Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b92b3929e29d655da6caecd6f380e307020e769.cer
File:                     4b92b3929e29d655da6caecd6f380e307020e769.cer (raw, json)
Hash identifier:          A3YSpSfkT4PUH5YmJkU6DWP0efxJpvk+iFt1MCqNNAg=
Subject key identifier:   92:4B:1A:01:7F:47:09:AC:55:35:7C:91:85:A5:DD:8C:81:B6:A0:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E72DDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9a3e5607-f8d9-415f-b159-2099f0ef579a/4b92b3929e29d655da6caecd6f380e307020e769.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9a3e5607-f8d9-415f-b159-2099f0ef579a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 25 Apr 2023 16:00:35 +0000
Certificate not after:    Wed 23 Oct 2024 21:18:32 +0000
Subordinate resources:    AS: 271847
                          IP: 170.84.255.0/24
                          IP: 200.23.205.0/24
                          IP: 2803:7810::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15150558 (0xe72dde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 25 16:00:35 2023 GMT
            Not After : Oct 23 21:18:32 2024 GMT
        Subject: CN=4b92b3929e29d655da6caecd6f380e307020e769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:f1:2f:f4:f8:e4:e3:d3:1c:d9:64:7d:69:44:
                    bc:c9:94:d1:a4:46:a0:60:ad:f6:79:58:fc:46:73:
                    22:d7:59:90:1a:4c:80:09:9f:4b:23:d7:bb:c0:ca:
                    d8:83:36:3c:c0:1a:5c:a9:86:3d:95:44:45:c0:2a:
                    4b:29:d8:04:ef:93:d2:c3:85:74:ce:cc:66:80:cf:
                    27:41:6e:13:1e:3a:32:f8:af:0b:24:8e:81:ea:5d:
                    19:7a:05:2e:25:ab:70:e9:69:c3:d8:ee:49:87:62:
                    4d:4a:27:99:34:ec:11:5e:9a:17:be:a8:81:95:66:
                    0b:c5:0b:a4:fd:c4:b9:e1:2b:c7:06:23:87:c5:6b:
                    19:46:b1:5a:88:52:e4:c5:00:8c:e5:d1:2c:47:80:
                    44:2e:a6:03:72:a1:68:48:49:54:de:b4:2d:d8:4d:
                    07:c1:df:8d:c0:90:3b:15:fd:32:d8:e4:b2:ee:de:
                    39:dd:8c:aa:64:37:da:03:78:25:e3:41:38:51:b6:
                    ea:04:0a:3d:06:e3:16:57:2a:27:e1:2f:d6:7f:9f:
                    94:f4:a7:12:7b:6a:53:5f:af:cd:4e:be:28:c0:46:
                    51:c1:d1:49:85:5a:5f:ec:96:b0:f1:8d:53:ff:ba:
                    18:09:0a:48:93:be:60:d6:e1:44:ba:b7:cb:7c:72:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:4B:1A:01:7F:47:09:AC:55:35:7C:91:85:A5:DD:8C:81:B6:A0:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9a3e5607-f8d9-415f-b159-2099f0ef579a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9a3e5607-f8d9-415f-b159-2099f0ef579a/4b92b3929e29d655da6caecd6f380e307020e769.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.255.0/24
                  200.23.205.0/24
                IPv6:
                  2803:7810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271847

    Signature Algorithm: sha256WithRSAEncryption
         a6:b5:63:df:b7:60:4c:7d:ce:55:9d:1b:c1:93:13:85:0d:5b:
         7d:9c:1d:12:cd:c9:6c:2d:ea:31:b1:78:46:df:50:31:eb:ac:
         b0:87:b1:50:af:11:cf:4e:48:e4:c4:ed:58:57:3d:0e:8a:1f:
         29:fa:c4:4f:2b:55:b9:b1:dc:0d:de:e3:26:fb:03:7f:25:eb:
         90:9e:d5:6c:b9:d7:9b:87:8f:cd:29:2b:fe:64:6a:e2:b9:dd:
         d5:7d:1c:d4:9e:64:16:b1:21:11:57:d8:21:29:f5:58:e9:50:
         0b:4d:c3:12:06:66:30:bd:00:0a:20:30:47:ea:50:56:f7:56:
         8b:af:7b:be:68:2f:69:a9:ce:79:d2:58:f3:c8:72:76:44:7c:
         24:f8:3f:ae:1d:72:15:8b:65:61:0f:dc:8f:48:2d:8e:62:7a:
         f9:05:2c:3a:5f:3e:69:7c:e1:c5:61:78:60:c6:ec:27:1d:11:
         d3:31:9d:d4:0e:be:5a:e4:ec:8a:e0:9c:5c:25:35:da:b1:ff:
         ab:88:ec:3e:7d:2e:c7:ac:82:9e:c4:c7:bc:f3:7b:c2:28:ea:
         b3:3b:6c:b8:27:f9:5c:78:e9:33:7b:62:4b:aa:82:f1:9d:34:
         64:77:62:dc:ee:a9:22:1e:1a:3f:2d:35:8c:eb:b5:72:a6:55:
         6b:17:2b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----