Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/577ebac624b1c2d191b7182497a47ed595997c06.cer
File:                     577ebac624b1c2d191b7182497a47ed595997c06.cer (raw, json)
Hash identifier:          18EkuN7BlboiXeEa4Lz1isf3paHeCxJ5KNFwZdlBmik=
Subject key identifier:   22:AD:A8:C3:3F:81:4A:9D:6C:A2:D5:06:9D:E2:5B:29:86:45:8D:62
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D41740
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/577ebac624b1c2d191b7182497a47ed595997c06.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Oct 2022 14:47:17 +0000
Certificate not after:    Mon 08 Apr 2024 19:01:22 +0000
Subordinate resources:    AS: 271815
                          IP: 200.219.52.0/22
                          IP: 2803:c5e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13899584 (0xd41740)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 14:47:17 2022 GMT
            Not After : Apr  8 19:01:22 2024 GMT
        Subject: CN=577ebac624b1c2d191b7182497a47ed595997c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:26:9b:af:30:64:d5:01:db:42:a6:99:c4:
                    da:c1:63:17:ca:e8:75:14:b3:21:28:a9:fd:b5:6a:
                    f0:f4:6e:7d:13:58:f2:47:3b:e6:85:d6:65:cf:1d:
                    cc:2e:3a:6d:38:1c:92:3f:6f:4a:de:fc:43:77:ff:
                    e4:c5:e6:47:83:e6:67:eb:e7:07:f8:94:b3:5c:f5:
                    18:7a:05:77:c6:02:f7:59:6e:cc:ff:1b:3b:2e:b5:
                    19:ea:31:23:ca:78:eb:ef:02:0b:de:c0:85:64:b1:
                    c9:fc:e4:0e:c0:da:30:e4:c0:9f:67:a0:91:17:45:
                    1d:2f:d6:83:51:7c:7a:ff:92:b8:82:9f:2e:4f:ff:
                    26:51:e1:32:e5:6e:6a:ae:10:92:79:eb:0e:ad:7d:
                    8e:86:90:c0:c2:bd:bb:eb:dc:64:48:b2:50:e4:6e:
                    37:f6:e9:7e:00:e2:0e:36:e9:5f:46:bf:46:b6:1a:
                    f4:f4:80:9d:5e:35:e8:e0:b1:a2:95:80:4d:75:0a:
                    50:cf:1e:fd:48:48:ec:e4:a4:8e:84:b1:85:30:3f:
                    ef:36:b8:27:6a:b4:fd:60:0e:b1:8d:48:12:1f:f6:
                    1c:8c:28:08:eb:85:e5:d0:45:a3:8f:ca:85:d0:8b:
                    d3:ee:a1:81:6e:0e:05:bc:b3:eb:1b:e9:f6:a8:d4:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:AD:A8:C3:3F:81:4A:9D:6C:A2:D5:06:9D:E2:5B:29:86:45:8D:62
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73caf-f783-46f5-ae28-ba41c78b6122/577ebac624b1c2d191b7182497a47ed595997c06.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.219.52.0/22
                IPv6:
                  2803:c5e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271815

    Signature Algorithm: sha256WithRSAEncryption
         5f:9f:0e:bc:1e:6b:b0:d3:43:e9:b8:b7:9e:7d:a0:38:71:cc:
         95:ca:10:e4:3a:09:66:f7:fe:18:10:ca:e9:ac:dd:58:9f:4e:
         ce:a9:b3:bc:4e:c9:04:56:da:c2:2c:52:c4:56:4a:1e:c6:a6:
         f0:a3:bf:3c:97:46:b8:e3:81:e7:b8:30:94:91:0f:e1:41:f4:
         0c:88:f5:75:70:ef:4f:c7:51:68:2a:0b:c8:4c:98:db:5a:bf:
         ac:ff:fc:75:42:63:75:75:72:4f:8b:36:fe:11:58:7f:ed:c6:
         64:29:91:1f:93:4b:6d:98:9d:d8:be:c0:eb:1c:2e:21:23:51:
         81:19:12:44:87:a3:53:30:81:46:69:bf:53:de:59:69:fc:7f:
         f2:90:c4:22:8f:be:57:79:09:4f:76:01:9a:a8:42:53:90:f5:
         78:fb:c4:75:a8:2b:71:2f:30:a8:c2:ea:2f:73:a4:8a:4d:4a:
         8f:49:9f:c3:be:7a:f5:ee:92:a5:d8:58:d1:5c:b5:fe:6a:9d:
         43:0a:0c:eb:e1:07:12:3f:7a:7b:02:ae:cb:c0:11:f2:51:56:
         70:14:ed:4c:b4:82:1c:85:f8:9b:6e:d7:57:57:02:af:19:49:
         ec:40:29:1f:cd:c5:f7:d4:01:ee:3c:48:42:88:2a:ad:ba:47:
         aa:cc:c1:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----