Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3de346d72310bab51ac273683c8ba38961c45620.cer
File:                     3de346d72310bab51ac273683c8ba38961c45620.cer (raw, json)
Hash identifier:          x9KgEvGFbbXUTSJ3BRATNyYIYe//7Yar9JxiPiHICXw=
Subject key identifier:   7E:7B:0B:88:EB:97:2B:61:59:40:D8:62:57:EB:B0:B0:AC:4A:AA:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFC44F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fbe741a5-5620-4bc2-a412-3cdea526ccc7/3de346d72310bab51ac273683c8ba38961c45620.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fbe741a5-5620-4bc2-a412-3cdea526ccc7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jun 2023 14:03:52 +0000
Certificate not after:    Fri 04 Apr 2025 19:12:49 +0000
Subordinate resources:    AS: 267883
                          IP: 45.177.204.0/22
                          IP: 2803:ea60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15713359 (0xefc44f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 27 14:03:52 2023 GMT
            Not After : Apr  4 19:12:49 2025 GMT
        Subject: CN=3de346d72310bab51ac273683c8ba38961c45620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d1:85:0f:35:99:98:8e:f8:c4:3d:f8:cd:9d:
                    74:f2:f7:28:f5:9f:7c:9c:ae:c3:ac:0b:78:b0:f9:
                    72:1e:57:e2:b5:99:b9:95:05:1c:10:de:3f:aa:f5:
                    25:5e:dd:d5:88:46:51:2b:cf:e7:2c:e0:69:8e:3d:
                    a8:9b:08:9e:4f:fe:63:dd:02:d1:74:12:01:fa:62:
                    bc:42:8b:da:6c:8a:9d:7b:b0:06:f7:ea:7f:e2:da:
                    fb:29:ff:b9:af:ab:9c:fd:72:b3:b3:d8:4c:c3:23:
                    ea:90:8c:d5:5a:6b:6b:e0:57:cf:ca:ca:85:5d:d3:
                    54:5c:45:a2:d6:35:b0:c6:d3:c2:45:40:76:ff:ab:
                    30:db:14:54:09:92:93:c3:cb:94:5a:48:f8:2a:7f:
                    74:4f:b7:22:33:d6:9c:9e:58:92:05:26:94:57:17:
                    03:d3:2b:c5:6d:c5:86:e6:6d:05:e4:01:f3:f0:6f:
                    56:ad:19:ca:c3:6f:69:b4:d4:75:21:d9:3e:02:a6:
                    4a:c6:2d:da:96:4d:14:d2:8e:26:dc:4c:f4:b8:3f:
                    54:6b:c2:04:ce:1f:3e:00:8d:b6:f7:ad:b3:81:82:
                    3d:63:64:45:2a:51:3b:94:a8:9e:1f:93:56:76:b3:
                    59:30:90:ec:d6:c0:e0:5b:64:76:85:7b:b7:e8:f3:
                    03:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:7B:0B:88:EB:97:2B:61:59:40:D8:62:57:EB:B0:B0:AC:4A:AA:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fbe741a5-5620-4bc2-a412-3cdea526ccc7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fbe741a5-5620-4bc2-a412-3cdea526ccc7/3de346d72310bab51ac273683c8ba38961c45620.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.204.0/22
                IPv6:
                  2803:ea60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267883

    Signature Algorithm: sha256WithRSAEncryption
         68:55:94:52:e9:15:20:cd:90:58:5c:89:80:0c:54:d4:12:69:
         72:ee:ec:58:c1:a6:5d:00:35:04:93:0a:44:f9:54:a2:68:19:
         91:24:01:a8:55:f6:9d:65:9b:13:ee:42:4a:c4:24:eb:dc:03:
         98:dc:4e:55:d4:8e:0f:dd:82:13:f8:b3:95:57:43:ac:7a:52:
         35:0b:4d:fc:4e:91:72:13:3f:47:14:31:b9:b9:67:84:92:a0:
         81:ca:62:ae:74:dc:c5:73:b6:5a:3a:48:e1:ae:59:54:6f:8e:
         70:31:bf:26:32:e5:43:8a:4a:f1:5a:80:2d:67:d3:26:4b:3f:
         4f:2e:3c:31:7e:79:8e:25:66:cf:ac:c7:01:6b:56:42:e8:79:
         d3:12:44:69:2e:e9:c4:4a:3e:2f:d6:5e:c0:7a:b2:60:c8:1f:
         cc:60:e3:15:15:57:de:b7:be:27:7c:d5:f7:af:77:e5:f8:c8:
         ea:72:5d:d8:94:cf:13:c3:f0:c6:29:06:b1:b9:f8:83:03:ad:
         2c:13:36:8e:82:33:ab:5b:a6:15:3a:be:ba:1b:b1:ff:8d:83:
         1a:07:23:5e:cd:f5:59:c3:ac:e3:06:39:e4:e9:45:03:2e:43:
         88:ab:5c:a1:63:01:c8:c3:75:32:d1:9f:da:95:98:78:dc:f2:
         3c:04:5c:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----