Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acfffcdf0115644645ac1bd50221646562a5c51.cer
File:                     5acfffcdf0115644645ac1bd50221646562a5c51.cer (raw, json)
Hash identifier:          crRS7mCjq4sNqYUQs12zQf6QQEcga+PGLrnYKM7O3kc=
Subject key identifier:   3B:C6:C3:96:E1:5F:5B:30:33:A4:15:EA:57:BD:A4:8D:36:4C:8F:47
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6D474
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/de832205-329b-41a6-af9f-a7994b6e26b4/5acfffcdf0115644645ac1bd50221646562a5c51.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/de832205-329b-41a6-af9f-a7994b6e26b4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 28 Aug 2023 12:13:45 +0000
Certificate not after:    Sun 01 Jun 2025 23:00:16 +0000
Subordinate resources:    AS: 266873
                          IP: 45.239.84.0/22
                          IP: 2803:1aa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16176244 (0xf6d474)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 28 12:13:45 2023 GMT
            Not After : Jun  1 23:00:16 2025 GMT
        Subject: CN=5acfffcdf0115644645ac1bd50221646562a5c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:db:2f:b2:aa:3d:c7:cf:09:7e:ba:b1:82:6a:
                    5c:91:56:98:b5:e5:f9:66:60:f6:7c:2c:9b:30:a5:
                    5f:2f:8e:41:0a:ee:91:c9:ad:4b:7a:68:a2:85:4e:
                    ba:fe:ca:ac:8c:1d:b5:aa:d3:94:66:ae:a3:f1:e7:
                    35:0d:1c:39:d1:55:b4:1a:fd:db:7b:74:6a:fb:4c:
                    ce:27:3f:71:7c:d4:82:bc:06:9e:e7:5f:a8:ca:8f:
                    f9:db:c0:f7:39:23:b0:90:39:a1:12:ef:47:13:2d:
                    d4:01:33:82:2d:a9:46:47:cd:34:30:f9:7e:71:ce:
                    d3:b8:67:2b:a8:a2:a9:77:95:90:55:fc:68:32:07:
                    0a:ae:5d:0f:20:30:bd:d9:6a:7f:49:24:22:6a:57:
                    4f:18:46:9b:d9:14:3e:ad:f6:92:5d:74:f4:dd:50:
                    3a:26:74:95:79:19:6d:11:52:da:ba:4c:91:b8:2b:
                    ed:6e:ea:df:1e:d5:ee:4f:64:63:ae:d6:24:1f:27:
                    5a:7e:78:58:f9:29:27:52:25:52:a6:72:6d:e8:dd:
                    08:1e:16:cb:c7:42:e8:f8:03:03:5a:db:4d:39:ac:
                    ed:ea:42:bf:f2:06:bd:4d:d3:87:1d:78:79:36:09:
                    b1:2e:45:df:f8:72:a6:4d:6c:12:4c:f1:20:2b:a1:
                    81:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C6:C3:96:E1:5F:5B:30:33:A4:15:EA:57:BD:A4:8D:36:4C:8F:47
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/de832205-329b-41a6-af9f-a7994b6e26b4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/de832205-329b-41a6-af9f-a7994b6e26b4/5acfffcdf0115644645ac1bd50221646562a5c51.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.84.0/22
                IPv6:
                  2803:1aa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266873

    Signature Algorithm: sha256WithRSAEncryption
         8d:85:b0:93:70:c7:b6:45:e5:6a:3e:40:26:7c:c9:c6:99:5d:
         6b:0a:c3:75:2c:99:dd:09:38:0e:7c:84:cb:22:be:e7:4f:64:
         88:23:5d:ad:07:55:86:64:ab:52:51:dc:c7:d3:ee:6b:4b:8f:
         e9:f7:43:8b:ac:31:21:fa:24:3a:f1:b1:d0:44:d4:f6:3e:ad:
         d2:0f:af:a6:29:9d:1a:d3:aa:b1:ae:c7:ee:38:24:cd:45:79:
         e3:62:64:09:b1:05:91:ce:37:47:02:e3:b1:a8:2e:b7:b2:d4:
         8e:df:62:c3:e1:0b:c4:38:52:7a:0c:ac:75:47:ba:86:92:73:
         61:f1:42:8b:0e:7f:56:75:8f:28:e7:9b:d0:3a:cb:f1:b3:2b:
         f8:ca:e3:05:2d:26:19:18:77:5e:64:89:c8:e9:2e:0d:e8:2a:
         5e:8a:72:c3:b8:94:06:6d:5b:ef:56:51:09:39:e9:20:46:b4:
         8c:d1:85:5b:36:51:7c:28:29:fb:54:24:1a:bb:d6:a1:90:79:
         81:08:22:08:da:09:08:6e:41:25:da:58:77:c5:f6:94:25:b4:
         7f:f8:e3:3d:99:bd:87:00:9d:76:3c:33:02:22:75:e2:84:a6:
         fb:73:15:37:ca:ca:18:df:94:7a:1e:ed:10:df:98:f6:7c:66:
         27:81:22:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----