Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45261c30c618b29a3cce23bac23ee2522bfc9f5a.cer
File:                     45261c30c618b29a3cce23bac23ee2522bfc9f5a.cer (raw, json)
Hash identifier:          ACl5zqj6KzyzPdWdO0m1rvZWhnzpfk5QH77MfBjMJUU=
Subject key identifier:   F8:39:B9:FD:86:2C:D4:88:0B:B7:33:A9:74:A0:14:1C:E6:08:46:EF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E47952
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/45261c30c618b29a3cce23bac23ee2522bfc9f5a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 11:46:44 +0000
Certificate not after:    Fri 01 Mar 2024 01:45:06 +0000
Subordinate resources:    AS: 266791
                          IP: 45.236.32.0/22
                          IP: 2803:e0a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14973266 (0xe47952)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 11:46:44 2023 GMT
            Not After : Mar  1 01:45:06 2024 GMT
        Subject: CN=45261c30c618b29a3cce23bac23ee2522bfc9f5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0c:14:3d:77:8d:d1:fe:1b:ce:c3:b8:05:99:
                    0a:30:f0:dd:70:a1:4b:f4:63:eb:c1:42:eb:55:86:
                    fd:05:0a:99:21:2f:d5:87:67:a7:29:68:77:84:28:
                    e4:5e:3a:33:64:b1:9c:51:57:42:fe:1b:56:ff:f5:
                    7b:d6:b9:a2:25:67:d2:93:38:a3:8f:c3:c2:5c:26:
                    52:97:09:68:18:2f:d2:f2:12:4e:47:43:3c:a4:4a:
                    2a:6a:48:62:b4:8e:c6:ec:6f:6d:72:a3:61:e3:e8:
                    3f:24:0b:d8:06:43:a9:04:f3:16:fe:89:b8:c3:ea:
                    c7:1f:a6:09:68:57:36:f7:a9:1e:4b:92:4b:90:87:
                    c0:e5:af:9f:4a:56:ff:f0:1a:5b:d4:37:fb:17:d4:
                    3b:1d:ce:cf:cf:63:78:b5:c1:98:cb:04:83:db:bb:
                    67:70:37:69:c0:e3:9d:2e:0b:d8:47:cd:ba:0e:81:
                    40:e1:8e:fa:66:1f:c6:c2:8c:cf:61:9e:22:27:b2:
                    7a:d5:9b:71:b1:88:47:3e:ec:af:e7:76:24:dc:5a:
                    35:54:5a:22:9e:67:70:1a:36:fc:83:f9:13:9f:fb:
                    09:a3:80:33:f9:84:d8:cf:bb:18:a6:64:80:c3:0e:
                    ab:61:a2:6b:99:1d:3a:26:3e:33:8b:64:18:ea:c9:
                    42:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:39:B9:FD:86:2C:D4:88:0B:B7:33:A9:74:A0:14:1C:E6:08:46:EF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/122cbd66-6036-4f8f-a0ca-dc9d14b43d99/45261c30c618b29a3cce23bac23ee2522bfc9f5a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.32.0/22
                IPv6:
                  2803:e0a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266791

    Signature Algorithm: sha256WithRSAEncryption
         16:9e:43:22:fc:7d:f1:f0:1f:e5:f0:cf:03:55:cb:bb:83:89:
         69:2b:20:97:9e:1a:70:ae:cd:17:bf:b9:50:86:e5:5d:6d:6b:
         0e:1a:8d:16:8b:f0:db:9d:fb:4b:75:65:82:25:1d:eb:64:12:
         fb:b4:92:c7:9c:21:34:71:e3:e0:45:fc:17:eb:81:d6:26:2d:
         63:d3:62:a6:57:e5:22:f8:78:f9:18:8d:e6:e7:f2:62:04:bc:
         d5:52:be:65:77:23:28:2e:a6:2d:d2:ea:b3:73:61:04:17:98:
         a1:ea:ca:16:f2:cd:53:b3:2a:31:e7:3d:d6:d9:c6:92:53:d8:
         85:49:e7:d9:88:bc:5d:d7:7a:bb:11:09:27:c2:dd:d3:ce:11:
         98:7d:bc:3e:ed:b9:0a:dd:5d:39:30:f8:1b:2b:5e:37:eb:06:
         b9:a7:69:09:7c:ad:8a:1b:03:f4:ea:66:14:67:6f:3e:ac:b6:
         aa:98:05:53:a7:11:58:47:80:92:7b:a2:fe:9f:3c:35:44:2f:
         cf:09:8d:39:75:c8:bf:3a:07:9c:7b:d8:81:b7:22:c2:5f:f1:
         6c:d4:63:f0:8f:e5:a9:cb:31:fe:f9:36:a5:28:5c:bc:72:c7:
         00:a9:bf:22:08:8e:cd:51:d2:be:e5:a1:66:6a:23:63:98:2e:
         10:a9:7e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----