Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/61bb73ceb58daba7846b78a087961dedc7d99577.cer
File:                     61bb73ceb58daba7846b78a087961dedc7d99577.cer (raw, json)
Hash identifier:          1mCfscWphXYD7o9ghShYnF4gzkSGwwaFwJLjfwiOcSY=
Subject key identifier:   0F:3A:E1:B9:B3:98:12:53:AA:22:AB:C5:04:94:87:2C:A0:28:7A:D6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9DF13
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/61bb73ceb58daba7846b78a087961dedc7d99577.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 16:37:28 +0000
Certificate not after:    Mon 27 May 2024 18:07:17 +0000
Subordinate resources:    AS: 265778
                          IP: 164.163.240.0/24
                          IP: 2801:1d:3000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15326995 (0xe9df13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 16:37:28 2023 GMT
            Not After : May 27 18:07:17 2024 GMT
        Subject: CN=61bb73ceb58daba7846b78a087961dedc7d99577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:29:c1:c0:5f:11:17:eb:6b:ba:ae:16:67:ba:
                    31:ca:5d:32:f7:08:d7:ba:38:b0:31:bf:48:3e:03:
                    fc:53:c6:21:db:34:92:3b:0a:11:7b:cb:14:5e:59:
                    77:64:25:16:3a:8a:e1:8c:9c:6b:ea:7c:a3:2b:0b:
                    99:b0:ab:5a:78:56:88:02:a3:fa:39:fe:ef:fb:e1:
                    10:16:e6:c6:fc:d6:55:a2:aa:dd:a3:13:3d:48:65:
                    8f:8b:a9:c4:e8:45:07:43:97:1a:c3:b7:f5:b0:42:
                    36:d6:4b:e9:c8:fe:ef:47:33:76:21:6a:b4:3b:0b:
                    7c:71:8a:1d:e5:00:58:ad:02:31:95:67:64:72:5a:
                    22:26:04:fb:d2:68:c5:ae:7c:4b:44:99:60:99:d4:
                    2e:66:a8:84:52:44:1f:a8:8a:66:5a:db:00:10:f4:
                    79:0d:d9:1b:1a:d1:b7:2e:88:64:23:b3:5f:11:22:
                    77:aa:7a:b2:32:48:91:63:a9:8a:90:c5:5c:6c:0f:
                    60:bd:30:42:5d:82:8a:0a:81:29:e5:9c:d5:c8:4d:
                    8a:03:f6:ae:67:76:69:f3:4a:3a:9f:ff:6b:22:11:
                    70:8d:3a:37:7c:bd:0c:cf:fa:dc:8d:d7:66:e8:ac:
                    4a:75:00:90:83:dd:c1:2c:60:dd:ce:15:b5:7f:04:
                    0c:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3A:E1:B9:B3:98:12:53:AA:22:AB:C5:04:94:87:2C:A0:28:7A:D6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2c13e0ad-f17d-4909-a74d-f1b0675cb433/61bb73ceb58daba7846b78a087961dedc7d99577.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.240.0/24
                IPv6:
                  2801:1d:3000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265778

    Signature Algorithm: sha256WithRSAEncryption
         b0:97:13:16:f5:3b:e6:b9:87:a2:ee:d5:43:2c:15:6c:9c:3e:
         80:35:f2:af:a1:43:0f:c8:a8:bb:85:a5:73:06:eb:69:a1:69:
         50:4e:72:e9:a4:4c:59:0e:27:6e:ad:89:ee:6b:aa:d5:b3:01:
         6a:6a:a7:89:ae:c4:35:a1:fb:10:56:c9:87:8f:fe:0e:08:7f:
         91:af:65:f1:28:78:ee:6c:15:48:15:60:f5:2c:10:ba:ea:ed:
         ba:78:7c:90:66:d8:50:23:5d:04:67:a4:d6:3d:f0:69:04:ec:
         c0:9b:b1:9c:f7:e4:62:46:6e:b2:38:66:ee:0f:79:3f:b2:74:
         aa:97:65:d6:82:cf:9e:3a:8d:71:dc:52:1b:10:f7:d2:eb:c0:
         23:0f:31:dc:36:ee:11:60:5f:94:44:b3:5d:ca:de:dc:32:0d:
         63:4b:e1:90:ac:36:50:4c:13:a4:1f:e5:1d:dd:69:c7:3c:2a:
         d2:d9:e9:8f:df:fe:37:a4:9c:0b:da:72:f9:18:54:60:01:d3:
         3c:ee:40:ce:68:1f:48:0c:e3:95:30:d9:62:7c:17:30:1c:8a:
         2d:65:8c:bb:56:30:f9:9b:28:3b:ec:03:48:8c:1f:1c:59:19:
         e6:c3:12:e6:e3:78:96:b0:bb:f5:ba:c5:28:f0:56:ab:d9:01:
         9d:0d:df:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----