Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3b73c501870ca9a7fe7485ff6266bcc8c5a5a274.cer
File:                     3b73c501870ca9a7fe7485ff6266bcc8c5a5a274.cer (raw, json)
Hash identifier:          DGcnO97EGX9MPswOkmOsg/WnRawCgP+m9gQca9yKCQg=
Subject key identifier:   15:7C:49:B8:7D:50:0E:7E:5E:BD:7E:0E:72:D1:5E:7B:2B:7F:BB:45
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01014D15
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72366924-ff4a-4766-8313-1807a7ebf3e4/3b73c501870ca9a7fe7485ff6266bcc8c5a5a274.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72366924-ff4a-4766-8313-1807a7ebf3e4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 23:23:33 +0000
Certificate not after:    Sat 09 Aug 2025 19:15:20 +0000
Subordinate resources:    AS: 264615
                          IP: 143.137.148.0/22
                          IP: 2803:ee40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16862485 (0x1014d15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 23:23:33 2023 GMT
            Not After : Aug  9 19:15:20 2025 GMT
        Subject: CN=3b73c501870ca9a7fe7485ff6266bcc8c5a5a274
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e5:85:10:99:11:e6:76:4a:21:c8:f5:c1:cd:
                    f2:dc:54:40:a5:96:02:f1:6f:10:16:d7:54:40:14:
                    96:50:1a:41:f7:d0:6e:53:b0:ff:58:fe:20:e0:ac:
                    84:a6:6f:71:d2:bb:1f:58:2e:6e:37:ec:e1:82:78:
                    38:24:c9:6e:3b:9a:a5:3d:96:99:fe:d0:5f:68:f9:
                    f7:1f:f5:90:f9:08:6f:6a:98:88:61:30:7e:aa:c7:
                    a3:86:5d:03:e7:2f:a8:72:41:6a:c4:96:51:30:4a:
                    93:d6:fb:a2:f2:f0:04:7f:bb:05:6f:49:bf:3d:4d:
                    2a:3c:61:3e:ca:8c:0a:f8:95:dc:d9:d3:6c:54:95:
                    dc:66:2d:7b:ea:a2:1f:6d:98:84:49:2c:79:0f:c0:
                    a9:b9:68:7b:c2:62:c8:b8:4e:e2:d3:1e:35:67:7d:
                    fa:4d:c0:ee:4b:eb:c8:0c:c5:da:39:af:24:83:f4:
                    e0:e9:a2:ec:2a:c4:57:e4:9b:c0:fd:a4:e1:04:30:
                    df:8a:2d:8c:fa:9e:1f:fa:85:ba:89:7a:49:c9:1c:
                    0c:99:2c:42:7a:fc:72:29:50:e5:13:d8:7b:64:05:
                    e0:72:d0:35:30:4c:23:24:98:bc:b7:75:bf:d7:ed:
                    e6:bc:65:00:06:a8:5a:83:09:c0:c7:c3:61:44:ff:
                    c9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:7C:49:B8:7D:50:0E:7E:5E:BD:7E:0E:72:D1:5E:7B:2B:7F:BB:45
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72366924-ff4a-4766-8313-1807a7ebf3e4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72366924-ff4a-4766-8313-1807a7ebf3e4/3b73c501870ca9a7fe7485ff6266bcc8c5a5a274.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.148.0/22
                IPv6:
                  2803:ee40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264615

    Signature Algorithm: sha256WithRSAEncryption
         63:6e:0e:66:11:17:f6:7f:22:ee:49:dc:e6:cf:02:90:3f:bc:
         23:1e:56:23:fb:64:14:5c:e6:d8:75:55:9b:e8:ae:8c:36:42:
         a3:7b:f0:75:67:b2:01:27:21:2b:f3:60:29:25:5c:40:67:8e:
         ca:7b:9b:cb:0e:1f:25:40:eb:79:f6:da:d4:5b:f0:df:82:ba:
         fd:91:a5:f7:58:5e:f3:45:e4:66:6c:e6:22:c5:63:63:7f:66:
         10:92:1f:90:b7:7e:c1:46:0b:5d:eb:62:18:42:d8:11:84:96:
         9c:cd:ca:c1:11:0f:f7:ea:94:9d:2b:98:ff:51:65:b8:cc:79:
         97:db:50:3a:35:95:44:55:38:4c:ca:00:2d:ea:18:27:13:ea:
         6e:f3:66:45:63:3c:c1:43:57:6e:fd:c3:fc:61:22:2b:12:1a:
         97:d9:fc:8a:84:e9:18:ee:bc:6c:f9:ee:4f:e0:ef:a0:93:3c:
         c0:b1:19:82:ae:b8:ee:c8:cd:82:71:55:c5:08:70:ba:f3:df:
         2f:3d:01:ad:5d:22:25:3f:0a:25:e1:5e:1e:aa:ad:55:3b:18:
         7d:de:85:c1:02:16:33:fa:b4:1f:ed:be:46:f3:49:58:01:5d:
         f1:82:22:e6:6f:d9:0d:85:b4:0f:10:e4:ae:c4:58:44:59:f7:
         f9:6e:6f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----