Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5786d5335d38a92455a7fbebbd53b82686f88c74.cer
File:                     5786d5335d38a92455a7fbebbd53b82686f88c74.cer (raw, json)
Hash identifier:          +ITVMerIhxJpXx2upxMlPlCoY3x+evufjWMFqtI8mjc=
Subject key identifier:   4D:77:5C:F0:29:DB:34:75:15:C9:F4:D1:5C:8A:DA:81:E9:F0:71:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101EF4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1d63ac1a-5287-4e3f-8223-f134d713ad02/5786d5335d38a92455a7fbebbd53b82686f88c74.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1d63ac1a-5287-4e3f-8223-f134d713ad02/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 19:25:53 +0000
Certificate not after:    Tue 10 Jun 2025 22:25:01 +0000
Subordinate resources:    AS: 263818
                          IP: 138.186.152.0/22
                          IP: 2803:8a40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16904011 (0x101ef4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 21 19:25:53 2023 GMT
            Not After : Jun 10 22:25:01 2025 GMT
        Subject: CN=5786d5335d38a92455a7fbebbd53b82686f88c74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:54:86:16:59:11:59:86:4d:ac:55:dd:79:
                    04:9f:c5:63:60:83:e6:22:f5:82:56:16:d1:08:8a:
                    80:13:d2:db:18:ab:b1:d4:2e:fc:07:50:7a:7c:b8:
                    2d:00:b9:1b:7d:aa:0c:55:43:d4:b5:ce:b9:0a:3e:
                    d8:e3:4f:d3:25:c3:58:a7:09:99:a7:21:25:9d:08:
                    59:8a:91:5d:7a:3b:21:9d:79:ae:d5:1e:98:ec:51:
                    65:fa:e9:c3:cb:ca:77:18:36:53:d4:81:28:c2:95:
                    55:e0:25:a2:c8:1b:b1:2f:eb:84:6a:6c:20:df:e3:
                    dc:eb:a4:8f:95:fe:13:32:5c:15:ca:e8:5d:92:e0:
                    b4:c5:3b:99:a8:c1:3a:21:39:d8:e3:4a:f1:52:f6:
                    e6:b8:86:75:bc:42:c4:b2:1a:97:f2:ef:3c:ec:97:
                    c9:28:bd:f8:61:b4:ff:ee:01:95:84:84:96:19:cd:
                    f5:9c:79:f8:5e:d0:03:10:15:5e:6d:d1:27:15:44:
                    0d:74:42:08:7e:98:ce:c4:20:82:1d:65:09:3a:c3:
                    6b:48:a7:75:67:96:dc:42:88:1b:68:52:4b:74:89:
                    f3:b7:72:8c:0e:2a:96:2f:29:14:b7:a5:37:62:0c:
                    9e:a4:e2:1e:83:37:0b:c2:5d:d2:06:36:56:ce:5f:
                    74:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:77:5C:F0:29:DB:34:75:15:C9:F4:D1:5C:8A:DA:81:E9:F0:71:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1d63ac1a-5287-4e3f-8223-f134d713ad02/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1d63ac1a-5287-4e3f-8223-f134d713ad02/5786d5335d38a92455a7fbebbd53b82686f88c74.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.152.0/22
                IPv6:
                  2803:8a40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263818

    Signature Algorithm: sha256WithRSAEncryption
         1f:48:22:89:f0:66:62:bd:31:73:6c:56:08:6d:f4:8b:99:ed:
         28:47:3e:83:6b:94:4f:a0:fe:3b:61:de:33:42:fd:0c:03:33:
         7d:f5:c8:23:c2:47:6a:2a:fd:9e:2e:92:12:12:46:b7:8c:70:
         02:65:a0:b7:00:3b:92:df:55:fb:08:e9:40:a2:bf:ca:ea:a0:
         61:df:63:22:b5:09:d5:59:58:6c:ac:c9:a0:7f:7f:a1:65:1a:
         10:b6:9d:55:53:e0:e8:a5:30:45:10:c4:41:e8:7c:8b:90:50:
         18:94:a6:71:f2:ac:6c:10:e9:30:5c:cc:21:ed:ce:7b:d7:e8:
         fd:9e:c6:19:10:86:78:4f:a4:67:b5:8f:4c:de:d5:ee:30:f3:
         21:d4:5c:fe:1f:54:f3:51:53:cf:a4:6f:8d:69:cd:89:e3:94:
         d0:f3:53:4d:a1:66:b8:8a:72:bc:e8:69:41:8e:7d:fa:5f:30:
         1c:8b:be:7b:d5:94:f6:9c:e7:53:89:dc:99:6a:85:e7:00:b9:
         b2:61:b0:c5:d5:59:5a:2f:5a:af:87:1d:13:ae:b1:2c:05:5f:
         59:84:f2:92:08:e8:ca:77:cc:a1:61:3e:e4:55:3e:16:b7:8f:
         eb:a1:e7:bb:ba:90:ef:d4:cf:b9:b4:d8:a1:92:30:52:87:12:
         83:d0:f0:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----