Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/396f1e1e24cee8485d367f891131d0069a0be0bd.cer
File:                     396f1e1e24cee8485d367f891131d0069a0be0bd.cer (raw, json)
Hash identifier:          Nwt3s3+UOeYPlNEEM2L9f2QzYjPn+gYgFtd5Tsf5ILo=
Subject key identifier:   63:F4:99:5D:9F:32:15:76:CF:26:A4:33:1C:B0:06:82:99:72:D5:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4BA29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5cf33467-a074-4919-8cb6-62d1efa24905/396f1e1e24cee8485d367f891131d0069a0be0bd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5cf33467-a074-4919-8cb6-62d1efa24905/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 11 Aug 2023 14:27:42 +0000
Certificate not after:    Thu 13 Feb 2025 20:14:22 +0000
Subordinate resources:    AS: 266779
                          IP: 45.235.36.0/22
                          IP: 2803:6f20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16038441 (0xf4ba29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 11 14:27:42 2023 GMT
            Not After : Feb 13 20:14:22 2025 GMT
        Subject: CN=396f1e1e24cee8485d367f891131d0069a0be0bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d8:1b:b0:1b:84:6a:d1:58:26:22:2c:6e:19:
                    2c:4b:85:0d:43:b1:d6:57:75:b3:8b:c3:ec:1b:9c:
                    a0:44:96:e2:0a:99:6a:96:b7:5e:d8:c8:43:43:a3:
                    b2:1f:d5:5d:db:ab:40:f4:ce:bd:e1:55:55:f5:fa:
                    95:9f:00:73:84:c0:76:fb:7b:b9:16:f2:0a:c0:86:
                    b6:8b:a4:94:7e:a9:f1:22:7e:44:d5:0b:79:23:20:
                    c5:bd:bc:60:73:21:99:e9:ee:4d:ee:56:ea:0a:79:
                    30:8c:d2:99:16:68:20:bf:e0:6c:24:a6:55:ea:4b:
                    ec:ba:82:25:11:ea:3c:bd:b9:36:c7:6e:ce:4b:8f:
                    6c:d7:91:53:31:77:de:fd:49:19:61:78:5d:13:74:
                    d5:b2:b5:95:b4:f4:74:61:70:d6:6a:c0:c8:29:ac:
                    76:5f:52:72:89:53:a6:4a:f8:e2:cb:79:de:74:bc:
                    64:2c:e1:4e:67:46:27:e9:d5:b9:9d:cb:b2:9f:df:
                    80:ca:0b:13:80:81:fa:59:60:01:ab:cd:fa:26:01:
                    e7:54:92:a8:36:76:35:18:84:3e:b3:33:e9:93:fd:
                    87:ec:ad:5a:73:ef:cd:0f:d5:cc:e4:9d:9e:1b:06:
                    49:9e:71:62:d6:7b:06:ef:7a:ed:26:04:cb:d9:9c:
                    cf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:F4:99:5D:9F:32:15:76:CF:26:A4:33:1C:B0:06:82:99:72:D5:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5cf33467-a074-4919-8cb6-62d1efa24905/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5cf33467-a074-4919-8cb6-62d1efa24905/396f1e1e24cee8485d367f891131d0069a0be0bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.36.0/22
                IPv6:
                  2803:6f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266779

    Signature Algorithm: sha256WithRSAEncryption
         58:39:e1:61:44:c8:a4:82:cb:7b:05:7c:d2:f9:69:8d:8c:79:
         73:5c:71:9a:d6:59:0e:f7:0d:ed:56:95:cf:45:2d:e0:72:2e:
         5f:e7:20:8a:f5:1b:3d:70:79:1a:41:38:d4:99:99:65:7e:88:
         f6:9e:cc:61:e5:94:52:29:97:b5:c3:26:75:67:2c:3a:13:8d:
         30:41:01:40:e8:a7:af:45:2e:b9:75:52:41:56:b0:fe:33:dd:
         84:ee:35:40:c0:b8:c2:e6:e3:a6:72:45:f9:c7:a5:14:9c:5c:
         44:cf:67:9c:a0:a0:1f:ce:b2:03:62:d0:8c:7d:ed:f7:0d:5c:
         0e:1a:cf:8c:82:18:32:91:ec:e8:18:a8:15:20:48:e6:5b:88:
         d6:36:ed:71:3a:b7:46:f6:f0:f4:b0:b1:ec:61:98:5b:5c:e7:
         7f:59:8d:97:9f:b7:eb:b8:e1:bf:27:52:d1:bf:e6:31:aa:87:
         e0:f6:1e:99:65:66:55:be:be:de:ea:9d:f2:1b:80:4f:7e:6b:
         d0:b4:1c:d2:9a:20:cf:03:c1:6e:e0:a1:6c:67:2d:90:1a:11:
         78:c6:d0:45:ed:d5:a1:37:c2:49:d3:18:d2:f7:ce:0a:8e:05:
         9c:7a:ab:97:2a:73:fa:76:cd:bf:0e:9d:bf:43:3f:8f:3c:e6:
         85:1c:7f:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----