Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c55a4e2215c36b453cb483907680364f4b333a9.cer
File:                     4c55a4e2215c36b453cb483907680364f4b333a9.cer (raw, json)
Hash identifier:          vI/0BPrrxdhPc0lmk5jTIL4rRW76JMd7i8pfjEhaFRo=
Subject key identifier:   B7:D2:0E:FE:8A:48:B0:64:57:88:09:62:DA:66:4E:36:0D:F6:3C:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E942D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d0ab5cae-804a-4623-b97a-be1a6297c4b8/4c55a4e2215c36b453cb483907680364f4b333a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d0ab5cae-804a-4623-b97a-be1a6297c4b8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 16:26:56 +0000
Certificate not after:    Sat 15 Feb 2025 05:00:00 +0000
Subordinate resources:    AS: 52321
                          IP: 186.189.252.0/22
                          IP: 190.123.120.0/22
                          IP: 2800:900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15286996 (0xe942d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 16:26:56 2023 GMT
            Not After : Feb 15 05:00:00 2025 GMT
        Subject: CN=4c55a4e2215c36b453cb483907680364f4b333a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:17:3d:fd:ff:2f:3d:a9:1b:f3:71:d1:af:41:
                    c2:20:24:42:5e:d2:c0:ff:d6:bd:41:db:91:e0:4f:
                    be:6e:e4:9e:8e:d8:67:5e:38:03:a6:41:cd:3f:21:
                    8e:b7:59:e3:89:2f:52:39:58:d3:44:91:49:0e:5c:
                    a8:3b:ae:7a:5d:a0:08:e9:72:45:da:19:af:1d:52:
                    78:d7:8f:71:e9:f0:96:36:4f:2b:c8:b5:7a:27:17:
                    a4:14:6d:ca:57:ee:75:15:16:f3:40:e7:b4:1d:c1:
                    01:ef:6a:52:84:54:c9:06:ce:40:77:86:ad:0e:6d:
                    c7:69:be:ae:92:b4:cf:9a:0e:68:25:bf:e7:d2:5e:
                    8d:df:a0:22:e4:29:32:20:10:26:5a:24:5e:01:ce:
                    82:f5:e2:68:7b:06:ac:f3:bd:60:2c:5b:57:b6:08:
                    77:e9:36:81:45:fa:27:bc:97:5f:41:86:2d:a0:c1:
                    a2:50:32:aa:b9:a3:21:ec:72:34:00:5d:cc:ac:22:
                    11:ea:24:89:15:5b:44:0c:17:8d:14:1a:16:1b:4e:
                    cf:02:ec:e6:5c:fd:2a:bb:6e:08:c5:45:90:ee:c5:
                    ee:ee:60:0c:71:3b:18:cf:d0:b9:71:4d:03:93:b2:
                    da:56:94:6c:ae:0f:81:4f:14:d4:18:03:5a:1d:0a:
                    d4:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:D2:0E:FE:8A:48:B0:64:57:88:09:62:DA:66:4E:36:0D:F6:3C:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d0ab5cae-804a-4623-b97a-be1a6297c4b8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d0ab5cae-804a-4623-b97a-be1a6297c4b8/4c55a4e2215c36b453cb483907680364f4b333a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.189.252.0/22
                  190.123.120.0/22
                IPv6:
                  2800:900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52321

    Signature Algorithm: sha256WithRSAEncryption
         2d:fa:61:b2:77:9a:40:f1:27:26:90:4e:b9:e8:e1:22:cc:de:
         aa:bb:14:c1:87:4d:7b:9d:e1:55:95:ee:23:80:58:a2:5e:80:
         bd:bf:ec:ed:18:db:d6:0b:fb:16:cd:c0:d6:f2:9d:ce:59:e1:
         e8:3d:ba:21:12:27:47:4e:07:18:70:6f:38:65:9a:db:5d:6f:
         51:3a:3d:04:33:ac:a0:00:4d:a4:cc:e6:9f:ee:51:de:0a:90:
         38:0a:e1:d0:78:b9:d0:eb:3c:97:09:07:e9:c7:8a:b9:91:7d:
         d0:d0:c4:ce:6c:d5:57:4a:87:1a:b9:4f:9e:80:57:7d:e1:e8:
         92:35:a8:cb:47:0f:6a:d8:6c:ac:32:9c:dc:4b:92:31:89:2f:
         07:cd:e2:d2:e6:72:5e:49:e9:29:14:a3:36:78:66:4f:59:19:
         28:9d:a6:2f:5a:a8:52:a2:2d:0a:21:e5:ac:cf:33:05:53:34:
         59:1e:38:5c:70:52:31:c8:5f:fa:68:6b:a4:3b:d1:f9:52:8e:
         c2:28:25:ce:b3:90:7c:d4:9a:71:50:39:19:7e:cd:21:c5:13:
         3f:1e:4a:54:28:e9:10:55:f7:ff:37:e9:ef:5f:a7:83:e4:5f:
         ec:a2:72:a5:5b:5e:63:c4:18:6c:d5:3c:a7:c6:28:a8:b3:4b:
         bd:cb:65:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----