Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/476d07d51501dabc1844df1a79142d65aae12357.cer
File:                     476d07d51501dabc1844df1a79142d65aae12357.cer (raw, json)
Hash identifier:          25dbpkd207W99apizrzco4xAgjZEsTWxGU60xJs7chs=
Subject key identifier:   E3:8A:13:89:30:B6:E0:84:13:60:5A:FC:89:06:2F:32:98:9C:6E:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE7FCA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50add722-c6c3-4d2d-ae0e-e761cd93bd99/476d07d51501dabc1844df1a79142d65aae12357.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50add722-c6c3-4d2d-ae0e-e761cd93bd99/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 16:17:21 +0000
Certificate not after:    Sun 26 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 14234
                          IP: 200.124.192.0/19
                          IP: 2800:250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15630282 (0xee7fca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 16:17:21 2023 GMT
            Not After : Jan 26 05:00:00 2025 GMT
        Subject: CN=476d07d51501dabc1844df1a79142d65aae12357
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:0d:a1:97:4e:49:0c:ed:07:d2:cf:06:22:fc:
                    0c:80:21:9e:d0:2d:42:52:dd:03:71:d8:4e:f7:98:
                    0b:e9:c6:00:80:5c:b5:fe:5d:79:a9:80:7d:3b:c7:
                    99:a0:e8:21:8d:03:90:0d:dc:19:f4:c6:f2:73:e0:
                    06:95:67:47:4b:41:84:8a:df:0d:bc:0e:05:60:4d:
                    1b:11:0e:3e:c9:f3:90:b3:20:cc:15:2c:26:14:bc:
                    45:6d:92:7f:e0:56:15:7d:87:89:fd:c1:16:93:98:
                    bc:dc:96:85:7d:20:bd:0d:aa:9e:09:29:9d:b1:14:
                    ff:63:83:aa:b8:b3:7c:9e:a7:45:ef:55:b8:3d:d0:
                    8e:2f:83:8c:e1:95:ae:9e:0c:29:e2:21:58:fa:96:
                    7e:e3:fc:67:27:ee:33:67:c2:76:bd:58:2f:93:23:
                    f1:b5:f6:cf:ea:06:5f:ba:31:ce:dd:1c:b0:3d:d0:
                    4e:12:23:9f:06:ed:bb:3c:81:86:71:b1:b0:81:e5:
                    5a:ab:a1:21:d3:1e:a6:16:7f:0d:a2:25:68:9c:ae:
                    c7:8b:23:9e:dd:1b:73:cd:96:0f:22:80:b6:e0:7d:
                    38:91:1d:e2:15:63:bd:29:7c:17:77:fe:dc:f6:ab:
                    67:61:1e:f6:08:67:ba:36:13:f9:94:f9:92:84:ca:
                    9a:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:8A:13:89:30:B6:E0:84:13:60:5A:FC:89:06:2F:32:98:9C:6E:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50add722-c6c3-4d2d-ae0e-e761cd93bd99/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50add722-c6c3-4d2d-ae0e-e761cd93bd99/476d07d51501dabc1844df1a79142d65aae12357.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.124.192.0/19
                IPv6:
                  2800:250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14234

    Signature Algorithm: sha256WithRSAEncryption
         b6:71:06:a4:ce:6a:59:fe:a7:1b:68:e3:0a:e3:57:3a:6c:e1:
         d3:96:fd:7f:a9:25:cc:8f:ce:78:89:35:75:94:71:58:0b:34:
         4d:bc:1a:b8:93:9c:67:be:79:2e:20:a9:3e:76:82:70:76:ad:
         e4:99:f7:09:7a:17:7a:2f:12:16:04:e7:8f:55:ff:34:bc:6e:
         d9:8e:c9:0b:59:19:bd:8f:16:f9:c7:e3:04:f3:12:f0:1c:b5:
         5c:c8:02:7b:5b:b9:d4:39:42:2b:f4:25:74:c7:92:3a:0f:e6:
         d0:f1:b8:88:0c:87:92:5a:ea:36:fc:8f:33:ba:95:67:55:b1:
         f1:69:ff:fa:7f:a7:1f:0b:44:92:90:c7:86:04:e6:58:8a:e2:
         0f:bb:d5:63:3a:9c:b6:52:94:e6:72:ac:cc:bc:50:dc:e4:e2:
         18:69:35:be:9d:2d:53:33:e1:29:67:00:02:59:c0:8b:a9:86:
         91:d8:2c:d0:ab:bd:8a:45:e8:c1:94:5f:87:0f:7e:34:66:58:
         14:7f:37:91:e0:bf:68:9f:b6:01:93:7a:6b:b2:c8:8d:7f:1b:
         23:de:21:c5:0a:cb:e8:cf:22:e3:5c:8a:1b:87:8c:5b:cf:cc:
         0d:83:65:de:ea:d5:5a:8b:be:09:4d:d7:e1:21:18:13:9a:88:
         c7:bd:95:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----