Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/575739f10b2686664d2295816af33137bbfb7d27.cer
File:                     575739f10b2686664d2295816af33137bbfb7d27.cer (raw, json)
Hash identifier:          vePXRyrgbNcsBs6zFDJ4AFcQMcJlDsGWxgvn4+WKNQ0=
Subject key identifier:   DF:C4:D8:2E:79:F5:F6:9E:D5:79:F9:45:EF:E4:B3:A7:E5:B7:EC:0C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6A545
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ce596b97-a8da-4031-a99b-70c8dedf3b90/575739f10b2686664d2295816af33137bbfb7d27.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ce596b97-a8da-4031-a99b-70c8dedf3b90/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 25 Aug 2023 23:06:43 +0000
Certificate not after:    Thu 26 Dec 2024 20:31:34 +0000
Subordinate resources:    AS: 269951
                          IP: 190.89.32.0/24
                          IP: 2801:17:c800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16164165 (0xf6a545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 25 23:06:43 2023 GMT
            Not After : Dec 26 20:31:34 2024 GMT
        Subject: CN=575739f10b2686664d2295816af33137bbfb7d27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:5f:04:86:ad:0d:ca:e0:53:43:d3:24:91:c0:
                    7f:dd:00:3a:09:51:34:a8:51:ce:9a:c3:5d:77:49:
                    d2:0c:1c:29:09:a4:23:43:17:ca:54:9e:87:57:43:
                    47:28:75:2c:3a:90:ee:77:70:a4:cb:25:0e:7b:4c:
                    43:eb:ab:02:30:91:7f:ed:3a:65:ce:b9:83:ed:a0:
                    8b:c0:e9:ef:7e:58:43:69:5f:2c:5a:d1:8b:ed:e8:
                    a9:3f:bb:44:fc:e9:c1:4a:98:86:35:d2:1a:da:f2:
                    b2:e3:6e:b0:51:cf:88:25:46:2c:5c:7a:a1:6a:a4:
                    c2:6a:cd:ba:f0:ec:71:70:55:83:cf:28:94:3d:61:
                    7d:17:c3:44:68:1c:ac:22:d0:b8:5c:5a:65:16:0e:
                    03:0d:c0:29:4a:90:c7:75:37:5d:55:0a:01:3c:49:
                    af:cf:d9:fd:7b:ac:a4:2d:66:30:16:8b:a1:6d:85:
                    f0:dc:fb:b0:c0:c5:3e:7d:a3:bf:64:5f:42:07:4f:
                    fb:fe:b2:43:ff:d2:28:3f:a4:28:9b:42:b5:27:19:
                    9b:36:49:bf:a3:a2:54:a7:c0:06:b9:02:47:06:e5:
                    ef:f6:1e:2f:fc:7a:0a:e8:6f:28:3a:af:f2:f9:57:
                    85:30:e9:2c:e8:fa:9e:6c:ae:0e:b6:90:7e:af:c5:
                    6a:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C4:D8:2E:79:F5:F6:9E:D5:79:F9:45:EF:E4:B3:A7:E5:B7:EC:0C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ce596b97-a8da-4031-a99b-70c8dedf3b90/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ce596b97-a8da-4031-a99b-70c8dedf3b90/575739f10b2686664d2295816af33137bbfb7d27.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.89.32.0/24
                IPv6:
                  2801:17:c800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269951

    Signature Algorithm: sha256WithRSAEncryption
         c2:ed:67:8a:ea:20:b8:2c:d5:5b:34:69:37:2b:ad:ea:e6:b2:
         e5:a2:f7:69:bb:3b:d3:a7:6f:c4:65:06:02:ad:af:64:b9:56:
         77:87:fc:7c:19:7d:bc:97:38:87:11:74:46:57:64:a4:2d:9e:
         6c:24:3a:af:81:d4:6c:a1:a8:46:1b:40:83:bb:d8:c4:90:52:
         ec:f7:72:4c:dc:c6:b0:a0:84:a5:a7:0c:1f:c4:84:84:34:3c:
         61:04:ee:72:4a:fe:82:50:3d:38:2f:15:b7:de:e8:48:ba:b5:
         db:11:3c:20:ce:d1:30:6a:bf:fb:2b:74:a3:b4:6e:e6:b7:fe:
         a0:8b:ee:0c:9d:b1:0e:b8:75:96:ff:8b:39:90:be:8e:dd:52:
         1b:bd:0f:f4:77:06:44:3e:74:d3:d1:b1:c8:75:ed:c0:b5:06:
         7d:39:fd:8f:1f:01:ba:ca:f1:5f:86:5e:8f:8b:54:71:2a:a4:
         e9:40:f1:5a:e9:47:0e:8c:2b:dd:25:58:66:5a:98:51:a7:ac:
         30:3f:bd:83:80:6c:76:e3:62:db:bd:2d:c9:29:60:8f:fb:11:
         f7:8c:e5:72:c5:85:2d:20:32:00:d5:49:67:da:8b:f6:aa:db:
         e1:f9:72:ee:81:a3:8e:e1:53:65:6d:b7:e3:26:8e:1c:c7:51:
         b3:82:dc:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----