Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c048592d36e70d9897ab1b5d210b9deda4621c5.cer
File:                     7c048592d36e70d9897ab1b5d210b9deda4621c5.cer (raw, json)
Hash identifier:          wEup6nFlKa7NLCxnZoBNgPRAbvHssuf/jXTL1FYTstE=
Subject key identifier:   00:53:0C:2C:42:3F:10:C4:D2:32:EB:5E:63:FF:8B:1E:97:E1:AE:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103A532
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/7c048592d36e70d9897ab1b5d210b9deda4621c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 10:08:06 +0000
Certificate not after:    Thu 28 Aug 2025 05:00:00 +0000
Subordinate resources:    AS: 264631
                          IP: 45.235.120.0/22
                          IP: 143.202.208.0/22
                          IP: 2803:e140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17016114 (0x103a532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 10:08:06 2023 GMT
            Not After : Aug 28 05:00:00 2025 GMT
        Subject: CN=7c048592d36e70d9897ab1b5d210b9deda4621c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bc:8f:33:f2:3e:b3:25:39:90:4f:49:55:4a:
                    47:64:25:e3:3d:cc:b5:c4:a5:83:69:52:c0:4f:b7:
                    82:aa:df:e8:91:0c:91:7b:da:f0:cc:2b:0b:3d:55:
                    d5:cc:47:9b:db:17:18:3a:7b:6c:43:1b:87:8f:18:
                    32:20:de:73:8f:c7:35:57:07:e2:ea:38:53:7d:2f:
                    46:9f:78:a1:0a:9e:44:2a:ee:a6:87:b2:10:3b:35:
                    ee:40:56:ee:1d:97:ae:52:b9:47:97:9a:9e:34:ed:
                    0f:1c:73:9c:6b:7d:56:41:6d:09:e5:16:42:c0:59:
                    2b:bf:79:6a:af:8b:e4:4e:4b:89:ec:f1:93:84:e3:
                    88:5a:2b:13:11:6f:6a:1a:05:1f:a7:59:d5:c9:17:
                    de:45:73:f4:03:a2:64:32:55:20:50:dd:ed:fe:0c:
                    e3:8d:dc:2c:3d:63:cc:08:fc:ab:8e:b0:7f:d4:6d:
                    87:b6:e6:23:94:5e:0a:3f:19:fc:a3:ee:26:6c:2d:
                    ab:c3:cf:0c:d0:ff:45:5e:bb:e5:b6:f9:5b:d8:5b:
                    db:66:95:7a:a7:10:69:0b:0a:09:bf:ce:fd:c7:a1:
                    5c:ea:ce:d6:2a:b0:97:98:98:e3:7a:49:ca:cf:e4:
                    4b:fb:7a:65:93:d9:d6:5e:b3:f7:e9:69:83:ef:34:
                    be:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:53:0C:2C:42:3F:10:C4:D2:32:EB:5E:63:FF:8B:1E:97:E1:AE:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/638947d4-6edb-420e-9cc0-838a8f244481/7c048592d36e70d9897ab1b5d210b9deda4621c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.120.0/22
                  143.202.208.0/22
                IPv6:
                  2803:e140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264631

    Signature Algorithm: sha256WithRSAEncryption
         b8:4d:42:39:37:c3:57:b8:9c:16:0a:db:b6:ca:42:5c:9c:56:
         36:33:29:ab:51:dc:46:a0:ee:0c:0c:aa:68:c3:b3:d7:8c:41:
         2b:ad:75:5e:42:f4:9c:9c:3a:52:19:34:98:cf:5e:50:b6:38:
         8b:cc:a7:1d:24:b6:b5:24:ca:d8:b3:91:03:d9:26:f1:6a:f0:
         e5:b1:7d:d2:0b:5f:80:8c:98:6e:9e:66:e4:c5:d6:4e:1c:96:
         15:3f:3c:61:06:9d:43:39:91:9a:87:ba:20:84:16:b9:33:69:
         e5:42:df:f4:b1:b9:82:97:38:e8:61:28:b8:37:91:6a:db:87:
         97:37:1c:ea:34:fb:ef:0c:82:e6:94:87:58:d6:02:b6:4a:33:
         bc:96:af:7b:75:27:d9:68:d4:cd:57:2a:57:fb:e6:f2:b7:6a:
         32:e4:1e:da:1c:72:1a:45:9e:99:76:62:4c:0b:0c:31:2e:62:
         20:4d:be:8c:6a:23:06:24:81:73:48:8d:9b:3a:0a:50:53:0f:
         99:f7:9c:71:ba:78:1f:f9:f6:db:c8:13:ac:af:7d:d3:dc:2f:
         22:53:92:22:81:fb:19:26:70:2c:8c:0f:22:cc:42:e7:8e:f6:
         7d:54:ed:c5:e4:b1:4b:20:f6:48:32:5e:1d:2b:f8:bc:21:af:
         d9:af:9a:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----