Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer
File:                     3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.cer (raw, json)
Hash identifier:          ksQSX9o2od/xYVkfhWkWU/P4ZaA2/mOEpeYYT4cG32I=
Subject key identifier:   F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0E957
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 08 Mar 2023 13:20:37 +0000
Certificate not after:    Sun 09 Jun 2024 16:51:05 +0000
Subordinate resources:    AS: 269746
                          IP: 45.181.204.0/23
                          IP: 45.182.41.0/24
                          IP: 2803:3960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14739799 (0xe0e957)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  8 13:20:37 2023 GMT
            Not After : Jun  9 16:51:05 2024 GMT
        Subject: CN=3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:06:0b:e8:1d:0c:19:88:9a:f3:46:1a:f8:fa:
                    b0:e3:87:ef:2a:96:9c:cf:2d:9a:50:04:a0:49:6a:
                    f5:f3:3a:4b:ba:cc:aa:15:a1:52:32:d5:bb:bc:5d:
                    11:c7:fb:b1:c5:ed:e2:ba:83:5e:36:cc:b0:9d:06:
                    1e:98:4c:7a:40:11:63:5a:84:20:6c:fb:cb:8c:5d:
                    8a:91:6d:1f:4c:2a:e7:ba:d5:e3:b4:f1:80:fa:76:
                    c9:ca:2c:25:a1:aa:bf:5b:70:55:52:d7:68:33:49:
                    b0:07:96:14:e8:fd:13:f8:af:47:d7:a6:a2:62:3e:
                    1b:47:3d:77:52:42:2b:1a:20:14:4d:a2:00:f0:07:
                    88:60:d3:72:25:33:71:db:4b:99:9d:f8:79:10:de:
                    d3:4b:6f:87:12:3a:eb:c9:f8:b7:c6:f3:2e:82:56:
                    e4:ef:a4:dd:f2:b6:fa:58:5b:bd:b2:80:a8:6b:24:
                    f1:87:a7:1d:27:2e:19:1b:bf:9b:eb:cb:2d:84:56:
                    64:28:89:75:36:b2:cb:02:71:77:af:4d:fb:d1:58:
                    14:a3:64:57:c4:29:48:c5:a9:4d:eb:ad:c0:3b:be:
                    03:38:9d:b5:ad:68:d2:ad:de:5a:98:bb:8e:3f:e8:
                    61:0f:29:88:75:02:d8:36:2f:8e:cd:0e:14:f5:db:
                    7d:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:F1:2A:57:7E:1C:1E:E1:95:2E:70:F8:99:6B:B7:EB:89:C7:BD:83
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50b830fa-3d21-46b6-8c94-ae829d455786/3cd02ad39e88ca709bb74d4ba37a3f0a2d02095d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.181.204.0/23
                  45.182.41.0/24
                IPv6:
                  2803:3960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269746

    Signature Algorithm: sha256WithRSAEncryption
         c4:04:00:ea:f0:0b:28:8d:1d:29:4c:8e:e3:79:ea:8f:27:f5:
         35:2d:d9:ae:0a:66:18:d1:0d:97:b5:45:27:87:a4:42:6f:93:
         cf:49:27:62:14:03:89:f8:57:4a:7e:78:c4:b4:70:63:b1:e0:
         f0:16:15:0d:bf:10:c8:2d:5e:e5:a0:1e:f2:dc:6d:3b:a0:15:
         64:21:7b:a3:cc:02:c3:fb:d6:b7:93:12:e2:ec:4e:b0:06:1a:
         1f:e7:02:4e:47:85:b8:48:97:25:b4:b8:78:72:7d:82:6f:fa:
         d7:ea:38:8a:f6:04:5b:f6:9c:d8:56:f4:0e:39:5f:99:25:2d:
         fc:05:df:69:88:e4:25:6f:c5:33:30:20:f2:0d:7a:41:c8:78:
         53:d3:c4:b9:8c:7a:46:79:42:8e:99:5f:b4:f5:96:b4:d5:15:
         e4:b5:66:b2:bf:82:63:3e:34:57:51:df:92:1e:90:16:e8:fb:
         fe:e8:70:8e:77:b6:e6:d6:f6:0b:d3:f5:f8:35:51:d2:6e:65:
         21:fc:9b:d7:91:8e:f7:43:ac:51:05:7d:2d:b2:c8:a5:43:02:
         32:42:78:22:cb:5d:1a:ce:56:32:e0:95:04:db:f3:b6:e4:26:
         f8:9b:c2:20:19:34:70:55:c6:49:44:59:f3:3d:3c:cd:9b:f6:
         32:9c:d0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----