f2:94:62:
                    31:9c:90:cd:71:30:f0:b2:c2:3b:00:10:c8:44:e7:
                    99:12:82:50:4b:dc:52:3d:76:c4:5f:b2:25:46:25:
                    de:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:5A:9D:32:A5:F1:EE:7A:BE:EF:AF:B8:AC:D7:12:71:10:BE:88:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4a49deb6-60b7-4a7e-ae6c-b7a9ee19b5f7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4a49deb6-60b7-4a7e-ae6c-b7a9ee19b5f7/33844bc7d8cd507f9860bd888963066293f86ef7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.102.32.0/22
                IPv6:
                  2803:ca80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263249

    Signature Algorithm: sha256WithRSAEncryption
         5b:fa:bd:42:a7:3a:4a:bf:52:ab:f0:70:da:66:cf:ca:ec:31:
         bd:3d:a5:c8:57:0b:66:51:d9:0d:08:15:49:fc:c4:de:5d:43:
         8a:80:73:9b:5c:d6:66:4f:47:be:aa:6d:44:ed:1b:f1:30:e9:
         06:ae:9e:d4:94:65:9a:ef:55:1b:cf:ed:a4:7a:4c:62:76:8a:
         69:4d:f6:2d:0e:ce:82:34:eb:b9:ca:8f:a0:0e:73:d2:25:3a:
         a6:43:c9:0e:a4:81:24:2c:82:60:08:39:f7:07:a3:79:b3:d9:
         f4:a0:0e:3d:e3:5f:e4:71:fa:cb:71:7a:04:d6:4a:14:9a:9d:
         a0:3d:fe:8c:ee:d9:ca:20:62:ae:c8:ec:67:f8:fc:7a:c2:15:
         5d:a2:51:a0:c0:55:cc:34:12:08:bb:e5:df:34:50:69:a1:97:
         8e:ab:10:55:a6:b6:0f:86:c4:19:a2:54:17:cf:47:8c:96:1c:
         1d:19:66:a6:23:6e:8c:7e:0f:75:93:06:34:52:05:21:74:73:
         e0:92:ad:0b:57:19:10:c9:3d:c0:84:e2:72:7b:71:78:ca:33:
         58:9b:32:c6:00:21:b3:57:1d:03:5e:2a:29:22:7c:9f:86:60:
         6e:34:21:9d:39:82:e3:40:50:c7:a6:bf:2c:cf:89:0b:cd:c1:
         c5:aa:36:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----