Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63255db8f3c6481e5097ffbfda446658ad07aeef.cer
File:                     63255db8f3c6481e5097ffbfda446658ad07aeef.cer (raw, json)
Hash identifier:          D7wVXm1+1QWyNTUDbEw+wNcgYFyPmF5rjiuybUxp5EI=
Subject key identifier:   6F:46:11:58:AF:7D:B9:C9:5A:29:29:6D:23:FC:7F:C4:B3:8D:4B:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E58701
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d99e7b39-d151-465b-ab78-ec96f66f027c/63255db8f3c6481e5097ffbfda446658ad07aeef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d99e7b39-d151-465b-ab78-ec96f66f027c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 04:00:29 +0000
Certificate not after:    Sun 20 Oct 2024 18:16:07 +0000
Subordinate resources:    AS: 267743
                          IP: 45.169.60.0/22
                          IP: 2803:bda0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15042305 (0xe58701)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 04:00:29 2023 GMT
            Not After : Oct 20 18:16:07 2024 GMT
        Subject: CN=63255db8f3c6481e5097ffbfda446658ad07aeef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:e4:f9:80:14:c9:38:a4:57:ab:fa:90:82:
                    e1:f2:31:a3:f1:99:32:38:10:d0:6e:60:8c:c9:a2:
                    18:7f:60:01:d0:c9:e3:0b:4c:af:94:ea:80:b7:0a:
                    d7:59:e6:4f:90:21:80:72:6c:c4:81:c2:de:ab:f9:
                    0f:d6:d9:e8:c9:4e:6e:0b:ad:ac:25:b4:d0:c6:c0:
                    4b:88:66:3a:73:86:f3:f2:34:e0:6d:21:a6:1e:2a:
                    bd:f5:c4:5d:92:1b:21:17:b2:31:5b:5a:fb:91:9b:
                    06:c5:05:33:f5:03:76:e6:6b:7d:90:66:e9:68:8b:
                    64:84:5c:fe:f1:97:85:83:81:6a:1c:a5:d6:28:85:
                    ce:63:f4:e1:69:6a:9b:e9:14:4e:33:f9:74:38:cd:
                    c5:a2:c1:1c:2c:ec:f4:fa:ec:fd:ed:a5:66:f5:43:
                    2b:c7:a1:cf:04:1a:f1:70:c3:78:d6:44:71:08:6a:
                    64:cd:ee:7e:1a:d9:45:7d:d8:38:17:23:08:99:a6:
                    a9:ae:8f:e1:ab:c6:9f:0c:e5:5d:70:bc:80:05:63:
                    09:60:55:46:61:9a:07:c4:88:45:ad:de:36:05:af:
                    9a:1f:53:30:26:9e:bb:87:00:27:e6:a7:b7:e9:f5:
                    4d:c8:89:80:69:c3:4a:87:8f:10:8a:5b:91:07:46:
                    fc:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:46:11:58:AF:7D:B9:C9:5A:29:29:6D:23:FC:7F:C4:B3:8D:4B:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d99e7b39-d151-465b-ab78-ec96f66f027c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d99e7b39-d151-465b-ab78-ec96f66f027c/63255db8f3c6481e5097ffbfda446658ad07aeef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.60.0/22
                IPv6:
                  2803:bda0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267743

    Signature Algorithm: sha256WithRSAEncryption
         63:5f:09:d4:59:c0:66:b8:b9:71:ca:0a:5a:4c:5c:a2:15:8c:
         c1:b4:b5:06:f6:93:9a:12:c6:65:d2:12:f7:e5:cd:70:9c:50:
         32:2a:fa:35:4e:ad:c1:a2:8d:f4:49:44:4b:ae:b1:6f:e0:31:
         c2:b8:73:06:a7:6d:56:6b:2b:db:e0:d5:5a:64:d6:01:57:26:
         1e:1b:b8:57:0f:5d:7f:5c:75:1e:ea:dd:06:09:4d:64:31:f0:
         4f:5e:8a:eb:d7:99:5d:f1:69:47:9c:e9:ac:78:24:a9:df:0e:
         42:0d:16:da:a3:e8:13:b6:02:69:cd:63:49:79:29:34:cf:04:
         6d:ba:b5:f6:65:68:cf:e8:ce:92:51:38:2b:ba:57:17:d1:3d:
         97:ed:4c:4d:ed:a4:7b:d1:0f:16:7f:e9:6d:7d:95:98:cf:8d:
         a1:ce:62:52:92:9f:d3:94:04:e2:df:e2:ac:77:19:ac:ca:46:
         e1:9c:0b:60:af:48:49:fd:b0:1f:11:7d:45:19:3a:79:e5:32:
         b0:01:15:dd:2c:dd:33:f3:88:70:97:f2:9e:f9:58:b4:d3:2a:
         7a:0a:8d:41:ec:71:b9:c5:fb:09:b3:a4:7d:5b:fe:f2:f6:f2:
         15:a5:8b:06:66:c9:49:46:d9:e1:0f:e2:d9:6c:a6:11:f2:10:
         19:0e:63:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----