Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/63b7a865dc66677bd2ace2ed499c81222e8e5406.cer
File:                     63b7a865dc66677bd2ace2ed499c81222e8e5406.cer (raw, json)
Hash identifier:          gjORfB/bI7qWPBv04X2GP18HWdnZgmaJy3cSYlvbkO4=
Subject key identifier:   D4:A4:A9:8B:09:C0:86:06:91:FE:AD:B6:2A:24:F3:82:85:66:E2:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE6F57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/00b2916c-1eae-4093-a380-5e14cfea5535/63b7a865dc66677bd2ace2ed499c81222e8e5406.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/00b2916c-1eae-4093-a380-5e14cfea5535/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 14:29:56 +0000
Certificate not after:    Sun 08 Dec 2024 17:31:28 +0000
Subordinate resources:    AS: 265647
                          IP: 170.245.35.0/24
                          IP: 2801:12:d000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15626071 (0xee6f57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 14:29:56 2023 GMT
            Not After : Dec  8 17:31:28 2024 GMT
        Subject: CN=63b7a865dc66677bd2ace2ed499c81222e8e5406
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:9f:6a:d4:0f:4c:49:e1:27:c6:27:03:01:52:
                    92:c4:a6:d6:98:b0:90:83:40:7f:31:f5:e6:c7:89:
                    b6:f0:63:73:09:f9:67:35:e6:11:ae:78:28:cd:a4:
                    de:23:25:4b:cc:8c:a9:97:31:f7:c5:76:9f:a9:71:
                    63:85:80:32:1c:83:68:af:58:13:d4:b9:00:90:36:
                    10:d0:82:d8:bb:44:3c:fe:5d:90:02:3e:bd:11:68:
                    11:71:0a:36:74:17:6d:ce:ab:0c:c6:2d:3e:c0:de:
                    59:20:5d:10:07:12:9c:fe:4b:1e:2b:af:08:b0:e4:
                    8b:02:38:92:7c:69:85:b1:86:3e:ac:eb:0c:4e:83:
                    99:c3:67:e3:60:89:18:f9:a9:0a:d2:39:88:44:0b:
                    11:f8:af:cd:54:47:43:c1:70:a0:62:df:50:12:d6:
                    4f:77:37:90:cf:65:22:e2:00:3a:5e:7a:92:ee:6d:
                    75:97:d5:67:82:05:75:a0:5f:d5:03:a4:3f:72:48:
                    6e:b2:a1:8f:95:58:be:92:4d:2b:8b:7c:a2:34:44:
                    fb:13:95:73:fb:af:77:42:bc:28:e3:5c:22:c1:07:
                    b5:4c:85:d8:9c:c8:87:dc:46:f7:71:0b:8a:06:08:
                    23:a3:71:eb:73:bd:58:d1:da:30:72:c9:5a:d9:d5:
                    1a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:A4:A9:8B:09:C0:86:06:91:FE:AD:B6:2A:24:F3:82:85:66:E2:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/00b2916c-1eae-4093-a380-5e14cfea5535/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/00b2916c-1eae-4093-a380-5e14cfea5535/63b7a865dc66677bd2ace2ed499c81222e8e5406.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.245.35.0/24
                IPv6:
                  2801:12:d000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265647

    Signature Algorithm: sha256WithRSAEncryption
         71:ca:e5:22:6e:b6:be:45:bb:05:39:9f:95:e2:81:9d:d9:81:
         75:79:86:cb:e3:dc:bd:12:18:17:83:18:f2:9b:62:d4:90:22:
         15:d3:3c:0c:58:03:df:76:02:96:0b:be:6a:25:c8:40:d8:40:
         9f:46:a7:98:99:96:6f:a2:8d:73:95:31:af:e2:04:b9:f9:0a:
         ee:90:77:fd:35:75:ba:38:20:49:04:d0:c4:8c:99:ec:c6:30:
         39:c1:f7:4b:ba:c5:c2:75:74:aa:5f:71:86:81:33:53:4f:cb:
         5d:5b:d6:9e:68:2f:98:b6:3f:56:39:89:8d:63:44:6d:8a:8d:
         31:79:bb:7c:91:e5:77:4f:a1:a1:3e:0a:b6:f8:fa:b3:00:c7:
         c0:87:99:41:b3:73:8d:cd:7b:70:f1:05:bf:75:a6:17:bc:1a:
         64:0b:e5:31:ff:55:18:42:be:20:5d:3f:fd:72:9f:af:0e:0b:
         9b:3d:4e:cf:71:f6:e0:c1:c6:ea:5e:fd:78:9b:0f:a8:af:62:
         4b:7c:3c:9f:35:63:11:2f:aa:5d:64:6d:89:4e:c6:c0:9c:d2:
         bf:d5:69:8b:29:38:19:bc:fe:c9:30:e9:ed:52:87:30:af:56:
         af:ff:0b:47:f6:04:ee:0b:68:ae:42:97:89:47:fb:26:51:bb:
         16:22:49:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----