Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d37b92c6a4e64bb200c5845292ae7e5ee30c281.cer
File:                     3d37b92c6a4e64bb200c5845292ae7e5ee30c281.cer (raw, json)
Hash identifier:          1b1aNNQQQ12A9ckGmiIaUMgPO11oX8Uq8azhAsb3bho=
Subject key identifier:   31:70:2E:F8:33:FA:32:FD:92:FA:67:47:B3:88:AC:8C:B3:4A:D4:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FED80C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/63e528ce-f486-4719-8131-2f9e3d126d6a/3d37b92c6a4e64bb200c5845292ae7e5ee30c281.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/63e528ce-f486-4719-8131-2f9e3d126d6a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:37:26 +0000
Certificate not after:    Tue 25 Mar 2025 14:52:23 +0000
Subordinate resources:    AS: 262476
                          IP: 177.53.184.0/22
                          IP: 177.107.176.0/20
                          IP: 186.224.88.0/21
                          IP: 2804:4e4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16701452 (0xfed80c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:37:26 2023 GMT
            Not After : Mar 25 14:52:23 2025 GMT
        Subject: CN=3d37b92c6a4e64bb200c5845292ae7e5ee30c281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:47:18:0d:2c:ac:dc:5f:75:96:dc:98:07:28:
                    7b:fc:13:f9:44:45:de:8b:b5:fe:2e:e8:f4:de:16:
                    b6:97:9c:5a:56:de:d7:0a:1e:b4:ce:e0:93:46:b2:
                    c6:a6:9d:f3:93:3d:98:59:77:15:d1:04:16:63:50:
                    0b:9f:28:13:f1:5b:39:80:ee:bf:53:c4:7c:6b:be:
                    1e:d5:d2:6d:b9:e7:1f:69:22:f7:a2:30:51:25:48:
                    50:01:d4:64:1e:27:c0:02:14:55:23:53:83:01:95:
                    18:ff:45:c6:f8:9f:4d:1c:b0:24:02:cd:94:9c:34:
                    d2:c2:c7:bd:d7:70:a1:8c:a0:42:7a:b3:1b:60:65:
                    44:78:8f:97:19:cb:43:8a:72:75:1f:c4:fb:66:b1:
                    22:6c:46:7b:24:51:56:19:6a:29:c5:57:f0:94:60:
                    d4:d5:8f:79:5d:49:50:13:06:38:f6:c1:77:b6:44:
                    46:cb:73:75:2e:3d:ee:57:ef:3c:24:56:3b:03:b1:
                    03:57:4f:0a:47:7d:78:02:7d:67:3b:c7:61:cd:13:
                    69:42:d9:a0:d1:06:e6:92:b8:2b:44:f4:bf:2c:b7:
                    41:b8:19:70:53:6e:32:b4:aa:14:44:13:dd:fc:2e:
                    9c:b2:47:42:8a:4c:06:79:01:6f:53:4f:17:4c:e0:
                    7f:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:70:2E:F8:33:FA:32:FD:92:FA:67:47:B3:88:AC:8C:B3:4A:D4:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/63e528ce-f486-4719-8131-2f9e3d126d6a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/63e528ce-f486-4719-8131-2f9e3d126d6a/3d37b92c6a4e64bb200c5845292ae7e5ee30c281.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.53.184.0/22
                  177.107.176.0/20
                  186.224.88.0/21
                IPv6:
                  2804:4e4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262476

    Signature Algorithm: sha256WithRSAEncryption
         52:3c:f2:9a:98:0d:b4:fb:1b:19:40:db:50:60:7a:1e:16:58:
         e5:3c:52:26:62:cb:df:8b:a6:cf:85:32:a4:c9:de:87:c6:60:
         e8:17:10:85:e4:8e:af:5c:ba:b4:40:fd:bb:0a:69:03:43:72:
         d4:74:51:a4:3a:77:1a:82:4b:f9:1d:e0:ef:d8:93:b8:08:32:
         07:3c:06:c3:89:9b:f5:87:3d:b2:c5:7c:22:a1:6a:e9:c5:22:
         05:ca:5f:88:ad:9c:ae:f6:8a:95:d2:e7:0a:d0:21:b6:dd:f1:
         7a:1d:59:19:a0:44:3e:7d:fa:d0:fa:88:12:b7:5a:aa:a8:3a:
         61:68:44:6e:32:dc:35:51:d5:c7:c7:b1:d6:6e:30:df:a7:62:
         71:01:da:9c:1d:18:89:98:a8:2c:34:1c:31:c3:92:66:71:dd:
         97:a7:45:70:7c:61:74:af:92:d6:c5:51:58:f9:47:59:38:84:
         e6:88:0c:8c:55:d5:2b:e7:b3:34:be:15:f1:61:dc:f0:75:19:
         44:d8:88:1e:dc:01:69:ab:07:0e:96:37:8f:28:9e:6a:b9:76:
         b1:dd:99:a8:b1:e4:8d:85:03:39:31:fd:d9:89:19:ce:5e:32:
         c8:24:63:ee:5a:9d:c0:e1:7c:1c:e7:18:4b:56:7d:93:67:26:
         69:e0:4a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----