Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/62443cb3d0b3dcafd38d4cabb0b97820330c5c35.cer
File:                     62443cb3d0b3dcafd38d4cabb0b97820330c5c35.cer (raw, json)
Hash identifier:          30ZoptKKKjDylkaBv3VUSpToGfmr+410VK4Uigt9+Eo=
Subject key identifier:   CE:FA:4B:A4:DA:50:73:93:15:DF:A9:C4:F4:01:BE:6B:D3:5C:21:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01028FD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1dbf5b24-5242-48e0-ba72-3283b37e7c76/62443cb3d0b3dcafd38d4cabb0b97820330c5c35.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1dbf5b24-5242-48e0-ba72-3283b37e7c76/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 21:36:03 +0000
Certificate not after:    Thu 18 Sep 2025 05:00:00 +0000
Subordinate resources:    AS: 52297
                          IP: 190.105.172.0/22
                          IP: 2800:570::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16945108 (0x1028fd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 29 21:36:03 2023 GMT
            Not After : Sep 18 05:00:00 2025 GMT
        Subject: CN=62443cb3d0b3dcafd38d4cabb0b97820330c5c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:0f:ce:eb:2c:48:84:e8:ca:44:63:fd:5b:4b:
                    a3:fa:6a:ca:7b:b8:7b:bb:21:8e:1a:2f:c2:fb:0e:
                    d6:6f:ce:15:6b:b5:4c:e3:f6:0c:04:87:e8:0c:d7:
                    9c:5e:b8:96:ac:7c:eb:9c:54:d4:ae:ab:47:9b:8e:
                    97:c1:08:79:20:fa:ec:e0:3f:ba:57:63:3f:c7:09:
                    b4:ef:ea:85:37:95:e8:2c:9c:2d:2f:31:e7:a1:fa:
                    ea:f6:00:5e:84:4b:ba:a4:f2:67:fb:78:13:d2:9e:
                    b7:68:4c:51:58:94:d7:ae:7d:42:9a:e7:a5:d0:74:
                    5f:82:6e:1e:7d:8c:ef:ab:07:8a:15:4d:bc:a6:9f:
                    43:cd:9e:fb:8a:d3:ee:bf:fe:ce:83:06:4d:7b:cf:
                    9b:55:90:98:8e:43:03:cb:c2:99:a8:69:26:9b:3a:
                    7e:da:d3:98:6a:89:68:9d:f4:f3:d1:d6:31:05:77:
                    2d:1f:a2:9e:63:41:d7:7d:8c:db:55:cb:26:24:6c:
                    ec:5e:6b:bc:87:9a:e4:ad:df:56:4a:54:ec:20:6f:
                    a8:d8:4e:f5:2b:75:df:8f:45:dc:83:e7:a4:ef:bb:
                    d4:77:3d:f5:3a:7d:cd:b0:04:e1:63:88:7e:ff:89:
                    d2:39:a3:92:73:2c:1e:b2:8e:47:99:6e:92:ad:b6:
                    ff:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:FA:4B:A4:DA:50:73:93:15:DF:A9:C4:F4:01:BE:6B:D3:5C:21:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbf5b24-5242-48e0-ba72-3283b37e7c76/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1dbf5b24-5242-48e0-ba72-3283b37e7c76/62443cb3d0b3dcafd38d4cabb0b97820330c5c35.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.172.0/22
                IPv6:
                  2800:570::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52297

    Signature Algorithm: sha256WithRSAEncryption
         46:df:3e:8a:30:0e:15:f4:54:ca:04:9b:0f:ef:85:85:4b:b8:
         1a:f2:72:b6:ef:e3:32:f6:aa:04:85:62:25:02:70:40:70:1d:
         17:21:15:b4:31:4c:bb:18:6d:64:13:1a:d0:03:fb:68:7d:41:
         a2:fb:e3:60:18:03:3c:a7:c1:ec:cf:ca:87:33:46:fd:3b:ed:
         f8:c8:7a:d3:3e:38:7e:0c:c5:ff:5e:a0:12:39:9f:ec:49:5e:
         b9:f1:f7:8d:76:26:f8:ab:c9:2d:d6:10:9a:bb:33:d4:a6:e4:
         09:51:51:d3:8c:72:24:5d:ef:11:ba:63:8a:0d:16:ef:63:ab:
         40:71:bd:af:3c:8a:04:57:70:83:3f:f1:c6:78:92:fb:b9:29:
         3b:8d:c1:73:11:3e:37:ba:f5:05:5c:98:21:c2:b4:f0:cc:06:
         87:56:3a:e9:49:db:8c:72:a6:47:6d:d4:45:26:df:ac:0f:f9:
         ab:52:a9:82:63:e3:02:5b:f2:f2:aa:54:30:29:e4:db:68:11:
         a7:e5:2a:fd:2b:d8:46:d5:fa:ae:3c:54:78:11:66:7b:78:bb:
         c8:e9:08:67:df:e5:e0:cb:dc:26:f6:5e:86:86:55:d5:7b:62:
         38:d3:90:8f:fd:ec:af:7b:4f:bd:df:04:3b:b8:46:b0:8a:65:
         85:18:a6:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----