Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75840911d5d4ba90774163fe5cc738b8169fc33b.cer
File:                     75840911d5d4ba90774163fe5cc738b8169fc33b.cer (raw, json)
Hash identifier:          jXJKy46W/pyWvG8RvlJ/ZoBfRflLFj0Iiah1AK8eXV0=
Subject key identifier:   52:BE:71:84:0D:5B:9C:64:4A:76:D8:B5:CE:8F:C8:75:60:2A:3B:E0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC212A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1276fad0-0fff-4202-bbcd-ddc1f1d581d7/75840911d5d4ba90774163fe5cc738b8169fc33b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1276fad0-0fff-4202-bbcd-ddc1f1d581d7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 16:31:32 +0000
Certificate not after:    Thu 11 Apr 2024 11:07:20 +0000
Subordinate resources:    AS: 270116
                          IP: 191.52.220.0/22
                          IP: 2806:3b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15474986 (0xec212a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  1 16:31:32 2023 GMT
            Not After : Apr 11 11:07:20 2024 GMT
        Subject: CN=75840911d5d4ba90774163fe5cc738b8169fc33b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:da:05:18:80:bb:c0:7c:57:0a:9d:9c:70:99:
                    4e:9c:0b:1b:14:24:37:64:99:9e:24:81:4d:5a:e3:
                    61:e8:61:eb:8f:78:01:7b:c8:28:86:8a:9d:8f:b6:
                    8c:8e:85:4b:48:8f:33:64:a1:85:89:34:6f:49:8a:
                    22:ef:e3:e8:da:d9:f9:f5:11:6d:e5:2f:6b:a4:0d:
                    20:af:8e:30:66:dd:74:bd:f6:ac:4d:a4:4c:c3:a7:
                    d7:d7:16:fc:80:f2:4e:c4:39:b1:42:b4:da:27:da:
                    61:cf:0f:8a:6e:54:ad:21:85:7b:dc:3d:04:18:39:
                    df:c8:6f:c4:ef:f7:21:58:53:26:31:d2:9a:05:c2:
                    d5:28:50:a3:07:df:99:b3:40:06:98:7b:61:41:44:
                    d0:7d:37:27:06:9e:09:6c:ae:43:25:c6:3e:d6:9a:
                    aa:23:6b:fe:cb:d1:89:c9:20:81:89:c8:0d:31:5c:
                    e8:12:44:d2:01:ef:98:14:ee:ea:86:68:09:b8:6f:
                    78:c9:35:46:d3:a0:7d:5a:c6:62:2a:0d:b5:bb:8a:
                    03:ff:b3:a6:1f:29:fa:fa:a1:80:0b:60:72:d5:78:
                    2d:08:99:6f:82:63:16:bd:a9:c0:91:9a:cd:b0:c9:
                    8a:0f:79:cb:5f:0a:86:37:0d:1f:76:76:09:ef:b5:
                    b5:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BE:71:84:0D:5B:9C:64:4A:76:D8:B5:CE:8F:C8:75:60:2A:3B:E0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1276fad0-0fff-4202-bbcd-ddc1f1d581d7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1276fad0-0fff-4202-bbcd-ddc1f1d581d7/75840911d5d4ba90774163fe5cc738b8169fc33b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.52.220.0/22
                IPv6:
                  2806:3b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270116

    Signature Algorithm: sha256WithRSAEncryption
         76:48:69:df:e6:a4:dd:a6:7e:c5:9d:4f:13:43:5d:27:65:fd:
         58:6d:aa:45:07:89:4d:fd:58:43:75:91:db:77:3c:8f:48:97:
         18:5e:54:d1:fa:74:bf:ac:11:60:75:04:83:55:b6:a9:0f:41:
         1b:b6:4e:64:6c:99:b2:89:ed:d0:81:0b:01:3d:24:a2:67:11:
         3c:0c:9e:21:7e:1f:6d:a7:43:6c:14:c5:9c:b8:b4:f4:71:c8:
         cc:b2:6e:f8:ce:76:7d:26:d0:fe:72:05:0e:37:3f:37:d3:ce:
         8d:d9:6d:f1:67:4a:85:1b:38:3e:35:f7:cf:f9:5c:f9:40:6e:
         88:fb:5d:0a:57:f6:27:bd:2e:e9:c1:cf:71:ae:c6:34:b5:01:
         de:01:c3:a4:f5:f8:9a:c7:f0:5e:13:a6:39:f8:b8:f2:1e:85:
         d5:28:fb:38:bb:fb:79:0a:6f:65:a0:b5:cc:47:ff:4d:92:88:
         cd:bc:fb:d6:31:14:bf:75:c5:1b:3f:57:07:13:3d:90:40:79:
         ba:01:8c:fe:0c:c2:96:5f:0b:19:f7:d1:1a:bf:35:59:81:09:
         1a:c6:5f:18:09:4f:a5:60:11:4c:05:c5:bd:e1:f7:e6:48:26:
         a4:50:9a:f9:da:ff:38:09:d7:73:b7:50:81:fb:59:22:0c:b0:
         83:4a:ba:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----