Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69c18234c21688e6e7a6a032c04fa91e3281d1cd.cer
File:                     69c18234c21688e6e7a6a032c04fa91e3281d1cd.cer (raw, json)
Hash identifier:          0Rv6kBCRuuY9POHnM4qc7mbQYiOTF6T2I33bK/c1i9o=
Subject key identifier:   05:F4:E2:38:9E:6B:D7:36:F4:6E:D3:2D:53:F1:6D:89:C9:DF:45:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEFA54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/63a77cf6-1bda-49a7-93c4-b31ac282c885/69c18234c21688e6e7a6a032c04fa91e3281d1cd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/63a77cf6-1bda-49a7-93c4-b31ac282c885/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 18:10:00 +0000
Certificate not after:    Tue 15 Apr 2025 15:11:47 +0000
Subordinate resources:    AS: 270814
                          IP: 45.6.32.0/22
                          IP: 45.177.112.0/22
                          IP: 138.0.224.0/22
                          IP: 138.99.88.0/22
                          IP: 168.90.228.0/22
                          IP: 170.247.124.0/22
                          IP: 177.20.160.0/20
                          IP: 177.53.0.0/20
                          IP: 177.128.144.0/20
                          IP: 177.185.144.0/21
                          IP: 177.223.96.0/20
                          IP: 186.235.32.0/20
                          IP: 187.121.160.0/20
                          IP: 189.45.224.0/20
                          IP: 190.123.8.0/23
                          IP: 191.52.216.0/22
                          IP: 2804:f70::/32
                          IP: 2804:71d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15661652 (0xeefa54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 18:10:00 2023 GMT
            Not After : Apr 15 15:11:47 2025 GMT
        Subject: CN=69c18234c21688e6e7a6a032c04fa91e3281d1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:68:5a:02:2c:99:b5:65:31:92:c2:fd:de:6b:
                    39:b2:ca:f6:86:8e:15:27:aa:f1:95:a3:35:bd:d6:
                    78:63:cb:3f:75:3d:e9:9f:7a:2e:ff:7d:0a:c8:ca:
                    58:84:1a:68:96:48:0f:85:65:2d:43:5f:80:59:17:
                    fd:64:f9:ae:54:47:3f:17:12:2b:4c:79:22:dd:ca:
                    9a:d4:75:28:bf:da:da:60:ad:b8:49:0c:bd:9e:6c:
                    ae:e4:5d:08:14:cb:32:0a:7d:1d:40:43:1c:69:5b:
                    ed:59:78:d0:43:79:25:77:d4:8f:59:f8:d0:b5:9c:
                    b5:b3:7f:df:04:6c:d2:27:53:13:86:75:35:b4:3f:
                    23:a0:63:62:5d:71:b5:b8:a5:a1:ee:fc:05:97:df:
                    44:d4:cd:68:39:61:bd:32:a7:af:52:3b:78:58:f6:
                    0d:f9:e7:11:c2:38:b2:6c:74:90:23:3f:0f:b1:1e:
                    09:d5:ce:ba:b9:69:95:af:58:ba:e2:66:d0:44:35:
                    92:99:c0:3d:26:f1:39:2e:da:92:15:6e:cd:67:a2:
                    de:de:b4:35:44:67:46:e1:91:32:3e:f6:73:bd:49:
                    51:b9:23:65:2e:8c:d5:88:b5:2e:4b:b9:ae:b9:21:
                    89:2d:e9:0c:38:bb:38:de:12:fd:a2:6b:10:18:ab:
                    91:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F4:E2:38:9E:6B:D7:36:F4:6E:D3:2D:53:F1:6D:89:C9:DF:45:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/63a77cf6-1bda-49a7-93c4-b31ac282c885/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/63a77cf6-1bda-49a7-93c4-b31ac282c885/69c18234c21688e6e7a6a032c04fa91e3281d1cd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.32.0/22
                  45.177.112.0/22
                  138.0.224.0/22
                  138.99.88.0/22
                  168.90.228.0/22
                  170.247.124.0/22
                  177.20.160.0/20
                  177.53.0.0/20
                  177.128.144.0/20
                  177.185.144.0/21
                  177.223.96.0/20
                  186.235.32.0/20
                  187.121.160.0/20
                  189.45.224.0/20
                  190.123.8.0/23
                  191.52.216.0/22
                IPv6:
                  2804:f70::/32
                  2804:71d4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270814

    Signature Algorithm: sha256WithRSAEncryption
         46:9e:60:10:d1:e3:4c:42:ae:92:5c:97:b0:0b:7f:68:88:cd:
         c7:1f:05:c5:c5:67:8d:ba:81:26:cd:d2:ec:a3:16:d0:1e:d2:
         3c:fe:81:ed:80:9d:84:ad:8a:a4:5a:e5:74:17:b2:5a:79:ea:
         8e:83:7c:d8:95:bc:fd:34:2c:01:f6:3f:28:46:bf:d2:05:02:
         8a:b8:4f:7e:97:a9:71:51:cb:26:e5:dd:2d:ef:69:fb:d1:6a:
         45:a8:61:38:7f:99:e8:ca:14:6f:f0:dc:b8:2f:3f:2c:7a:b6:
         8e:6f:b2:ed:4b:55:9d:49:e7:51:fb:24:3f:fd:83:40:14:07:
         c7:08:e2:4b:82:ba:62:f0:62:80:eb:c7:33:c4:77:51:1a:c3:
         07:57:42:5b:40:8d:20:7f:92:77:0d:ed:34:b2:6a:e7:ad:69:
         22:43:b6:6e:76:88:51:54:37:48:67:e0:b7:05:d6:e7:d8:83:
         d8:6e:2e:e2:df:79:97:3c:43:ce:d3:23:4c:16:76:f7:9f:60:
         58:ca:c1:1c:21:7c:0d:58:ed:84:ad:b7:0e:2d:df:71:9a:1f:
         8e:63:89:cf:88:be:b3:58:6e:8a:12:40:01:33:8f:b1:ad:0e:
         87:87:7e:5b:47:f7:4a:12:16:7e:a0:15:13:cf:59:47:b8:33:
         81:7c:65:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----