Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ba096563a92f57414136b22365f3e6cf2eee170.cer
File:                     6ba096563a92f57414136b22365f3e6cf2eee170.cer (raw, json)
Hash identifier:          9YUM3ctMTIIjCg6dvaRz7IPD38ry1gvjWSf1xzPBMxY=
Subject key identifier:   43:11:1B:EB:E3:89:11:90:A9:32:08:05:72:12:8E:26:2E:50:D8:14
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA0E39
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cbb0e6e3-fc89-4e0a-82c3-f0da75a2028b/6ba096563a92f57414136b22365f3e6cf2eee170.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cbb0e6e3-fc89-4e0a-82c3-f0da75a2028b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 10:38:58 +0000
Certificate not after:    Mon 05 Aug 2024 16:08:05 +0000
Subordinate resources:    AS: 267696
                          IP: 45.163.128.0/22
                          IP: 2803:11a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16387641 (0xfa0e39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 19 10:38:58 2023 GMT
            Not After : Aug  5 16:08:05 2024 GMT
        Subject: CN=6ba096563a92f57414136b22365f3e6cf2eee170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:05:b8:27:2d:ca:a8:55:4b:e3:50:63:b4:79:
                    ee:b7:2d:43:27:4e:10:1e:a2:19:6a:a5:f3:1e:cf:
                    9f:39:4b:3f:ea:ef:da:95:1a:69:ca:be:6e:fb:ca:
                    d7:60:96:75:36:61:d9:42:80:1e:c6:10:40:3e:9e:
                    05:70:16:88:61:0d:b3:95:9e:f1:dd:81:cc:44:98:
                    0e:af:ff:c2:9d:61:17:a0:02:f1:6a:a8:ba:a5:5f:
                    4e:ee:f2:b3:a7:ae:99:e5:4b:87:71:a3:88:10:46:
                    00:f9:78:70:7f:a2:9c:65:b9:6c:08:9d:60:ec:94:
                    c0:40:13:22:01:2e:c7:72:5b:b9:ec:a8:ed:ac:1c:
                    0b:db:fe:99:8a:73:7d:e0:fb:88:a2:0d:22:9b:fc:
                    79:f4:b5:8b:73:42:e9:5b:ad:30:46:ca:e4:72:92:
                    37:82:54:c2:d8:49:fd:a6:8f:e7:15:7e:d5:5a:f7:
                    a2:51:6e:0b:65:1d:b8:2d:71:33:64:d5:82:64:5c:
                    17:37:d6:41:ab:17:7e:eb:30:62:e8:d6:1c:bb:52:
                    c8:ad:53:94:36:1b:07:92:52:2f:4d:d4:ba:f9:bd:
                    9e:8a:0d:f7:9e:d6:a7:c8:ed:0a:7b:d0:8b:ca:4a:
                    8d:f1:47:a1:6c:cd:26:b2:9a:29:83:cd:1c:33:b8:
                    e0:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:1B:EB:E3:89:11:90:A9:32:08:05:72:12:8E:26:2E:50:D8:14
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cbb0e6e3-fc89-4e0a-82c3-f0da75a2028b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cbb0e6e3-fc89-4e0a-82c3-f0da75a2028b/6ba096563a92f57414136b22365f3e6cf2eee170.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.163.128.0/22
                IPv6:
                  2803:11a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267696

    Signature Algorithm: sha256WithRSAEncryption
         3d:ce:87:fe:b0:f6:80:58:2a:f4:20:52:eb:c0:cd:e9:f3:e2:
         e5:88:31:57:a8:ef:41:7e:e8:f3:b9:39:c4:9b:6a:aa:00:2a:
         8e:76:92:5e:2e:f6:4a:73:69:1d:e9:d6:af:19:89:67:a7:06:
         2e:7b:7c:b6:44:c2:9f:3e:f9:14:4c:f4:4a:ac:b7:3a:d3:8c:
         4b:67:65:90:d8:27:d5:8c:51:5c:b7:51:a1:fc:60:d8:fd:93:
         8b:c7:5c:44:4e:e1:4d:d8:00:3d:a9:4c:46:74:9c:fb:e1:da:
         54:22:5d:cd:cf:1a:9b:10:69:b0:ee:36:1c:39:9d:9a:81:e4:
         44:9b:d7:6f:cd:ba:f2:6d:07:b9:11:3e:f4:57:cc:dc:8a:ee:
         5d:3f:8d:54:fc:63:9c:a4:7e:db:f8:af:ea:7a:31:0f:9f:c7:
         31:c6:00:a8:54:c8:11:78:b8:7e:7c:a5:e8:83:29:1c:07:93:
         01:cc:f3:97:61:da:bb:cb:08:27:16:d2:d7:6c:7f:e9:f7:20:
         50:99:61:4e:4c:8b:5c:3b:9f:76:b7:fa:e8:3d:61:07:a7:8c:
         44:c7:bd:51:65:ac:8b:cc:da:ff:2e:7b:bd:08:a9:4b:17:10:
         ac:94:7f:ac:8a:a7:65:e2:74:f1:69:28:f5:e7:7a:aa:3c:55:
         c0:9c:d3:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----