Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71aa3a686337a2f3b85e309b47afd1076b540c5c.cer
File:                     71aa3a686337a2f3b85e309b47afd1076b540c5c.cer (raw, json)
Hash identifier:          DStFcpeMocrak77L9vo7A1q/byvbluLdH6xjzJZH8jg=
Subject key identifier:   29:50:65:51:F5:83:16:B8:60:7B:0F:15:F2:49:D7:04:BB:64:9F:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E880D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f3e70c09-57f9-4c10-aa5a-c26c47b6e458/71aa3a686337a2f3b85e309b47afd1076b540c5c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f3e70c09-57f9-4c10-aa5a-c26c47b6e458/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 01:08:47 +0000
Certificate not after:    Fri 11 Oct 2024 22:16:45 +0000
Subordinate resources:    AS: 265612
                          IP: 45.189.236.0/22
                          IP: 2806:369::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15237335 (0xe880d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 01:08:47 2023 GMT
            Not After : Oct 11 22:16:45 2024 GMT
        Subject: CN=71aa3a686337a2f3b85e309b47afd1076b540c5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:42:f6:98:28:e8:01:ed:79:0a:be:ca:ce:9d:
                    1a:19:f2:99:5f:76:ee:eb:b0:4d:88:23:a8:2b:cb:
                    b8:d7:1a:ed:40:e0:cf:23:8d:f7:a9:97:5d:16:af:
                    5a:70:a9:e1:c2:e5:d6:e0:65:1e:74:5d:30:f5:fb:
                    15:b2:25:6d:fa:6e:23:39:19:f8:56:6f:e7:41:5a:
                    10:1c:1c:41:92:8d:7c:78:05:4b:f4:dc:0c:eb:72:
                    a1:15:dc:d0:0c:a9:f6:a6:20:8f:e8:5a:7b:e1:69:
                    77:35:78:c8:bc:f7:fd:3e:7c:d4:6d:fe:93:95:75:
                    90:8a:41:59:c9:c9:28:c8:b6:51:cd:00:34:c7:ce:
                    c9:d4:24:93:fc:90:56:53:50:7b:81:43:d5:0a:40:
                    51:4c:cd:5c:eb:99:a7:c8:6a:05:9e:78:de:7d:e5:
                    4b:37:02:00:9e:b0:26:65:18:b6:db:f0:cf:42:cc:
                    09:23:ab:2e:cb:08:4a:a3:d6:bb:49:97:a8:a5:80:
                    8d:93:28:7d:4c:08:42:f3:9e:ff:d3:c5:c7:3c:e8:
                    f7:d4:c1:5d:b2:f9:00:f4:e9:fe:aa:46:d6:11:ed:
                    4d:d4:b4:9b:fb:dd:8f:11:cc:94:02:d1:df:22:86:
                    ae:bd:bc:54:7c:71:6f:92:24:5c:bf:8a:e7:9b:61:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:50:65:51:F5:83:16:B8:60:7B:0F:15:F2:49:D7:04:BB:64:9F:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f3e70c09-57f9-4c10-aa5a-c26c47b6e458/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f3e70c09-57f9-4c10-aa5a-c26c47b6e458/71aa3a686337a2f3b85e309b47afd1076b540c5c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.236.0/22
                IPv6:
                  2806:369::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265612

    Signature Algorithm: sha256WithRSAEncryption
         34:8f:1c:ce:7a:29:fb:f5:c7:db:96:52:13:c5:42:31:bb:00:
         7f:a1:fd:02:d9:e2:9f:d4:5c:88:f3:ef:4d:8d:6a:c4:74:03:
         f3:75:15:78:6f:9d:f3:d0:f9:79:07:a9:c7:69:5f:13:77:57:
         77:7f:f9:4e:0b:6e:47:ba:4a:15:ae:8c:93:e9:3b:ab:f2:17:
         cf:40:3b:44:32:11:40:52:70:d8:f3:40:85:b5:59:11:5f:55:
         59:5c:65:f9:46:f4:94:8e:98:21:2e:00:a2:53:7f:51:2a:a3:
         c3:22:67:c7:8c:4b:79:f8:52:7a:4a:dc:f7:61:3b:79:d4:ca:
         0d:12:df:97:7b:49:61:87:cd:a5:74:75:6a:bf:75:8c:d3:59:
         7f:a0:8d:d5:79:34:58:f2:cf:16:86:a9:d5:d9:06:d7:f7:13:
         75:ed:17:66:b7:1c:71:0a:20:a7:b4:47:d3:7f:cc:14:5e:e8:
         bd:b8:4d:c6:06:07:c8:d8:e6:b7:01:8c:5b:f3:01:5a:30:f4:
         f2:ed:84:42:44:65:e0:10:19:52:48:a6:91:0a:69:cf:c6:9c:
         2c:3b:c1:b1:46:f3:37:08:b1:50:70:bc:9b:4f:2e:d0:dd:33:
         67:15:0a:1c:06:a6:8d:c0:30:75:66:25:ca:20:98:d4:76:fd:
         38:e0:40:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----