Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70329192fed693e4bec666de07650d6339e967f9.cer
File:                     70329192fed693e4bec666de07650d6339e967f9.cer (raw, json)
Hash identifier:          1ybfFMOwwNyQWO1jwWGqik8S+A8/OtAp4SBFTre9YBg=
Subject key identifier:   8A:74:44:68:C3:93:3E:28:7C:4E:87:9A:A7:39:E9:61:A9:05:9C:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF89E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83ccd5a3-97a6-4780-b614-15d2c3b7d0b8/70329192fed693e4bec666de07650d6339e967f9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83ccd5a3-97a6-4780-b614-15d2c3b7d0b8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:32:25 +0000
Certificate not after:    Wed 07 May 2025 14:28:27 +0000
Subordinate resources:    AS: 265937
                          IP: 164.163.28.0/22
                          IP: 2804:4024::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16746984 (0xff89e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:32:25 2023 GMT
            Not After : May  7 14:28:27 2025 GMT
        Subject: CN=70329192fed693e4bec666de07650d6339e967f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e2:0e:38:9c:8e:60:4a:c8:a8:bf:8c:6e:4f:
                    3f:01:9d:3a:6a:fe:78:a8:3b:43:33:80:f3:64:22:
                    d7:7a:9f:f0:99:09:0e:c7:11:d4:ce:01:14:78:ce:
                    a8:cf:72:16:af:0b:6b:af:ca:2a:c5:38:2c:82:f5:
                    8b:d4:0f:77:ad:0c:ba:f5:2b:29:30:e5:39:f0:27:
                    7f:a8:64:2b:3d:f6:98:d5:37:80:18:2b:66:de:52:
                    b6:60:49:92:42:57:b9:ff:e0:1c:38:9e:42:e5:50:
                    be:d3:9d:22:16:99:05:4a:34:82:c1:30:3b:da:e3:
                    87:1c:af:58:2a:b0:48:5c:59:57:3c:12:81:b4:c3:
                    f8:75:4f:65:1f:ca:10:1a:2d:82:0c:1e:28:63:da:
                    38:86:cc:26:f9:33:8b:df:d1:3e:0e:57:40:25:7c:
                    d8:13:a1:47:b2:6e:69:a7:3f:ea:34:b2:0e:6e:75:
                    49:d7:7c:00:18:70:fa:84:6f:ce:ae:71:17:50:ae:
                    41:fb:11:fd:21:bd:90:b3:41:ab:15:cf:4a:e5:9e:
                    cd:df:50:b4:63:8d:0b:7b:fe:e6:7b:75:31:d4:94:
                    b9:4b:6c:c1:3b:dc:fb:98:05:3e:57:3a:d5:84:0e:
                    53:9f:da:e0:4f:59:1e:1e:0b:00:d0:12:d2:a5:8b:
                    c8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:74:44:68:C3:93:3E:28:7C:4E:87:9A:A7:39:E9:61:A9:05:9C:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83ccd5a3-97a6-4780-b614-15d2c3b7d0b8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83ccd5a3-97a6-4780-b614-15d2c3b7d0b8/70329192fed693e4bec666de07650d6339e967f9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.28.0/22
                IPv6:
                  2804:4024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265937

    Signature Algorithm: sha256WithRSAEncryption
         b4:98:dc:81:ec:1a:91:c9:74:1f:83:e2:f0:a4:b9:ad:3c:61:
         79:a0:ae:5b:93:e2:11:c0:4c:66:3d:66:43:56:fb:c2:90:c5:
         33:b8:58:4d:fb:d6:be:e6:79:c7:cb:69:6f:12:2a:af:56:e5:
         21:94:f6:7e:fa:9d:55:aa:5e:0f:50:56:02:1b:1f:0a:e6:6a:
         21:87:b8:64:a5:3a:52:bc:d8:f5:be:30:8c:74:a6:da:7f:8e:
         a4:71:3c:72:b8:e4:77:64:62:79:52:ca:1b:bb:e8:a5:4d:37:
         3f:38:05:b2:25:ea:2c:6a:6e:66:7c:77:e7:85:94:9a:0e:fa:
         c6:9e:17:b3:fd:88:06:41:5e:6c:b8:f6:bb:1d:be:35:fd:38:
         56:43:17:a7:8b:10:24:a0:b2:49:31:eb:d6:72:8a:19:92:92:
         36:65:79:24:75:6e:af:9e:f4:55:d1:83:93:15:ae:5a:a5:a1:
         41:8e:97:4d:24:7a:e9:19:86:49:f0:58:87:b3:99:2a:fe:3a:
         be:e0:8d:05:f7:1e:03:1f:06:05:22:ed:2e:14:af:d7:a2:6a:
         8f:b4:99:e2:f9:3f:a2:61:63:1f:de:2e:d6:e7:97:9a:03:58:
         e9:0b:45:19:2e:f5:12:f9:ad:b9:b7:e4:ea:fb:39:15:4d:f8:
         b7:ff:10:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----