Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35dc037ae08e0c89e42663655a324e7aecd823ff.cer
File:                     35dc037ae08e0c89e42663655a324e7aecd823ff.cer (raw, json)
Hash identifier:          bumRp3lR1Pze0PnTA6dg3BBqf2nN5ANHqtEegOBO5lk=
Subject key identifier:   E3:1E:9F:D3:4A:48:94:5C:0B:1E:1F:D8:01:96:47:74:84:CA:9C:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F53527
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ad3f3317-b3ff-4ec4-931e-ced697704a7c/35dc037ae08e0c89e42663655a324e7aecd823ff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ad3f3317-b3ff-4ec4-931e-ced697704a7c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 11:08:47 +0000
Certificate not after:    Mon 11 Nov 2024 17:32:53 +0000
Subordinate resources:    AS: 272050
                          IP: 181.174.238.0/23
                          IP: 181.233.147.0/24
                          IP: 2803:2d10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16069927 (0xf53527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 15 11:08:47 2023 GMT
            Not After : Nov 11 17:32:53 2024 GMT
        Subject: CN=35dc037ae08e0c89e42663655a324e7aecd823ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f8:e4:0e:a8:0f:50:d5:f3:2d:4d:f0:88:1d:
                    00:8d:83:f6:99:ea:48:52:ce:84:62:cc:85:91:04:
                    b1:34:d8:63:09:ee:5c:f0:dc:9f:03:0f:35:24:52:
                    5b:75:62:07:a4:3d:52:37:af:f3:fd:43:8e:03:f7:
                    fa:fb:94:e4:f3:4e:fe:12:17:78:31:02:5e:8b:4d:
                    1f:2b:65:0b:7d:9e:46:b8:12:1e:28:d9:27:90:41:
                    7e:bb:74:b0:e3:ca:c2:b5:42:2e:17:5e:b0:a5:ec:
                    86:26:8d:97:05:3e:9f:2f:cd:48:ec:54:ad:47:b0:
                    b1:7d:e1:5a:21:7d:d6:c9:a0:91:bc:12:0a:8a:c9:
                    52:f3:87:ee:64:88:6e:2e:f3:8f:7d:7f:0c:6c:de:
                    e4:b1:68:df:a1:f6:18:a4:10:c3:49:08:e0:9d:7e:
                    78:e3:d2:da:11:45:08:8a:50:6e:6f:ab:f0:9b:72:
                    ee:c4:c2:1c:5b:3e:c6:7f:b9:52:9a:e4:e9:f5:62:
                    ce:32:4f:de:6e:b9:6c:da:ec:b7:16:9b:a3:8f:66:
                    3c:99:b7:54:5a:b0:42:bb:e7:cc:25:17:c1:ef:6a:
                    b0:60:b5:35:92:b0:4e:ab:e5:2b:23:d9:4c:29:db:
                    7f:8c:a3:db:6e:46:8d:c8:a7:cd:54:97:90:8b:1d:
                    31:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:1E:9F:D3:4A:48:94:5C:0B:1E:1F:D8:01:96:47:74:84:CA:9C:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ad3f3317-b3ff-4ec4-931e-ced697704a7c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ad3f3317-b3ff-4ec4-931e-ced697704a7c/35dc037ae08e0c89e42663655a324e7aecd823ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.238.0/23
                  181.233.147.0/24
                IPv6:
                  2803:2d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272050

    Signature Algorithm: sha256WithRSAEncryption
         bf:23:74:cf:cf:cf:e4:ee:da:46:9c:57:62:6d:96:f0:de:39:
         f4:3f:19:10:bd:d9:47:64:7f:5a:60:4a:70:ef:57:f7:fb:25:
         1e:46:9a:23:fc:98:73:96:4d:42:24:c0:13:d8:02:12:21:e3:
         f5:12:cb:58:d9:a9:15:6f:19:0e:8d:9f:02:84:0d:59:06:f1:
         72:ca:a2:bc:66:83:79:cc:3a:5d:6d:2f:81:c7:1d:cc:ce:78:
         96:56:81:83:b6:1a:f6:aa:7e:00:1b:d3:ba:2c:83:28:01:01:
         19:8f:0a:c7:6b:a7:46:05:38:49:ad:43:af:9f:70:6d:b2:6a:
         8e:36:90:ef:f2:75:6c:5f:d7:c6:a3:f4:4a:47:ce:b5:fa:94:
         8f:7d:c1:f4:b1:20:cc:40:0b:9b:f6:99:a0:c5:33:bb:dc:9d:
         99:a9:b9:25:b0:e1:0c:56:a9:63:e7:05:be:9d:c3:fc:1e:6a:
         a1:a1:30:69:ca:60:a0:89:cc:3f:e7:c7:cd:98:23:46:7a:ff:
         4d:80:69:85:be:26:42:3b:7e:30:0f:0f:e7:ed:7b:0e:00:5d:
         1e:3a:a9:ec:77:f0:2a:43:23:36:03:be:95:2f:74:fd:9f:09:
         c3:0c:bf:d1:40:5c:a1:30:4c:ef:2f:30:59:58:ee:72:e2:80:
         fb:2f:fa:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----