Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/605cf3289c792d268c7c753bc6b077776562b8d5.cer
File:                     605cf3289c792d268c7c753bc6b077776562b8d5.cer (raw, json)
Hash identifier:          +5DRyVM31AoIXRk8VyUJeG5w48IeRIISNWPG5sRJ3O8=
Subject key identifier:   E5:F0:CF:0E:CB:DE:64:60:1F:CC:EE:6A:5A:AD:9A:9B:7B:C5:5F:24
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFF08B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/443e5461-e053-4059-9c9c-e6b8986c8483/605cf3289c792d268c7c753bc6b077776562b8d5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/443e5461-e053-4059-9c9c-e6b8986c8483/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jun 2023 16:52:01 +0000
Certificate not after:    Fri 12 Jul 2024 18:33:32 +0000
Subordinate resources:    AS: 265700
                          IP: 131.161.88.0/22
                          IP: 2801:1b:a000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15724683 (0xeff08b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 28 16:52:01 2023 GMT
            Not After : Jul 12 18:33:32 2024 GMT
        Subject: CN=605cf3289c792d268c7c753bc6b077776562b8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:93:c8:c1:35:78:ec:af:97:1b:ba:0a:29:7a:
                    4e:9c:6f:c5:2c:e6:64:eb:2d:1c:1c:ad:cb:86:6e:
                    79:e0:de:d2:5b:ed:a4:71:c5:58:e7:9d:16:37:11:
                    41:a1:09:61:29:71:5b:1c:ee:03:b2:35:c8:74:78:
                    6f:db:4d:27:86:cf:a2:b8:96:0d:b1:12:be:a7:18:
                    b5:b6:4a:de:98:7d:7f:d4:b2:34:f8:15:84:5b:c2:
                    d6:9a:2f:32:e7:c8:41:5e:d9:64:f4:83:2e:da:07:
                    92:27:3f:27:60:a6:24:21:57:ee:96:ea:a0:cd:f6:
                    9e:cc:50:1a:46:f0:7f:fe:1f:e3:03:20:a2:2f:b0:
                    b2:69:cb:1a:69:88:bf:27:ea:a5:4e:5e:9c:6c:b8:
                    e7:a5:35:6a:87:4f:99:7f:41:0c:0c:00:b5:02:31:
                    3c:57:fe:aa:98:50:24:08:9e:42:e7:21:b1:1d:e2:
                    d0:8f:29:2f:d2:ed:f6:45:5f:b3:ed:31:cd:cf:41:
                    6b:92:5e:91:62:b2:f8:a2:f3:86:ff:4f:96:28:bf:
                    66:34:3f:43:80:49:d5:7d:fd:94:ec:b2:fc:9e:16:
                    8c:bd:11:7d:00:03:62:10:19:5e:40:d9:b3:10:f3:
                    26:1e:fc:5c:ad:8f:11:3b:3d:e1:f4:8b:c2:37:e7:
                    61:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F0:CF:0E:CB:DE:64:60:1F:CC:EE:6A:5A:AD:9A:9B:7B:C5:5F:24
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/443e5461-e053-4059-9c9c-e6b8986c8483/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/443e5461-e053-4059-9c9c-e6b8986c8483/605cf3289c792d268c7c753bc6b077776562b8d5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.88.0/22
                IPv6:
                  2801:1b:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265700

    Signature Algorithm: sha256WithRSAEncryption
         3c:75:e0:c7:fd:7b:dd:33:65:71:f9:57:3e:54:23:26:c2:96:
         fd:52:7f:aa:58:1b:5e:2d:1c:2a:b9:1d:a1:cd:d5:3a:1e:0b:
         3e:76:7f:b9:f2:9b:a7:9c:fd:d1:7a:9f:04:14:c3:61:fe:11:
         8a:33:15:42:94:b7:a5:78:b1:09:2d:56:15:05:43:40:43:55:
         2a:4e:8c:c7:b5:36:16:35:7f:3b:f2:e7:ff:30:96:07:0d:72:
         b8:0c:53:21:fe:40:b7:bf:95:2e:01:60:51:c9:4a:86:37:fd:
         c7:58:16:e7:37:a3:2c:1c:75:f5:67:c0:40:62:5e:17:8c:ce:
         a8:44:58:74:13:0b:88:e1:5c:09:0f:52:b2:6d:47:01:ee:a8:
         c8:f1:54:83:a7:88:c6:b2:94:ba:6e:97:32:ec:7d:e8:23:be:
         bc:7d:3e:cc:06:9b:55:03:4b:77:72:f8:9b:56:64:05:6e:22:
         74:03:bb:5a:bc:e1:4e:bc:ad:34:20:f3:ef:e9:58:47:40:0d:
         24:20:f5:87:0d:7d:6c:2b:d0:26:3c:52:ac:53:ee:ee:bd:8f:
         9f:57:44:67:64:78:90:ce:4f:fd:46:ee:d9:73:b6:3b:f7:52:
         b9:26:72:e9:dc:ee:ea:dd:a8:44:94:09:c3:c7:6a:70:b6:72:
         c8:0f:20:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----