Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f5dddd108ae925a108099bdb9fdb730f6a8a1cf.cer
File:                     4f5dddd108ae925a108099bdb9fdb730f6a8a1cf.cer (raw, json)
Hash identifier:          nh2ym8kWbmKFbUo/pBg/4JZoiJT/IAn3D64nr2WscRI=
Subject key identifier:   F8:E9:F3:62:BB:92:80:CA:E0:5F:11:A0:50:A3:1A:8B:D6:10:52:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF4E82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e444dc44-2440-4e6f-9bfb-ce1190ae26c1/4f5dddd108ae925a108099bdb9fdb730f6a8a1cf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e444dc44-2440-4e6f-9bfb-ce1190ae26c1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:14:38 +0000
Certificate not after:    Tue 25 Mar 2025 15:11:07 +0000
Subordinate resources:    AS: 264997
                          IP: 170.84.144.0/22
                          IP: 2804:3128::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16731778 (0xff4e82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:14:38 2023 GMT
            Not After : Mar 25 15:11:07 2025 GMT
        Subject: CN=4f5dddd108ae925a108099bdb9fdb730f6a8a1cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5a:fb:e3:95:dd:1a:73:b7:78:81:3f:e7:e1:
                    02:fb:59:a3:11:b6:b9:83:af:dc:32:c2:2a:0b:dd:
                    89:7a:04:9d:00:00:65:c5:06:b3:e6:bc:9d:20:aa:
                    67:75:66:5f:a5:5c:e8:32:70:86:cc:c5:6a:84:b2:
                    c0:60:33:63:bf:2c:df:8d:1d:81:dc:c7:81:40:e9:
                    97:09:df:70:2f:2e:93:f5:de:52:d0:c1:64:44:c1:
                    3b:a7:b6:9f:00:36:ba:02:fe:02:b8:d6:12:f2:55:
                    0f:72:21:ce:d5:73:f7:ff:fb:6b:71:ab:70:02:05:
                    aa:e1:5b:0f:0e:6a:ce:d4:db:35:26:a2:6c:d8:6a:
                    37:84:24:69:bb:44:db:35:28:65:77:28:2d:3a:fe:
                    8c:ed:21:eb:f2:06:d5:38:d0:d7:af:1f:8a:63:4b:
                    2e:0a:4a:e0:2e:50:4f:1a:e0:6c:0c:f5:5d:44:a2:
                    e1:e7:9c:fd:c3:0a:41:ac:0a:84:9e:54:ec:48:74:
                    99:23:57:52:d5:0a:04:2d:0a:6e:3e:ab:0f:47:cd:
                    05:0a:42:e9:b6:2d:ce:dc:47:aa:db:d7:39:c0:3b:
                    23:ff:33:5d:52:ee:29:38:c7:0c:08:0b:bf:c3:23:
                    0a:5b:91:23:82:84:03:54:a4:8c:ad:1f:82:dd:07:
                    4f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:E9:F3:62:BB:92:80:CA:E0:5F:11:A0:50:A3:1A:8B:D6:10:52:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e444dc44-2440-4e6f-9bfb-ce1190ae26c1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e444dc44-2440-4e6f-9bfb-ce1190ae26c1/4f5dddd108ae925a108099bdb9fdb730f6a8a1cf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.144.0/22
                IPv6:
                  2804:3128::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264997

    Signature Algorithm: sha256WithRSAEncryption
         34:3e:4a:c4:22:c3:c3:1b:7e:60:7a:f4:61:a5:04:4e:56:29:
         4f:e3:85:52:1c:e8:67:2f:a6:86:c6:47:89:a7:0b:53:dc:16:
         92:a7:dc:e0:a0:70:7c:f7:89:0e:a0:e1:a8:69:f6:65:3c:29:
         60:13:64:ed:9f:8f:8e:1d:0a:c2:3e:82:63:a8:c0:71:6f:ef:
         03:8d:cb:f4:0f:35:69:2f:d5:a8:93:04:c2:56:d8:b1:1b:20:
         a0:5f:16:c0:04:b0:e7:29:49:7f:4f:0c:93:88:05:3d:b8:80:
         29:67:0a:ec:1d:49:d6:90:c7:8a:16:ce:9d:c7:8c:42:e3:92:
         7c:ef:7b:bd:a7:3a:c5:2d:5c:99:d1:40:b6:18:4e:58:f2:a4:
         c6:5b:0c:f7:6a:ef:34:f8:3c:92:19:12:55:ef:d6:de:bc:a3:
         5b:d5:ea:84:c8:67:d6:37:58:9c:05:95:01:98:de:03:29:19:
         f2:5e:1d:fc:73:61:78:24:65:85:e7:29:ae:4a:1d:86:92:2b:
         d3:02:6c:0e:4d:4a:09:7c:b5:03:47:f3:05:d6:df:cc:cc:f1:
         c2:fc:31:3d:5d:69:2d:4f:61:38:c1:34:11:24:a6:bf:ec:7a:
         7d:42:ad:7d:96:e0:7a:58:be:a6:2d:f5:2e:6a:be:00:0b:6c:
         b8:da:81:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----