Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54b87004c3d9b45d51e1ac5b7b30fa88c483abbd.cer
File:                     54b87004c3d9b45d51e1ac5b7b30fa88c483abbd.cer (raw, json)
Hash identifier:          bhln8+MzFJfnZB7KL/Fpq2MlkPNE4NzLv8buEFom+ks=
Subject key identifier:   F4:03:53:DA:52:BA:C7:B3:B7:BB:57:E4:F6:C0:29:0D:8B:37:FA:68
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102EB4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0ca2f820-dc19-45d1-8a18-ed3e05bac612/54b87004c3d9b45d51e1ac5b7b30fa88c483abbd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0ca2f820-dc19-45d1-8a18-ed3e05bac612/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 01:23:15 +0000
Certificate not after:    Tue 28 Jan 2025 15:17:16 +0000
Subordinate resources:    AS: 266761
                          IP: 45.232.152.0/22
                          IP: 2803:d720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16968525 (0x102eb4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  5 01:23:15 2023 GMT
            Not After : Jan 28 15:17:16 2025 GMT
        Subject: CN=54b87004c3d9b45d51e1ac5b7b30fa88c483abbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:09:92:48:d8:cf:c4:b4:eb:49:98:3b:56:c9:
                    e3:86:62:d4:e5:56:9a:8e:5f:59:8f:0e:d0:59:27:
                    83:e1:1f:b1:73:17:0f:de:71:64:59:16:5b:ff:9f:
                    54:91:1c:99:49:ca:03:98:47:88:d4:88:d0:d0:87:
                    22:07:32:ef:7b:be:10:49:e7:1f:48:4d:9a:bf:6c:
                    df:54:f0:df:43:c3:f4:35:88:65:23:93:7d:a5:c3:
                    6b:e4:3e:84:a2:0f:07:f0:8c:08:a6:0f:28:9a:4d:
                    b2:6d:c6:cc:e2:02:c1:27:be:3e:20:6e:c9:2d:24:
                    bf:b0:6b:a7:9d:47:6e:81:87:27:02:23:c3:46:3d:
                    8a:9c:60:86:b5:4c:62:f4:d1:3c:c4:72:67:c3:14:
                    15:2b:e7:a8:fa:cd:90:ab:f5:6d:60:26:a2:ad:b3:
                    8f:f1:20:c2:f6:1d:d9:57:25:82:1c:ef:f5:0b:f8:
                    ab:f9:54:8c:c3:26:28:8c:55:a8:11:ea:83:93:49:
                    e1:28:83:9d:4f:4d:0b:07:8d:b9:8b:8b:4e:fd:4d:
                    21:61:74:b5:5f:9b:c7:5a:f1:f5:01:06:55:41:92:
                    b6:e8:2e:d1:52:d1:28:b8:bc:81:26:d8:c3:fd:78:
                    50:90:71:a2:5f:86:d9:f3:e3:70:65:5c:c1:91:05:
                    95:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:03:53:DA:52:BA:C7:B3:B7:BB:57:E4:F6:C0:29:0D:8B:37:FA:68
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0ca2f820-dc19-45d1-8a18-ed3e05bac612/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0ca2f820-dc19-45d1-8a18-ed3e05bac612/54b87004c3d9b45d51e1ac5b7b30fa88c483abbd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.152.0/22
                IPv6:
                  2803:d720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266761

    Signature Algorithm: sha256WithRSAEncryption
         8e:d2:af:dd:59:6e:41:c6:46:3b:76:c9:34:9c:ce:8e:ef:85:
         c5:23:b0:65:89:ec:fc:7f:1e:2e:df:1e:c0:91:94:9a:31:08:
         da:cb:1e:79:0d:96:d4:71:43:3c:72:99:98:2a:a5:5a:06:18:
         76:0d:1c:c7:4b:e2:c7:39:16:be:2c:99:d0:3e:73:e0:d7:79:
         29:62:f5:0d:b3:96:4c:9d:f9:c5:f1:cc:c9:73:18:87:db:74:
         e8:2d:0c:4e:e3:01:6f:e4:85:7a:3e:12:c9:a0:80:86:19:35:
         83:2d:33:47:57:03:8f:96:65:5d:5c:6a:02:5b:f5:3e:56:a3:
         a4:7f:b1:41:cc:36:56:b2:36:29:58:f7:4f:23:9c:76:ca:02:
         a9:fe:27:3b:73:fd:0e:a7:d2:f7:4b:7c:6b:26:b9:03:6f:d3:
         a0:0c:ab:0f:a3:97:e1:4c:62:9c:c1:18:15:a0:fc:29:e2:6e:
         6d:4c:6a:14:2e:49:bc:e4:7d:ac:bf:58:f9:3c:f5:cd:d0:b2:
         a4:a0:c8:0a:71:07:4d:c9:49:7d:64:1e:d8:bc:78:15:ca:5a:
         dd:4d:48:fd:9e:eb:94:8f:81:10:b5:19:62:4e:e7:da:3e:a5:
         92:bb:0f:66:3b:1b:2c:3b:56:ce:f0:73:24:24:4c:67:09:97:
         13:51:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----