Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d68bc328aa41c3cc636ff6bf747b293edf06362.cer
File:                     4d68bc328aa41c3cc636ff6bf747b293edf06362.cer (raw, json)
Hash identifier:          3LXBkqT3iJSpArAbJhFV8N8P2NfyUawa97y0VSkCXFU=
Subject key identifier:   55:38:3D:D1:AB:B2:37:21:C6:EF:7E:A1:09:EC:2C:E9:DE:CA:BD:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3CDDA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/34a86ede-ef6d-4fa4-ae05-9a9c65c9b128/4d68bc328aa41c3cc636ff6bf747b293edf06362.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/34a86ede-ef6d-4fa4-ae05-9a9c65c9b128/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 14:52:28 +0000
Certificate not after:    Mon 26 Feb 2024 18:29:22 +0000
Subordinate resources:    AS: 267840
                          IP: 45.175.212.0/22
                          IP: 2803:d460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14929370 (0xe3cdda)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 14:52:28 2023 GMT
            Not After : Feb 26 18:29:22 2024 GMT
        Subject: CN=4d68bc328aa41c3cc636ff6bf747b293edf06362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:3b:8b:a9:08:b1:3c:a9:99:e5:ce:1b:de:8e:
                    38:34:59:91:80:5f:24:c2:3f:2e:4f:2a:ca:9e:34:
                    a1:24:3c:a8:3b:86:02:19:69:ad:92:13:e5:74:f9:
                    0d:00:e7:7f:d8:5f:93:3e:9c:09:ed:5d:3d:d8:77:
                    a1:64:f3:c0:a9:0f:a4:8d:bc:5b:67:6e:92:1d:0e:
                    c8:7e:7a:07:7f:ab:d7:4b:b9:13:fb:90:a8:48:48:
                    c0:26:e1:17:06:4f:88:cf:5c:d9:66:e1:fc:e4:62:
                    7d:47:49:37:bc:e5:44:90:f7:ce:1f:7e:7b:c2:bd:
                    f6:88:f9:67:87:51:f2:7f:8c:8c:33:6d:41:ad:25:
                    e8:d2:6f:30:40:0f:33:fb:8c:23:5c:05:e4:f7:82:
                    a4:18:db:75:cf:d7:07:8a:8f:77:05:1f:f3:30:57:
                    ae:f5:a1:df:3e:e4:80:41:75:bd:21:24:24:b8:bd:
                    60:2a:d4:2f:51:0e:f3:25:64:99:22:30:b6:2d:ff:
                    11:3b:56:70:df:cf:7e:54:38:33:65:58:cb:df:fc:
                    f0:47:56:bf:21:2c:ad:b6:57:e0:d7:11:0b:d6:6a:
                    9c:20:af:01:e4:c4:48:ae:a7:5f:61:f4:be:46:fd:
                    01:b1:c6:1a:6b:bc:11:ff:7b:f9:7b:6e:2e:e6:fd:
                    1c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:38:3D:D1:AB:B2:37:21:C6:EF:7E:A1:09:EC:2C:E9:DE:CA:BD:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/34a86ede-ef6d-4fa4-ae05-9a9c65c9b128/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/34a86ede-ef6d-4fa4-ae05-9a9c65c9b128/4d68bc328aa41c3cc636ff6bf747b293edf06362.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.212.0/22
                IPv6:
                  2803:d460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267840

    Signature Algorithm: sha256WithRSAEncryption
         90:74:7b:8a:45:7c:bd:d0:41:1f:a9:20:2e:6e:bc:fd:70:64:
         62:65:40:0a:7f:37:25:ca:b0:92:41:ed:87:10:39:94:60:02:
         65:29:8c:0f:27:1b:cf:9a:1f:af:32:8f:41:46:ab:c9:f7:6d:
         3f:de:79:1a:2d:34:20:0e:00:b2:86:05:c5:6b:6f:ac:59:b4:
         7e:fa:2b:25:da:99:b7:8c:90:5a:4c:ee:b9:b8:92:5f:68:1f:
         47:3d:eb:88:28:8b:ae:7a:e7:ba:b1:cd:49:06:4b:1e:66:13:
         87:e8:2d:e8:f4:ba:08:14:21:c7:51:85:18:c0:28:f5:21:46:
         5b:e2:73:fd:d5:12:e1:e9:c2:a0:c5:3b:a2:9a:c0:d5:b7:60:
         a8:4d:af:70:20:c9:2e:83:ed:cc:d7:63:c0:08:61:e1:e3:54:
         07:32:37:e7:97:53:78:a3:93:4e:d9:a0:cb:41:d5:ff:e5:c5:
         6d:e0:0e:75:3a:aa:ee:e8:29:66:5b:e3:75:42:72:b3:30:a2:
         f3:bd:ba:7f:14:de:7e:31:10:f2:fd:5c:7e:59:c1:5e:79:4a:
         1e:f0:2f:8b:97:3e:2e:04:ea:a3:a8:2e:7d:ed:c8:9c:ca:4a:
         5a:55:6f:94:62:1b:29:21:c5:c7:09:01:03:b8:d7:2b:d1:67:
         cb:9e:80:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----