Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64e0463c5236fd206bf3edd5cb3ca4b776a4ed63.cer
File:                     64e0463c5236fd206bf3edd5cb3ca4b776a4ed63.cer (raw, json)
Hash identifier:          +p5BsNiWhgjd+1a2mIHSrCEgUd6qKufjuC80kpPKRfk=
Subject key identifier:   AF:26:CC:9D:5E:72:6B:5C:A4:6A:7C:B0:B3:C4:C9:A7:5F:F2:73:69
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01029452
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/24ff5cd6-1789-4b42-94a9-768a1886a75c/64e0463c5236fd206bf3edd5cb3ca4b776a4ed63.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/24ff5cd6-1789-4b42-94a9-768a1886a75c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Nov 2023 12:47:51 +0000
Certificate not after:    Mon 15 Sep 2025 19:50:49 +0000
Subordinate resources:    AS: 64107
                          IP: 45.225.135.0/24
                          IP: 2803:6e20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16946258 (0x1029452)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 30 12:47:51 2023 GMT
            Not After : Sep 15 19:50:49 2025 GMT
        Subject: CN=64e0463c5236fd206bf3edd5cb3ca4b776a4ed63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ef:0a:d8:4a:43:71:b1:86:f4:ac:3c:f9:d9:
                    11:98:59:3f:27:33:96:fa:a6:60:e7:7f:ae:e5:c8:
                    6c:d2:9c:88:62:21:70:28:2b:74:22:10:c8:fa:41:
                    ba:22:61:8b:11:0d:fb:65:0d:ca:98:de:70:d8:64:
                    2a:07:46:29:69:b6:53:bf:c8:ca:1d:0a:9a:1e:7a:
                    54:5d:f6:79:d3:c7:e4:c3:26:5e:69:1e:72:46:09:
                    b9:f8:51:00:b6:8a:a1:b0:4b:77:14:2e:c2:f9:fc:
                    3e:b7:4c:90:7c:3e:64:1e:4b:a1:ea:e3:f1:9d:72:
                    0d:d3:d8:6b:ad:f9:6b:7f:a4:98:ef:f6:d6:ea:3f:
                    3a:03:8d:1f:d5:40:91:ea:02:69:f3:0f:a7:d9:79:
                    7b:cd:59:b8:dc:c3:a6:47:57:5f:c8:56:30:ab:2c:
                    55:ba:63:10:b0:c5:04:71:91:d8:dd:9b:11:bf:02:
                    5c:2c:79:c2:d6:3c:16:19:b7:12:fd:f2:5f:2c:d4:
                    f6:bc:f9:6e:ec:eb:bd:4c:a8:43:a4:7a:0a:c0:e5:
                    fb:5d:62:e0:d8:df:86:31:83:99:38:fc:05:6c:67:
                    01:7b:b2:cc:0f:de:df:78:71:67:4c:83:8f:1c:50:
                    15:df:ce:14:fd:fd:d4:09:32:69:d9:00:d4:ca:b0:
                    f2:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:26:CC:9D:5E:72:6B:5C:A4:6A:7C:B0:B3:C4:C9:A7:5F:F2:73:69
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24ff5cd6-1789-4b42-94a9-768a1886a75c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24ff5cd6-1789-4b42-94a9-768a1886a75c/64e0463c5236fd206bf3edd5cb3ca4b776a4ed63.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.135.0/24
                IPv6:
                  2803:6e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64107

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:0c:1a:f0:2a:c7:c5:d3:81:7e:96:4c:92:a2:1a:60:74:
         a1:29:56:5a:5b:f1:ff:4a:a3:25:54:93:4b:4c:cc:19:7a:ec:
         d8:ca:21:02:42:0d:ba:cd:6a:68:3d:e9:34:75:96:6a:9d:7f:
         e1:d6:ef:0f:8c:87:29:39:25:3d:22:3f:2b:4c:df:76:b3:a4:
         d5:c9:03:9f:16:cb:b5:ad:e3:22:3f:d6:95:64:84:96:2a:70:
         50:f7:fd:3a:c0:01:01:42:f3:a9:7f:be:ba:b3:b4:4e:8f:28:
         7c:fc:09:ff:c2:d6:60:9b:63:f6:84:8c:bc:39:15:f2:52:96:
         ec:50:ed:b9:27:0b:91:b6:87:b3:ab:d8:7f:81:99:3b:b9:33:
         2c:0a:eb:f6:7c:40:ff:4f:69:33:b3:b3:e7:18:12:c4:be:a0:
         b3:ce:86:f5:6b:96:93:e9:4e:f2:bb:16:46:ff:32:fe:b4:c1:
         21:8f:ff:1b:0a:60:7a:c5:c0:8f:ce:90:5d:ed:5f:35:f8:5d:
         3f:e2:58:23:06:e0:f2:cc:d5:ee:04:75:f2:9c:21:3d:42:b8:
         11:5a:70:04:f5:98:0d:c7:92:f5:21:8e:e5:41:01:ca:23:06:
         80:cd:e2:90:ec:c6:63:24:7c:8b:40:04:ba:f5:7d:7e:6d:1d:
         b9:59:3e:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----