Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d803e0fed8d8409ebf19a95b831257536cb5e9e.cer
File:                     3d803e0fed8d8409ebf19a95b831257536cb5e9e.cer (raw, json)
Hash identifier:          UXdBe3oL08NbrMLWyni5sDoicMiyacSTsWnFfSrLCFo=
Subject key identifier:   76:34:89:37:03:40:2C:D5:AB:8A:B9:B0:D5:74:82:EC:E8:62:25:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5ABC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ff6677b4-67b7-47ca-b26a-bcb2a689b209/3d803e0fed8d8409ebf19a95b831257536cb5e9e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ff6677b4-67b7-47ca-b26a-bcb2a689b209/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 21:33:01 +0000
Certificate not after:    Thu 23 Jan 2025 23:17:11 +0000
Subordinate resources:    AS: 265644
                          IP: 45.5.124.0/22
                          IP: 2803:d1c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15051717 (0xe5abc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 21:33:01 2023 GMT
            Not After : Jan 23 23:17:11 2025 GMT
        Subject: CN=3d803e0fed8d8409ebf19a95b831257536cb5e9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:55:ef:63:8e:6e:58:4c:e8:b9:5e:69:8d:20:
                    5d:43:52:d2:f9:d3:27:33:1e:be:9a:29:72:58:41:
                    32:11:02:2a:4a:b2:12:3d:54:f0:66:10:b8:ac:0f:
                    38:b2:49:2e:93:56:f4:e0:ee:36:11:50:50:93:7a:
                    d1:95:4b:61:40:d8:ff:d5:aa:e2:c6:36:04:0a:6a:
                    62:c1:a5:ea:29:7b:34:0e:06:1a:c7:95:e9:08:fa:
                    2e:a8:c4:d4:4e:2f:89:ea:c5:c7:47:6b:09:d9:df:
                    4e:c1:ae:0c:d6:51:08:e6:e9:b3:68:2a:6d:98:4e:
                    4f:9c:02:e9:2b:94:0a:21:08:0f:aa:95:b4:8a:56:
                    51:09:78:03:7e:f6:3c:ca:55:cc:fb:5c:d6:8d:fa:
                    12:d7:36:b8:84:6f:86:15:5a:14:98:db:c8:b6:dd:
                    a8:51:e6:c9:13:1c:2a:51:fb:54:9d:6d:00:8d:f0:
                    06:e1:4f:d5:81:82:4b:99:40:dd:89:c8:d8:c2:7a:
                    f8:96:83:86:12:a1:75:11:78:17:2e:d3:19:67:99:
                    0c:aa:fc:7e:ac:e8:ca:6e:11:ef:56:1f:ba:88:bb:
                    ae:18:92:61:ef:3c:4d:2a:f3:17:f0:50:d0:3a:77:
                    ea:81:d7:4a:84:42:ca:11:03:5b:c6:ca:8f:a2:a8:
                    f4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:34:89:37:03:40:2C:D5:AB:8A:B9:B0:D5:74:82:EC:E8:62:25:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ff6677b4-67b7-47ca-b26a-bcb2a689b209/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ff6677b4-67b7-47ca-b26a-bcb2a689b209/3d803e0fed8d8409ebf19a95b831257536cb5e9e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.124.0/22
                IPv6:
                  2803:d1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265644

    Signature Algorithm: sha256WithRSAEncryption
         37:4d:29:49:c5:5a:05:99:ea:fa:e9:3e:b7:67:9a:9d:ee:a2:
         c8:79:14:30:e9:5e:36:dc:b3:03:31:96:b6:cb:f9:d1:d4:77:
         7f:56:bb:d5:a8:44:4b:21:42:c7:1d:f5:25:48:55:96:22:51:
         8e:50:18:fe:ba:1d:29:0e:63:3e:66:c9:50:f1:56:04:a4:f3:
         df:73:60:83:f3:28:86:db:21:99:16:7c:c4:2e:50:97:bf:66:
         2a:c6:29:ac:0d:ea:96:43:86:07:ba:c7:19:53:91:43:75:8d:
         9b:3e:88:e0:01:a4:f8:8d:fe:dc:95:ee:3f:d0:df:63:92:de:
         a6:9e:93:e5:1f:f6:ae:69:63:5d:be:d9:73:1c:1f:4c:b2:a6:
         f3:34:55:b4:56:6b:ef:91:5d:a5:40:1f:a3:21:7e:60:42:aa:
         d2:d3:43:cc:d0:65:e2:6b:a3:69:92:ed:05:c4:ac:7f:c3:6b:
         90:b8:17:c1:a1:a2:6e:83:f5:fc:b4:d0:3f:64:d7:e4:eb:f5:
         36:40:24:96:dc:4a:8d:33:45:6d:8f:7b:c7:21:df:32:f2:24:
         8d:0f:3e:42:aa:50:84:dc:07:b3:40:d5:f4:b3:8a:a3:0b:b3:
         bd:31:0e:75:46:39:36:9a:cb:b5:6f:fd:f2:2c:4b:e8:84:0a:
         3b:2e:a2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----