Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/473e2ac22b66e3b81e4345a285875bc03cb933c5.cer
File:                     473e2ac22b66e3b81e4345a285875bc03cb933c5.cer (raw, json)
Hash identifier:          2M0u4CJjivawTRV3bj9AkQVKPhJm1r6lMOY5GyynotE=
Subject key identifier:   67:F3:4A:5B:45:4D:1F:00:ED:49:48:EC:00:2D:7A:DE:6A:67:A9:D4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECBF31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10d58359-0844-4b0e-9b6e-33f504f5818e/473e2ac22b66e3b81e4345a285875bc03cb933c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10d58359-0844-4b0e-9b6e-33f504f5818e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 12:57:32 +0000
Certificate not after:    Thu 05 Dec 2024 17:56:43 +0000
Subordinate resources:    AS: 266723
                          IP: 45.229.195.0/24
                          IP: 45.229.244.0/23
                          IP: 2801:18:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15515441 (0xecbf31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 12:57:32 2023 GMT
            Not After : Dec  5 17:56:43 2024 GMT
        Subject: CN=473e2ac22b66e3b81e4345a285875bc03cb933c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a8:80:77:94:67:ca:e2:17:7a:2d:6e:ba:b1:
                    78:ab:ad:41:cb:95:28:50:d8:be:2d:90:ea:65:1c:
                    3e:34:65:df:9a:4b:0d:d2:db:f6:f8:c4:01:1a:31:
                    2d:cd:1b:7e:f7:c7:f8:45:8d:0d:7d:de:95:25:d0:
                    f6:3b:ff:db:6a:40:09:d7:ba:8a:fe:ca:d8:67:f4:
                    08:91:51:27:bc:97:c0:c4:e2:55:5d:9e:f3:d0:ce:
                    69:de:88:2e:6a:68:49:b6:da:f4:5f:48:8d:53:95:
                    84:20:79:f7:bd:89:64:43:33:0b:cb:b2:ca:4d:b8:
                    41:36:79:84:9b:65:2a:0e:f2:70:bb:ba:e8:84:7e:
                    e7:57:5f:f6:35:99:ab:84:f7:1d:2c:b9:6f:5d:0a:
                    ab:c0:e6:ed:d7:ea:b1:59:b6:cd:4e:88:8b:dd:c2:
                    31:b8:29:04:62:9d:03:e6:0b:68:46:0c:b1:79:e0:
                    bd:6a:eb:16:68:ad:4b:3e:6b:1a:7e:28:11:78:b9:
                    b3:8b:2b:d4:9d:99:a6:0c:0b:eb:6c:91:00:02:35:
                    2c:2a:ed:47:44:a6:94:32:18:ee:84:c2:2d:93:2e:
                    8e:72:51:dc:f2:72:31:25:7c:c4:ae:51:09:41:3c:
                    06:2b:29:15:f2:82:15:04:80:b2:2e:15:11:4a:60:
                    03:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F3:4A:5B:45:4D:1F:00:ED:49:48:EC:00:2D:7A:DE:6A:67:A9:D4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10d58359-0844-4b0e-9b6e-33f504f5818e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10d58359-0844-4b0e-9b6e-33f504f5818e/473e2ac22b66e3b81e4345a285875bc03cb933c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.195.0/24
                  45.229.244.0/23
                IPv6:
                  2801:18:7000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266723

    Signature Algorithm: sha256WithRSAEncryption
         71:c5:54:d2:cb:0a:59:d9:9b:90:f7:63:bd:d4:f9:2b:cb:a4:
         32:a5:a5:90:92:88:ab:d0:49:13:38:31:e9:59:42:98:9f:36:
         62:df:a7:51:09:f2:43:c9:5d:6a:d1:79:29:83:d6:f6:6f:3b:
         07:2b:a4:dd:24:d2:70:82:4a:1f:68:2d:28:ab:7a:42:0b:fe:
         bc:60:12:c2:52:02:0a:08:5a:c8:a0:a7:85:f7:69:29:85:8f:
         6e:b3:9a:66:68:c2:54:8d:59:66:50:61:5e:ba:c5:59:2e:3e:
         ba:a6:f2:81:71:8b:15:fc:ef:e7:16:fa:42:33:00:a0:05:df:
         a8:87:ad:df:79:f0:39:4a:7a:cf:69:78:77:8b:6d:6f:75:e9:
         27:38:6f:0a:6f:b7:6e:ef:54:41:db:8c:09:6a:23:59:94:28:
         5f:6f:5c:37:f8:38:45:2e:0d:b7:e4:4a:e5:10:b4:f8:83:fb:
         b0:d8:88:73:ca:86:ce:da:d4:e9:fc:75:95:82:5f:f5:2c:d4:
         a1:f5:1c:8b:ed:f7:98:7a:6d:68:e0:c3:9f:15:29:60:9a:5d:
         69:d2:9a:1c:ea:49:78:b8:67:30:24:13:81:aa:60:84:0b:64:
         4e:fd:91:8f:12:80:a0:5c:53:5e:95:24:f7:ae:19:8d:8e:a9:
         62:c4:eb:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----