Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/515af199412959859d5f174ff944863a58f0ef63.cer
File:                     515af199412959859d5f174ff944863a58f0ef63.cer (raw, json)
Hash identifier:          glo6RFZ59pb9rTWxu8pzih4itQu2PysjPf2pyB8L7Lg=
Subject key identifier:   F7:7D:2C:66:F5:46:63:9F:8F:D2:BC:CD:79:49:C3:59:C3:62:E9:3D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF050C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43bc13b6-0499-4372-bc6b-5c9fe64e0664/515af199412959859d5f174ff944863a58f0ef63.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43bc13b6-0499-4372-bc6b-5c9fe64e0664/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:50:24 +0000
Certificate not after:    Fri 04 Apr 2025 16:23:00 +0000
Subordinate resources:    AS: 263025
                          IP: 177.10.200.0/22
                          IP: 2804:a24::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16712972 (0xff050c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:50:24 2023 GMT
            Not After : Apr  4 16:23:00 2025 GMT
        Subject: CN=515af199412959859d5f174ff944863a58f0ef63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:eb:63:67:49:50:87:cd:47:3f:49:70:4a:
                    00:24:f4:3c:33:68:ce:79:93:24:99:1d:36:97:0d:
                    e4:21:0d:5f:ce:92:54:f4:0c:01:fa:8b:98:d1:77:
                    40:96:67:b3:4b:85:f2:c5:4e:80:79:bf:0f:36:1c:
                    da:ec:b4:ef:b1:90:f4:07:b4:94:6e:80:97:7d:5a:
                    5c:73:68:44:44:86:31:69:66:1f:36:08:cd:1d:d4:
                    b7:40:77:e8:f4:cc:cf:76:3f:6f:0e:2b:a5:1d:f4:
                    83:fa:d9:9e:03:69:16:f8:bd:25:a8:e4:13:da:7a:
                    b9:b3:11:f7:6a:2d:7a:34:07:3e:5b:3b:57:e8:62:
                    72:3c:67:d2:91:5b:3c:25:28:c7:99:52:de:58:36:
                    cb:38:48:0e:69:36:52:67:b5:5e:05:17:c3:71:0c:
                    18:a5:3b:95:8e:b8:8f:f4:2c:8a:5b:5d:95:d5:f3:
                    51:1c:33:70:4d:b7:63:ab:0d:17:93:e5:e7:04:44:
                    80:17:0e:ad:d6:f5:28:23:82:de:a0:0b:e9:4f:19:
                    19:6f:df:2a:c9:2a:ce:2d:52:88:ab:45:bb:86:8f:
                    27:d9:67:f6:80:fc:7b:df:e7:57:11:77:a7:cc:9c:
                    80:db:91:81:c5:54:a6:c9:2a:ba:2d:c1:7d:73:54:
                    2c:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:7D:2C:66:F5:46:63:9F:8F:D2:BC:CD:79:49:C3:59:C3:62:E9:3D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43bc13b6-0499-4372-bc6b-5c9fe64e0664/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43bc13b6-0499-4372-bc6b-5c9fe64e0664/515af199412959859d5f174ff944863a58f0ef63.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.10.200.0/22
                IPv6:
                  2804:a24::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263025

    Signature Algorithm: sha256WithRSAEncryption
         b4:af:96:09:7e:17:53:48:7d:87:c1:4c:dc:b6:a3:94:d2:ef:
         15:cf:41:b9:a1:1b:13:88:a6:bb:a9:87:2a:05:c2:79:1a:ec:
         d2:36:64:3a:11:51:0b:be:c8:c1:db:39:e3:97:39:14:55:4d:
         e2:ef:4c:69:77:fb:03:db:3c:a0:96:91:6b:19:1f:f4:9b:36:
         72:7e:fb:d8:5c:7a:ae:86:18:7c:ea:88:1a:bd:78:6d:66:7a:
         98:e5:64:f0:6d:80:1b:7f:bd:76:ce:b8:37:51:8c:8c:e3:30:
         9c:92:b6:31:7c:49:44:f2:dd:bf:dd:f8:d9:1a:93:10:6f:80:
         11:6a:19:a4:d5:77:c4:1e:25:f1:08:19:1b:88:59:f1:c4:a7:
         a9:7a:7d:26:a8:6b:82:22:1f:ab:b9:08:02:2f:a5:d2:58:97:
         1a:de:93:23:c6:56:dc:92:0f:78:4f:9b:fb:c3:af:81:d8:9f:
         3e:2b:dd:8c:41:50:d7:cd:44:d3:5a:a8:d4:ea:23:df:87:c2:
         a0:3c:10:d2:9b:ab:f9:cb:ea:14:01:d6:22:da:21:00:d2:e0:
         18:e4:c3:1e:54:b8:8f:e5:f8:68:ca:81:36:26:f9:2b:45:e5:
         56:21:45:3c:15:92:a5:5d:ff:bc:82:91:47:df:2f:93:2d:9a:
         6e:8f:70:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----