Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/676ed5fc05efcad7057804169d29e078c43c7691.cer
File:                     676ed5fc05efcad7057804169d29e078c43c7691.cer (raw, json)
Hash identifier:          /eGS0XhHcZjG4Ij+cjpkGw5NNvUZjrSpCgczhsEfEoM=
Subject key identifier:   FC:12:FD:18:32:49:4F:7D:AC:75:7C:26:FA:C8:B0:7D:B1:57:CE:3F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E56093
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c708e1b-ad70-41de-9246-da9f99a6704a/676ed5fc05efcad7057804169d29e078c43c7691.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c708e1b-ad70-41de-9246-da9f99a6704a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 12:56:35 +0000
Certificate not after:    Thu 10 Oct 2024 14:57:39 +0000
Subordinate resources:    IP: 45.166.252.0/22
                          IP: 2803:2da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15032467 (0xe56093)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 12:56:35 2023 GMT
            Not After : Oct 10 14:57:39 2024 GMT
        Subject: CN=676ed5fc05efcad7057804169d29e078c43c7691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:10:89:ae:c1:d8:28:ed:f6:1d:f0:02:79:a4:
                    d8:0a:0e:c4:d4:20:b1:ec:06:42:cd:03:54:27:33:
                    df:95:9a:97:be:bd:f1:7a:8e:0b:d2:b9:61:9c:bc:
                    7f:01:ad:2f:0c:22:ee:a9:2c:01:58:f5:57:31:76:
                    82:6f:94:1f:92:de:ae:60:43:7d:34:61:62:a5:3f:
                    56:f6:fe:3b:94:a8:7d:da:f5:21:a1:30:96:36:74:
                    52:f0:65:dc:36:a6:e9:2c:4a:be:67:5f:85:bf:6a:
                    aa:fe:bf:80:97:9f:8e:e3:61:c3:e1:44:c6:56:3f:
                    11:8a:26:fe:28:e9:ac:6a:a0:ab:80:0f:aa:f6:8d:
                    18:ce:fd:90:b0:75:70:8f:05:73:39:65:ac:5a:99:
                    84:9a:28:a5:cc:09:58:e7:c4:10:2f:8f:fc:ef:6e:
                    d2:06:2c:b5:39:a0:3a:c8:1d:e9:dd:a5:83:61:a4:
                    90:f4:b3:78:1e:88:36:12:a3:37:a9:1b:f4:1b:78:
                    5b:cf:1a:2e:b1:ce:d1:05:5f:7b:ca:64:c2:a9:2b:
                    32:08:19:4f:32:51:3e:13:73:e2:28:8e:ce:b5:a2:
                    8e:f8:b1:d9:30:e7:fb:27:dc:0b:db:4a:52:e8:d7:
                    97:1b:80:4d:23:c3:d9:22:63:69:30:b6:02:3b:e0:
                    7f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:12:FD:18:32:49:4F:7D:AC:75:7C:26:FA:C8:B0:7D:B1:57:CE:3F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c708e1b-ad70-41de-9246-da9f99a6704a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c708e1b-ad70-41de-9246-da9f99a6704a/676ed5fc05efcad7057804169d29e078c43c7691.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.252.0/22
                IPv6:
                  2803:2da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:d6:bb:74:3c:88:28:9a:23:c5:cc:5b:56:4b:ae:92:d2:5f:
         8b:28:11:20:5c:9f:43:a4:63:14:79:eb:76:76:66:2e:ac:d9:
         a6:6b:a9:97:f5:e0:01:c0:9d:3b:b1:a3:b6:10:aa:90:f0:77:
         9b:4c:14:df:f5:54:96:b4:6f:b2:80:da:fc:a0:53:ce:ff:6c:
         08:09:ae:f9:22:43:b7:f9:be:cd:ca:dc:cd:e1:45:49:30:7a:
         76:d9:0e:74:2c:c5:d1:24:7c:f1:5b:3b:36:af:73:9e:55:fe:
         79:5f:86:3f:f2:76:04:39:98:88:df:6b:ab:63:4b:61:7c:e4:
         d7:4f:5b:48:9a:31:e0:f0:0c:76:0a:90:02:12:ac:9b:ca:53:
         b7:af:50:a0:75:e3:8c:d3:c5:f2:b8:af:f0:a9:e7:69:73:a2:
         4e:e8:1c:12:d7:74:41:75:f2:b0:43:c4:f3:8f:f5:bd:da:bd:
         7b:f5:75:dc:4a:f0:d6:bd:58:ad:32:af:5a:5a:06:5b:83:ae:
         16:65:b1:9a:ca:12:41:6d:9c:14:f8:f2:e0:53:96:88:26:b7:
         87:08:b6:53:f7:de:72:d2:82:ba:2f:ca:25:a8:21:c4:1c:56:
         72:4a:6f:b7:2c:df:fd:7c:bc:23:ea:ef:fa:a6:e9:fb:d6:02:
         68:3c:90:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----