Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/604a67651b9e118bdc8f447e80ce77e1326a75c0.cer
File:                     604a67651b9e118bdc8f447e80ce77e1326a75c0.cer (raw, json)
Hash identifier:          mDAjwHVbjruzf4GtLyW8U0M1l1YvXY6TPqpPXTWk4n8=
Subject key identifier:   01:B5:81:D5:80:05:4B:8E:F4:D4:0B:9D:04:09:2A:26:77:6C:B7:73
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA8812
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/604a67651b9e118bdc8f447e80ce77e1326a75c0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 25 Apr 2023 20:57:05 +0000
Certificate not after:    Wed 22 May 2024 05:32:02 +0000
Subordinate resources:    AS: 270222
                          IP: 186.26.72.0/22
                          IP: 2806:3c3::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15370258 (0xea8812)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 25 20:57:05 2023 GMT
            Not After : May 22 05:32:02 2024 GMT
        Subject: CN=604a67651b9e118bdc8f447e80ce77e1326a75c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a0:63:8d:ee:c1:93:e3:c8:68:94:bd:68:d2:
                    56:67:67:ac:a9:7e:e0:e0:49:84:d2:ec:9a:3c:de:
                    c7:4c:58:6e:a0:95:9e:98:a6:7f:41:d0:b3:ae:80:
                    42:3f:ea:09:1b:d6:22:7b:56:35:63:06:22:67:a1:
                    4b:e7:13:9c:af:f5:0c:a9:58:c4:2a:7a:bd:2e:65:
                    ad:fa:ab:71:08:77:1a:dd:7d:df:08:e2:50:d2:da:
                    e6:8c:a3:20:1d:03:bc:ca:d3:40:0e:6f:8c:c4:6e:
                    7d:c8:b8:71:fa:96:54:df:ec:87:bc:4f:56:a9:d4:
                    39:e4:86:55:4b:66:de:cb:28:05:c5:e8:ea:26:9b:
                    03:38:3a:14:2e:ac:18:13:8c:d7:76:5c:77:5b:08:
                    f4:f5:2b:ca:4d:6c:f9:22:ba:01:be:d3:3a:9e:a6:
                    11:aa:cb:f1:d4:c6:2a:46:22:96:47:00:d8:b4:60:
                    80:4d:d8:45:c4:c2:8d:99:ba:14:79:f8:ff:4a:99:
                    24:67:3c:d4:46:c5:c9:6e:0c:ec:8f:e8:92:90:f6:
                    d4:dc:ae:48:8a:e1:fa:20:1a:d5:0c:32:93:45:3f:
                    26:96:36:b5:dd:57:d5:ac:f0:cd:97:8f:02:88:10:
                    c1:81:19:8c:79:eb:e6:74:b0:25:e6:e1:e0:30:e6:
                    ac:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B5:81:D5:80:05:4B:8E:F4:D4:0B:9D:04:09:2A:26:77:6C:B7:73
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/60301754-5ae7-4eb9-ae7b-93cb9761ab48/604a67651b9e118bdc8f447e80ce77e1326a75c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.26.72.0/22
                IPv6:
                  2806:3c3::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270222

    Signature Algorithm: sha256WithRSAEncryption
         9c:3d:df:d8:cf:8f:d4:3b:f3:4a:58:ab:ab:c0:1e:37:67:e0:
         3e:a3:80:69:a3:0f:20:77:9b:3e:f8:05:95:38:e6:ac:2d:b8:
         54:7d:c2:51:34:4f:86:c4:ed:37:13:49:c6:5f:d9:25:c7:45:
         f0:2d:6f:77:25:b4:35:6d:3e:1c:14:ad:89:4c:a3:89:a8:5c:
         e3:3c:10:74:7c:94:49:2f:2c:e9:6a:03:b4:a9:e0:ee:d5:73:
         84:59:19:ee:99:7f:31:6c:7e:2a:40:58:4a:7b:10:a2:84:d0:
         bb:cc:d1:c4:41:16:7e:ba:21:5a:8a:c8:c0:1e:8b:92:c0:a9:
         fa:a9:7a:12:05:d9:19:a9:f1:0f:b9:6d:53:29:a5:82:50:2b:
         5e:57:31:9b:b2:c7:c8:39:7a:ff:9e:fe:90:6f:67:3d:a5:40:
         36:cc:de:bb:34:57:c8:db:ea:7c:74:1e:e4:a8:2b:77:dd:79:
         b5:a8:51:e6:df:5c:20:f9:0d:1d:85:25:97:c5:8f:45:10:56:
         0a:a0:8b:da:97:3d:ea:0f:37:73:cd:4a:65:ec:71:5c:ad:09:
         f8:06:48:8b:23:15:ce:37:f5:71:01:59:2a:b6:98:75:1d:a2:
         ff:06:80:86:8f:c3:52:d9:97:5f:3e:9d:63:cc:b0:6f:86:32:
         36:5f:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----