Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bd23c73fd54204ca904ed18f805af61478834ef.cer
File:                     4bd23c73fd54204ca904ed18f805af61478834ef.cer (raw, json)
Hash identifier:          +c6dpCQR7sVNDZ61e6Hi24Pf1X11a3/aR6keqrgQzIc=
Subject key identifier:   B9:69:D8:BE:78:14:68:32:E5:21:C9:13:39:40:37:87:78:DD:F4:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF7E65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8f740150-0e6c-451e-8b51-bfe689e59f53/4bd23c73fd54204ca904ed18f805af61478834ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8f740150-0e6c-451e-8b51-bfe689e59f53/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:23:18 +0000
Certificate not after:    Mon 06 Jan 2025 13:50:45 +0000
Subordinate resources:    AS: 267249
                          IP: 45.232.56.0/22
                          IP: 2804:4a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16744037 (0xff7e65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:23:18 2023 GMT
            Not After : Jan  6 13:50:45 2025 GMT
        Subject: CN=4bd23c73fd54204ca904ed18f805af61478834ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8b:24:ba:65:25:ea:d3:10:54:4e:85:df:35:
                    f5:60:5b:c2:97:74:f9:3b:d9:ce:62:e7:bc:ba:6f:
                    1a:6c:f5:41:e7:3c:b8:d5:11:01:94:cc:71:fd:7b:
                    2e:5f:e6:b0:5c:cc:bc:46:2d:30:8c:49:d0:1f:f3:
                    d6:17:54:53:b5:56:57:69:86:0c:f2:a4:77:e6:a3:
                    a3:7c:8a:f3:f3:d4:b6:a3:37:23:75:36:69:2b:32:
                    7b:bc:3c:7d:4c:44:9b:b5:f1:bd:61:9b:bb:95:1f:
                    ef:1c:0b:90:d4:03:d7:dc:28:59:70:a9:c0:45:78:
                    23:48:69:92:1d:44:6e:90:ef:38:ab:eb:ca:79:b5:
                    6c:7b:5f:15:07:a0:ba:a4:51:df:b0:1a:17:ce:40:
                    b5:dc:a1:0d:b1:48:a3:de:40:f2:45:f7:34:63:ae:
                    56:13:5b:ad:a4:1a:98:cf:45:47:06:4d:e1:26:9e:
                    77:c5:03:2e:35:17:81:57:c4:1d:ea:3f:c9:20:d6:
                    42:51:cf:9b:ea:1d:ae:8d:8c:fb:e8:ea:ad:78:61:
                    87:fd:07:f1:cd:a0:19:7c:b0:ee:73:db:ac:90:0e:
                    d7:c7:75:b9:42:36:d5:9d:49:b3:be:68:08:57:eb:
                    6d:7e:cf:7b:be:5f:ec:08:37:e9:59:98:9b:b5:4d:
                    ec:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:69:D8:BE:78:14:68:32:E5:21:C9:13:39:40:37:87:78:DD:F4:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8f740150-0e6c-451e-8b51-bfe689e59f53/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8f740150-0e6c-451e-8b51-bfe689e59f53/4bd23c73fd54204ca904ed18f805af61478834ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.56.0/22
                IPv6:
                  2804:4a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267249

    Signature Algorithm: sha256WithRSAEncryption
         c2:a0:8a:7d:ab:b7:47:2e:5b:09:56:ae:18:b9:26:e7:0a:37:
         4f:3f:28:ad:a0:82:de:72:ee:87:47:26:38:30:6a:64:50:85:
         88:96:63:f8:09:fb:ee:f1:b3:06:e7:78:0a:4a:35:fe:b0:d8:
         34:e5:48:b8:85:e2:13:4a:d7:e5:51:bf:8b:d6:e9:7f:22:cd:
         11:ca:85:9d:bd:4f:3b:1d:b6:ef:14:60:35:1d:47:a3:06:06:
         19:94:f1:1b:fa:96:7f:96:6d:7d:de:d4:44:49:48:a6:e8:1b:
         2c:9c:2b:10:18:e3:9a:2f:dc:4e:5a:a4:37:84:44:9d:a2:ca:
         c8:fc:9a:28:21:58:64:35:83:8b:87:43:ee:b7:ee:29:7b:63:
         cb:e5:2d:af:58:ac:0b:29:d3:46:87:fc:ee:b3:50:4b:71:78:
         17:50:64:8d:b7:b4:76:10:a3:35:6c:df:1b:87:c5:6f:69:e1:
         b8:2f:3d:8d:79:cc:48:b3:1f:90:53:81:de:73:08:bd:53:8e:
         5c:e3:04:0f:ad:13:4a:b4:c7:76:84:ae:ed:29:07:c4:d9:2b:
         0c:92:29:2a:c1:6e:50:77:b5:74:4c:a9:ad:f0:bf:9d:2b:e2:
         42:a9:a4:2e:1b:12:9b:ce:a0:34:49:fe:9c:f4:4e:14:2c:eb:
         18:26:75:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----