Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/66b140a823d9e035a1dfd84e854eda32b7cdde6d.cer
File:                     66b140a823d9e035a1dfd84e854eda32b7cdde6d.cer (raw, json)
Hash identifier:          HNnOAOOvu9k3uwd9oAeMwwziKZhbtbramZdv7MwjH2A=
Subject key identifier:   26:76:B6:E6:19:09:74:EA:32:3F:E8:BA:51:78:73:EB:58:56:DF:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7D1F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/49821e79-c708-4939-9b3e-127acf11ab88/66b140a823d9e035a1dfd84e854eda32b7cdde6d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/49821e79-c708-4939-9b3e-127acf11ab88/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 30 Apr 2023 15:07:03 +0000
Certificate not after:    Wed 13 Mar 2024 15:12:12 +0000
Subordinate resources:    AS: 267852
                          IP: 45.176.128.0/22
                          IP: 2803:3c60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15192562 (0xe7d1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 30 15:07:03 2023 GMT
            Not After : Mar 13 15:12:12 2024 GMT
        Subject: CN=66b140a823d9e035a1dfd84e854eda32b7cdde6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:0d:61:26:5e:06:16:f2:2e:5e:7a:a7:b1:
                    04:bc:98:5f:8c:a0:e6:63:a0:0a:fd:bb:64:51:9f:
                    ed:d6:0f:9d:01:74:ff:b8:8a:cb:02:f4:26:24:47:
                    ab:8a:fb:48:63:8d:21:f7:9f:85:33:c4:4f:cb:07:
                    dd:82:ab:f5:cc:47:3c:21:9f:1a:ac:16:10:e7:51:
                    fd:41:ab:3a:44:f0:17:a7:0d:e3:4d:4e:79:4d:9f:
                    05:86:a2:22:9a:d6:2b:c6:ac:b0:ad:c1:14:32:21:
                    fd:87:2a:95:bb:7e:c3:d4:46:22:98:86:d0:2a:8b:
                    02:a9:c1:96:b4:4f:16:1a:f4:02:b5:20:6a:2c:cf:
                    32:72:70:42:0d:89:3a:6c:5e:c5:2f:0f:62:58:28:
                    01:52:82:c6:fd:17:e6:2d:9e:cd:03:f8:f6:85:a4:
                    7f:2a:71:30:7f:52:2a:9a:99:11:4a:ab:13:e8:6c:
                    f7:31:93:7d:95:dc:82:8d:6f:a7:78:1d:24:8d:89:
                    d3:87:1c:c2:b4:32:ed:19:ee:95:11:24:1d:0c:03:
                    ee:0f:59:30:27:e0:8f:a2:24:73:af:16:0e:8c:dd:
                    ea:8a:0c:d5:32:c1:26:99:65:89:86:d5:2e:aa:fd:
                    46:df:6b:a3:64:f7:de:94:0f:44:67:1d:73:53:0f:
                    02:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:76:B6:E6:19:09:74:EA:32:3F:E8:BA:51:78:73:EB:58:56:DF:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/49821e79-c708-4939-9b3e-127acf11ab88/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/49821e79-c708-4939-9b3e-127acf11ab88/66b140a823d9e035a1dfd84e854eda32b7cdde6d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.176.128.0/22
                IPv6:
                  2803:3c60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267852

    Signature Algorithm: sha256WithRSAEncryption
         44:66:4b:b7:79:5f:bb:a3:12:c6:47:b9:92:ff:95:4f:40:d4:
         a4:31:0c:73:28:03:03:91:dd:36:8b:84:66:63:36:1c:dc:27:
         e3:65:fc:92:2d:d5:57:12:45:d7:58:b0:7c:41:3d:c4:2d:54:
         f8:c3:76:07:2c:59:43:13:d9:1b:d2:23:22:45:ef:a8:0b:1b:
         9e:13:8f:34:eb:88:4c:c5:c7:fe:d8:3e:6a:52:2c:58:d1:f5:
         6a:c9:d9:b8:cc:8e:43:20:45:e5:a1:af:e9:a6:97:6b:97:b9:
         12:1d:a1:2b:ab:96:8c:31:44:b6:c2:db:95:93:d9:3b:4d:07:
         07:68:50:28:3e:70:c6:70:ca:27:cd:5d:68:37:e5:4f:fa:f6:
         a2:28:f1:28:1f:9b:94:d2:5d:a4:59:9d:30:92:01:3f:db:6e:
         04:2b:c6:80:fd:32:7f:68:78:57:8b:63:21:6a:3a:07:02:49:
         e6:72:16:b0:f2:8e:65:a1:22:6f:cd:e0:fc:6d:29:da:2e:61:
         15:23:8d:85:b6:de:8e:77:6d:9d:43:99:ce:94:49:91:3c:36:
         a7:45:55:17:31:54:35:78:50:78:b4:35:61:d9:ee:19:64:73:
         c7:69:bd:11:4f:ef:3d:d7:dc:dc:4f:f4:5e:48:a1:a3:f3:1a:
         c0:e4:ed:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----