Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6824ba995cb1451ac3e3a70969d5826bd388e525.cer
File:                     6824ba995cb1451ac3e3a70969d5826bd388e525.cer (raw, json)
Hash identifier:          9SWcaoJs6/wMYsOIu0S4/kzYOVI/OjyLMqqDd232qjo=
Subject key identifier:   5C:C0:B6:E9:7B:20:83:53:17:A2:70:95:6D:A3:B7:11:8A:E5:70:9B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8202E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4a7ae837-1477-43e7-bfd2-25fc3cab6224/6824ba995cb1451ac3e3a70969d5826bd388e525.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4a7ae837-1477-43e7-bfd2-25fc3cab6224/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 01:49:17 +0000
Certificate not after:    Sun 23 Feb 2025 00:16:01 +0000
Subordinate resources:    AS: 265576
                          IP: 45.174.84.0/22
                          IP: 2806:32b::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15212590 (0xe8202e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 01:49:17 2023 GMT
            Not After : Feb 23 00:16:01 2025 GMT
        Subject: CN=6824ba995cb1451ac3e3a70969d5826bd388e525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:07:85:b0:6a:0c:a0:e6:5c:68:63:9a:f2:af:
                    4a:33:53:b4:0b:b3:3c:f6:8f:e7:8f:02:5a:fb:e5:
                    da:45:08:1b:47:5b:56:bb:c7:57:87:73:76:ad:c4:
                    b6:9c:80:24:03:13:dd:f4:64:62:92:a4:e3:0c:a1:
                    6f:9f:c9:4f:f3:ce:0d:67:d5:9c:7a:a8:e0:f6:c6:
                    5f:80:6b:08:3d:04:1b:52:8a:4a:e5:d6:f3:92:af:
                    e4:ea:e7:3c:9b:89:6d:57:5e:54:c5:ce:22:67:66:
                    15:66:cc:d7:23:31:f0:71:49:92:55:15:b1:0c:33:
                    d2:ce:cf:d8:60:ce:bc:45:01:70:7c:6b:06:f0:e2:
                    15:ae:18:ee:1e:16:0c:7c:b9:f5:c9:a1:03:70:3d:
                    80:aa:b9:f8:fa:7c:36:44:51:4f:66:ba:99:61:92:
                    4f:ac:6b:d3:8e:59:1e:87:2f:0e:98:8d:36:1c:f1:
                    a7:b5:aa:9f:81:0d:e7:bb:a0:c0:71:ad:92:80:9c:
                    88:00:87:37:2a:93:cf:bf:72:dd:f9:51:0d:d7:41:
                    38:cc:75:b9:2e:b4:d1:0a:b6:30:3a:f8:18:20:75:
                    a1:d6:05:25:4d:67:05:5c:ee:84:a2:19:6e:c6:e8:
                    a4:5d:e0:64:82:2f:a5:a4:8a:14:22:1a:fc:ea:c0:
                    01:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C0:B6:E9:7B:20:83:53:17:A2:70:95:6D:A3:B7:11:8A:E5:70:9B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4a7ae837-1477-43e7-bfd2-25fc3cab6224/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4a7ae837-1477-43e7-bfd2-25fc3cab6224/6824ba995cb1451ac3e3a70969d5826bd388e525.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.84.0/22
                IPv6:
                  2806:32b::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265576

    Signature Algorithm: sha256WithRSAEncryption
         a5:95:7e:fe:82:a3:ef:10:0d:83:de:de:a4:1a:44:48:99:2d:
         a3:a5:a5:7b:27:1d:6a:52:09:4c:7f:a4:2c:c0:c4:92:f9:73:
         d3:ad:79:ac:05:58:db:68:0b:8b:2a:8b:d1:d4:ee:e2:a9:64:
         e4:09:76:ca:2a:5e:9d:bd:2b:67:48:ab:65:8f:2a:39:f1:56:
         08:7f:6c:d8:3b:90:b5:3e:9f:3b:e0:22:9b:6b:2c:21:8f:e7:
         f8:6c:16:fb:d7:49:88:a4:48:11:3a:5c:c8:92:7f:36:8d:f7:
         ff:48:e1:4b:d6:4c:f0:88:74:97:c0:46:e7:ff:08:c0:18:f5:
         b3:76:25:af:ec:8c:a8:0a:bc:5e:8b:6b:57:f3:4e:74:56:4d:
         aa:be:a9:9f:fc:be:5c:71:e2:47:a2:f7:93:ab:4c:9b:5f:25:
         90:c0:8f:60:f9:be:d7:ff:14:34:7a:f9:dc:69:40:9e:0c:83:
         c3:cc:1c:e2:d7:e0:bb:ce:0c:d8:21:9b:5a:8b:b9:f4:88:f4:
         10:5f:0a:a1:f0:39:55:59:db:ec:4c:95:4e:af:e2:45:e2:6a:
         47:a3:70:9f:9e:da:46:37:32:2f:b2:0e:5a:ba:b3:b2:f2:5f:
         e5:50:49:a4:63:c8:4c:2f:3d:17:e9:0f:a9:f1:41:62:b8:f1:
         0c:15:9a:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----