Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6cd42b37fb6e1eb1c276cab99bbdd0528cddcaf3.cer
File:                     6cd42b37fb6e1eb1c276cab99bbdd0528cddcaf3.cer (raw, json)
Hash identifier:          Wkq2Pt+38W/Gtx0gKGQmBASdQ/dx50snl8pyyuyMJd0=
Subject key identifier:   47:96:CB:78:B1:5D:18:6F:61:65:A0:B5:98:B4:7A:CE:E5:0A:51:51
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC1C6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1c29eb1-3e4d-42b1-b461-918b8f5df4a1/6cd42b37fb6e1eb1c276cab99bbdd0528cddcaf3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1c29eb1-3e4d-42b1-b461-918b8f5df4a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 14:39:04 +0000
Certificate not after:    Thu 20 Jun 2024 23:58:15 +0000
Subordinate resources:    AS: 270097
                          IP: 45.235.224.0/23
                          IP: 2801:14:a800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15473772 (0xec1c6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  1 14:39:04 2023 GMT
            Not After : Jun 20 23:58:15 2024 GMT
        Subject: CN=6cd42b37fb6e1eb1c276cab99bbdd0528cddcaf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:f3:9e:1b:3b:1f:c1:f9:b4:c3:7e:aa:c1:e0:
                    54:71:bc:63:b0:49:dc:0a:41:a5:ae:44:64:e8:11:
                    28:13:c7:63:31:4a:80:43:7a:4c:b7:50:74:70:9c:
                    9d:88:b4:fc:5f:31:9b:bd:7f:f4:05:43:e7:c3:91:
                    bc:e5:b1:6d:52:28:c7:cb:23:8e:4b:1c:58:c6:f9:
                    03:6e:d7:3f:bb:53:2c:bd:35:ca:8f:92:ff:37:d4:
                    eb:5b:35:a6:3b:b4:20:97:1e:1a:27:3f:e6:71:85:
                    c7:dd:05:22:f6:0a:b5:96:2e:b5:5a:80:64:da:11:
                    c4:d5:2e:61:d7:cb:a7:67:f9:7b:5c:f0:80:e4:4d:
                    c1:30:ac:24:6c:94:f0:0b:f7:f5:49:24:43:80:f9:
                    ce:f9:f8:d1:7b:ba:7e:93:bc:db:17:a5:17:cd:62:
                    3c:91:f1:8e:c8:3e:fe:ed:cb:fd:e2:1c:31:d6:82:
                    57:15:c3:97:19:c8:45:64:ab:29:fb:e4:a1:8a:12:
                    96:e8:12:34:0a:53:f9:f4:ad:c3:3b:b8:05:c4:0e:
                    a0:b2:1d:6e:dc:04:68:ac:44:d1:8b:8c:ad:d4:e9:
                    8e:8f:bf:d0:a6:fa:71:a0:35:83:2b:13:46:b0:23:
                    e2:76:ad:78:18:94:eb:fc:77:a5:34:c0:4c:d7:60:
                    91:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:96:CB:78:B1:5D:18:6F:61:65:A0:B5:98:B4:7A:CE:E5:0A:51:51
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1c29eb1-3e4d-42b1-b461-918b8f5df4a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1c29eb1-3e4d-42b1-b461-918b8f5df4a1/6cd42b37fb6e1eb1c276cab99bbdd0528cddcaf3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.224.0/23
                IPv6:
                  2801:14:a800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270097

    Signature Algorithm: sha256WithRSAEncryption
         4e:c9:c2:71:25:8b:54:ae:19:4f:9e:10:03:15:73:9d:44:f1:
         3d:35:a2:c2:18:bd:25:59:b0:e9:4f:71:34:c1:4a:ff:03:7f:
         3d:76:99:22:75:73:29:a6:98:ff:88:02:69:ab:cf:7b:ce:64:
         58:cd:fd:6e:14:9b:51:73:e4:99:0d:7b:3b:ce:0e:aa:17:31:
         ca:a2:bc:6f:65:68:b1:bf:4f:c7:ea:5b:16:01:fc:c7:60:55:
         b4:b3:2b:30:36:17:04:25:33:9f:23:b6:ad:e7:75:80:e7:7b:
         01:ef:0f:51:d9:90:3a:f2:e3:26:be:5c:da:dc:e6:0c:0e:06:
         06:cd:91:7b:a8:c6:23:74:ba:e8:ec:f8:f3:11:89:20:6c:22:
         3c:71:a1:35:2f:dd:7d:37:8e:3d:03:e7:b8:3d:9c:ea:00:9c:
         c0:67:af:69:86:4f:86:1a:ef:a2:34:c5:db:75:c5:05:ad:98:
         82:9d:31:d0:eb:7c:79:38:99:5e:c1:7e:d9:97:29:eb:63:77:
         0b:7e:24:b3:41:e0:e2:fd:0f:76:b7:cb:65:ca:33:e6:50:a7:
         d6:bd:cd:0e:76:9c:6a:da:43:39:cb:a6:ad:29:2a:11:cb:f1:
         24:e6:f5:0a:dc:0e:99:cf:e1:3a:bf:07:53:7b:b1:f8:4f:21:
         44:66:3a:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----