Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65dc67335c4cd12864224099a750c7822b83afa2.cer
File:                     65dc67335c4cd12864224099a750c7822b83afa2.cer (raw, json)
Hash identifier:          r3+v4saOupB6/UXsLntodXOBdTBYndZzxafgiXvAmCk=
Subject key identifier:   16:9B:E1:30:FD:AB:16:3E:17:F6:BC:8C:4D:5D:4B:83:FB:B7:EA:15
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEB32E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/65dc67335c4cd12864224099a750c7822b83afa2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 23:48:32 +0000
Certificate not after:    Fri 11 Oct 2024 22:06:45 +0000
Subordinate resources:    AS: 265610
                          IP: 45.189.156.0/22
                          IP: 2806:367::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15643438 (0xeeb32e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 23:48:32 2023 GMT
            Not After : Oct 11 22:06:45 2024 GMT
        Subject: CN=65dc67335c4cd12864224099a750c7822b83afa2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:89:c7:c4:ad:e1:91:25:09:55:f1:10:a8:62:
                    fd:17:44:17:b3:5a:56:81:4f:69:86:38:fb:4c:0b:
                    2e:82:33:d6:8a:69:22:12:55:e2:58:61:6f:7b:8d:
                    cd:c8:da:7a:c6:50:2a:cc:59:e6:cd:22:62:4d:e8:
                    ae:6a:9e:c7:83:2a:73:bf:88:60:4d:ac:b0:41:71:
                    f3:56:c8:fe:31:18:41:eb:fd:14:04:31:69:ee:83:
                    4f:b2:dd:d6:9f:c6:e1:74:1d:19:34:8d:a4:54:d7:
                    33:de:50:16:b3:9f:08:a7:b0:f6:42:55:24:e6:89:
                    52:90:97:a9:6d:38:5e:9e:cd:cc:09:3b:9f:04:e3:
                    db:b9:8f:56:f9:7d:8b:30:36:6b:ec:4b:fc:59:f2:
                    a7:f9:23:2b:6f:b8:f0:f1:41:99:4a:bd:7d:82:a0:
                    98:ef:c8:a6:c9:29:a8:e0:44:93:29:52:4d:84:2b:
                    c6:be:7f:d6:47:44:5c:18:cc:47:f0:6a:bf:99:4a:
                    e1:25:6c:ad:be:b2:dd:d4:d1:13:d7:59:de:e3:e9:
                    3a:d2:de:a2:ed:11:c6:8a:ce:60:50:39:32:bb:82:
                    9a:e6:48:a7:47:b1:48:e6:c7:09:bf:70:ec:5d:d1:
                    0d:69:02:7a:c5:71:e7:25:fa:d9:5f:64:6b:d9:46:
                    3b:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:9B:E1:30:FD:AB:16:3E:17:F6:BC:8C:4D:5D:4B:83:FB:B7:EA:15
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f3e87715-fa73-4a29-98b3-4b19d7e7213d/65dc67335c4cd12864224099a750c7822b83afa2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.156.0/22
                IPv6:
                  2806:367::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265610

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:b6:6a:62:bb:bb:6a:f7:12:60:c1:f1:a0:9e:e5:6f:83:
         4a:46:27:c7:d9:45:7e:71:7c:ce:55:0f:16:15:18:88:d3:01:
         70:93:ff:48:41:9b:8f:2b:70:a1:c4:7c:f5:53:cd:1d:46:2a:
         f2:66:ac:e9:6c:77:cb:5e:25:9f:1e:0d:9f:9f:0c:d2:df:b9:
         d7:d5:ba:eb:22:bb:42:09:04:b1:4f:7b:a6:58:31:e8:15:ed:
         00:8f:26:ab:26:00:3b:7e:d3:3c:a8:07:81:3d:5b:b7:50:4d:
         9c:b5:c9:5f:28:07:e2:1e:9d:68:f0:bc:3b:f9:9b:24:27:00:
         77:82:85:97:63:4c:b4:b5:ed:72:4b:db:b0:bb:a6:0f:ab:51:
         45:7e:5c:11:d5:cc:c0:c8:1a:f0:9a:93:6c:72:d1:48:0f:a6:
         6a:dd:4f:5a:59:e8:7d:6a:bc:58:8e:2c:eb:bc:7e:77:73:e4:
         7c:89:4a:17:1d:c2:3b:54:3c:5d:e2:4f:eb:35:b1:9d:7e:fe:
         e4:5c:ab:b2:30:73:07:99:0b:71:ad:d1:dc:d8:db:a3:fb:0b:
         a5:5a:7f:96:d6:21:97:0c:0f:90:82:11:60:ec:ef:21:9a:f2:
         f3:02:68:df:ed:37:b1:9b:de:b3:02:a7:c4:37:34:d0:bd:3a:
         bb:2d:c2:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----