Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55f33cd120f718aeb6a3c99bbcee002dd16d1f81.cer
File:                     55f33cd120f718aeb6a3c99bbcee002dd16d1f81.cer (raw, json)
Hash identifier:          CE7B67LRNUk4A/cnkbV56ADQZexj6LVDJnTSTj0ds/8=
Subject key identifier:   30:B8:9A:48:CF:9F:28:43:9E:0A:6B:52:A4:EE:43:9E:33:A8:9F:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FED52A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10393686-d212-4255-81a7-af63bba39e4c/55f33cd120f718aeb6a3c99bbcee002dd16d1f81.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10393686-d212-4255-81a7-af63bba39e4c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:37:11 +0000
Certificate not after:    Wed 25 Jun 2025 15:42:22 +0000
Subordinate resources:    AS: 263964
                          IP: 138.255.76.0/22
                          IP: 2804:287c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16700714 (0xfed52a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:37:11 2023 GMT
            Not After : Jun 25 15:42:22 2025 GMT
        Subject: CN=55f33cd120f718aeb6a3c99bbcee002dd16d1f81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:cf:1b:2d:8c:02:25:d5:be:4a:13:85:31:67:
                    84:d0:ea:e0:a9:f8:2c:c6:35:76:d5:70:32:e1:26:
                    9f:b7:64:5f:47:fa:95:38:7f:0f:eb:68:c2:5a:8c:
                    e3:67:8e:d0:a0:db:44:d6:1c:a4:0a:eb:b9:a6:5b:
                    6a:60:4f:5f:0a:d2:b3:54:52:75:da:b0:94:5b:6b:
                    67:f8:fd:a4:40:6f:33:dc:ff:ff:09:27:22:f0:22:
                    6f:5e:d7:79:6e:cc:49:de:4d:6d:44:71:d0:5f:2e:
                    2a:dc:c6:61:34:56:dd:3d:25:9c:54:74:84:b3:a1:
                    68:06:c9:f8:ee:c0:56:cb:eb:02:31:8a:de:e2:98:
                    b1:7e:fb:20:29:00:c6:5d:f7:bf:67:80:01:bd:a0:
                    5f:71:96:1b:35:20:1f:d3:23:f5:94:e2:d4:be:bb:
                    4c:b3:08:74:6f:40:9c:83:5f:41:9d:5e:c7:22:cb:
                    82:eb:d0:db:66:4e:9a:c0:06:ed:9e:a8:6c:32:cc:
                    82:94:5e:29:ab:ce:9d:bc:09:8c:f2:ab:07:c9:18:
                    d5:a0:60:53:e5:05:8c:17:1b:5d:fd:09:42:66:f2:
                    dd:c0:ab:82:78:10:39:9a:8a:17:15:95:65:38:c6:
                    8b:11:da:eb:d2:68:e2:49:4c:16:74:81:ec:5d:50:
                    3b:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:B8:9A:48:CF:9F:28:43:9E:0A:6B:52:A4:EE:43:9E:33:A8:9F:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10393686-d212-4255-81a7-af63bba39e4c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10393686-d212-4255-81a7-af63bba39e4c/55f33cd120f718aeb6a3c99bbcee002dd16d1f81.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.76.0/22
                IPv6:
                  2804:287c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263964

    Signature Algorithm: sha256WithRSAEncryption
         af:4a:95:aa:3c:cb:12:38:dc:85:98:1a:ce:2f:67:36:df:34:
         10:e1:ed:82:d2:75:1a:fc:5e:02:1b:51:a1:15:f6:db:41:c6:
         ee:78:bd:02:65:55:99:fc:80:b9:fc:a4:69:fa:ea:c5:5f:9c:
         3b:be:e1:7f:ba:14:9f:d3:ad:00:e6:a3:4d:05:a3:6d:be:3a:
         98:53:6c:48:be:3f:7f:37:dd:dc:2e:06:5a:4a:fd:0f:71:d1:
         28:77:01:8a:b9:3c:8d:36:f0:9b:1a:ea:49:a8:29:cb:bb:f9:
         19:85:87:c5:56:ef:0e:fa:1a:cb:99:51:e1:10:f1:8a:47:3b:
         ec:5b:ca:83:4d:de:d4:ba:f3:eb:14:20:d9:3e:22:61:9e:e7:
         10:76:34:fe:43:dc:17:27:de:36:e7:12:11:2f:f0:e9:ff:40:
         e4:1b:4e:8c:a5:72:8b:4e:71:52:91:1f:b6:57:b9:fa:db:d7:
         4b:20:3c:b7:09:47:50:11:b8:3e:e7:d4:fb:a5:3b:e2:4a:33:
         39:46:1e:49:0d:c2:1a:93:c4:eb:97:7e:65:5e:76:6a:22:06:
         69:8d:4b:bd:9e:35:f1:09:7e:0a:c5:3f:f2:59:7b:fb:86:71:
         b3:f0:bc:0e:4c:89:52:f2:6e:08:8e:04:1e:ee:e5:3f:98:8a:
         8c:1e:7b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----