Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c15da342258b34cd6ea5bbbeda8da8e8ccfe9bf.cer
File:                     4c15da342258b34cd6ea5bbbeda8da8e8ccfe9bf.cer (raw, json)
Hash identifier:          hMhuqkyZAEIE7RYsM2hERRclcrEl1Rxlw0qp5E326+Y=
Subject key identifier:   D6:24:5E:9F:E8:36:66:46:94:F1:8C:4E:EE:E0:ED:48:BD:1A:3A:90
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01105190
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/37bcc23e-fc2a-4d7b-863d-0c73005c45df/4c15da342258b34cd6ea5bbbeda8da8e8ccfe9bf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/37bcc23e-fc2a-4d7b-863d-0c73005c45df/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 02:47:44 +0000
Certificate not after:    Sat 06 Sep 2025 06:00:00 +0000
Subordinate resources:    AS: 64162
                          AS: 273211
                          IP: 45.68.56.0/22
                          IP: 2801:1b5::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17846672 (0x1105190)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 02:47:44 2024 GMT
            Not After : Sep  6 06:00:00 2025 GMT
        Subject: CN=4c15da342258b34cd6ea5bbbeda8da8e8ccfe9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b6:20:5e:23:80:20:9e:c7:51:34:51:55:e8:
                    8b:09:43:5a:7d:ca:cb:db:3a:5d:9f:80:18:01:a3:
                    0d:0c:a6:09:0f:10:ea:e5:9f:a7:2a:fc:4c:ef:0c:
                    c1:34:70:c7:a8:d3:b6:53:8d:3e:10:c2:b4:20:b5:
                    1a:c0:f4:3d:c5:49:8c:2d:b2:d7:d8:89:10:ae:2b:
                    76:32:92:91:45:ba:6b:1d:1e:af:99:9f:76:0a:20:
                    da:f6:20:e8:fa:18:8a:80:62:08:6d:72:31:4b:95:
                    fb:cf:32:03:e6:ce:53:30:51:8c:44:95:d3:8a:f9:
                    14:4b:3d:51:2c:ac:07:22:ef:5f:c4:b3:c1:af:3f:
                    e5:46:a3:e6:de:87:6b:af:33:71:f4:92:11:11:32:
                    77:46:a0:68:56:00:cc:43:55:8a:c6:36:1b:a0:15:
                    21:16:5f:0a:64:1a:33:c5:ef:09:13:87:68:ac:a6:
                    d4:0f:d0:31:1d:65:d4:a4:98:f2:fc:f7:7e:1c:d4:
                    bf:9d:4b:0b:ac:c3:8b:c9:7d:24:d4:3a:95:cd:8a:
                    35:c4:43:a3:73:ac:2d:7f:23:4b:78:db:ce:28:b2:
                    c9:70:9e:a9:d6:80:30:95:e1:2a:e6:7a:ae:1b:51:
                    3a:86:28:2d:49:d5:73:69:e5:cd:e3:c3:80:b5:49:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:24:5E:9F:E8:36:66:46:94:F1:8C:4E:EE:E0:ED:48:BD:1A:3A:90
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/37bcc23e-fc2a-4d7b-863d-0c73005c45df/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/37bcc23e-fc2a-4d7b-863d-0c73005c45df/4c15da342258b34cd6ea5bbbeda8da8e8ccfe9bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.56.0/22
                IPv6:
                  2801:1b5::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64162
                  273211

    Signature Algorithm: sha256WithRSAEncryption
         c3:8d:b8:a9:b8:8a:bc:99:ca:6b:ef:e7:24:77:47:f0:f8:72:
         9b:ab:0f:cf:e4:3a:2e:2a:00:77:c2:ea:18:07:84:a6:74:5c:
         2c:18:1e:9b:e6:57:40:66:23:c4:e7:79:75:e8:c4:a4:d6:db:
         89:e1:97:cd:7b:bb:f6:fa:b7:9d:55:32:1d:c4:e2:4c:01:b7:
         1e:15:bc:4d:55:c8:3e:c7:fa:9b:a1:1f:bc:e9:ef:f4:2b:b2:
         c7:a4:87:1e:cd:61:14:d5:f3:68:c9:25:1c:7c:99:37:f2:f3:
         43:58:91:d8:51:9b:53:c8:34:0d:e5:f2:4e:d6:7c:d5:90:56:
         6a:27:dc:a7:91:84:b0:ff:30:9a:5c:3c:47:99:10:0e:af:d7:
         4f:3c:a4:2b:d9:43:c7:97:ea:66:85:4f:7d:f3:23:9c:de:04:
         0e:70:c9:84:a1:6f:4a:0e:75:a5:b9:23:ee:34:d0:59:ae:bb:
         c2:cf:00:fe:fb:0d:6a:3d:fe:e7:25:0d:08:89:f1:ad:24:a0:
         7e:83:63:d5:31:e2:42:55:30:8c:0f:b2:d4:39:ca:2a:8e:97:
         97:de:80:e4:50:c5:66:ed:55:15:86:21:06:43:87:99:35:c9:
         c3:3c:1b:6c:47:0d:41:a7:41:e8:db:5c:ab:fb:b5:e4:ca:33:
         61:d2:60:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----