Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62384768198ac7dad2dedae543aedd0494c8f41c.cer
File:                     62384768198ac7dad2dedae543aedd0494c8f41c.cer (raw, json)
Hash identifier:          LqDER04YXnBYI4OVN7u48QVWk3CAGIPL7PMz6LsvFGI=
Subject key identifier:   A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010ED9C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/62384768198ac7dad2dedae543aedd0494c8f41c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Jun 2022 16:45:45 +0000
Certificate not after:    Thu 23 Oct 2025 21:41:57 +0000
Subordinate resources:    AS: 270149
                          AS: 272323
                          IP: 148.208.0.0/16
                          IP: 2806:3c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17750472 (0x10ed9c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 16:45:45 2022 GMT
            Not After : Oct 23 21:41:57 2025 GMT
        Subject: CN=62384768198ac7dad2dedae543aedd0494c8f41c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:81:3b:7f:45:67:70:93:07:b7:86:9f:5e:
                    14:c8:1e:18:ca:b6:fb:c8:82:6e:a8:98:52:2d:b4:
                    2f:03:7a:9d:3e:f1:c2:9e:01:5e:10:ea:5a:af:13:
                    b7:20:1a:17:3c:7f:61:b6:15:c6:38:da:43:9d:97:
                    b2:11:a6:84:82:35:06:c5:f2:04:8f:6f:32:34:70:
                    4e:4b:87:a7:af:3c:06:7e:b4:7c:db:4e:82:d3:f4:
                    c7:43:33:df:bc:60:03:52:4a:65:7e:04:ad:52:4f:
                    c4:55:a2:30:14:d4:37:51:1c:34:9b:a2:21:c2:a8:
                    4d:5c:68:3d:e1:18:5f:b8:9b:4b:59:59:5c:8f:25:
                    d2:74:5f:24:1a:f2:89:a0:9b:4f:3d:e4:fc:91:48:
                    23:26:85:0d:2c:80:b3:04:b2:c7:a9:2a:3e:03:b8:
                    98:32:e0:2b:33:61:28:52:8f:4c:04:3e:70:f3:ff:
                    ef:50:15:ae:99:fd:ef:b7:f9:3d:1d:29:f1:86:11:
                    c6:96:44:c5:7c:2f:38:a4:78:16:e7:6a:cd:68:f0:
                    0c:f8:4d:1f:46:45:55:e0:12:85:30:46:af:ee:23:
                    92:02:0a:74:82:b4:2e:53:27:b5:f5:9a:a0:e4:c6:
                    35:4a:75:c2:2b:a0:1e:43:41:fe:eb:14:4d:9f:6d:
                    a4:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:4E:B0:DE:AF:9B:2C:FD:DB:07:DB:C8:15:ED:88:6B:F6:8C:50:6B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/77222bf7-71b7-40ba-bdb1-ea5030db5275/62384768198ac7dad2dedae543aedd0494c8f41c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.208.0.0/16
                IPv6:
                  2806:3c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270149
                  272323

    Signature Algorithm: sha256WithRSAEncryption
         c0:47:55:a2:9a:3d:71:cb:94:a3:33:e8:f7:53:fd:9e:51:29:
         42:68:a9:2e:c3:7f:f7:6e:81:58:7d:46:6a:24:f5:f2:01:8e:
         ed:b2:f3:65:2e:59:af:f5:08:62:6b:2c:a1:c9:7d:d9:33:09:
         12:84:ab:c9:dd:eb:f3:f4:c4:10:e1:4b:f8:3d:8a:c1:79:68:
         e3:7b:dd:96:6f:f0:79:9c:53:e1:2d:0b:58:99:9e:28:0e:70:
         6f:2f:ad:81:cf:eb:f4:22:54:c5:be:9d:92:be:91:93:9c:bb:
         c1:87:73:91:27:eb:17:ca:5d:0f:8f:52:8d:5b:9f:60:b6:6e:
         1c:fa:6d:86:8b:49:c0:b2:e0:05:df:4e:eb:87:88:cb:4b:9c:
         77:4e:83:31:60:e0:c0:0b:ae:67:9d:75:3c:ef:cb:f7:1c:0a:
         76:d9:20:63:09:9d:9d:3b:86:41:fb:51:6b:23:70:2a:e9:40:
         f4:20:d8:77:42:b0:86:52:4d:f5:03:54:85:23:a0:ac:5f:a1:
         28:35:81:3f:97:06:86:9d:85:6d:d4:7a:23:02:a7:d9:c2:08:
         42:b7:04:62:7c:81:f7:ca:e3:7a:68:4e:28:ed:17:a4:f4:74:
         f9:4f:fe:2a:6c:7c:29:c7:da:02:b0:00:ee:9a:18:9c:0a:ec:
         42:1c:20:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----