Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d3a4f2ba6c777bd16b61a064c6586436763f44d.cer
File:                     7d3a4f2ba6c777bd16b61a064c6586436763f44d.cer (raw, json)
Hash identifier:          4S2ZaaCNKM6Crtn1wxJSxZFpdqr8z9bqntOkxDgOvVM=
Subject key identifier:   A9:9F:9B:36:B8:6E:A5:BD:23:5A:36:F7:38:10:43:0C:04:7A:A1:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E0391
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e47f258-63ee-461a-a36b-ee2ddaa1fbd1/7d3a4f2ba6c777bd16b61a064c6586436763f44d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e47f258-63ee-461a-a36b-ee2ddaa1fbd1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Mar 2024 21:10:26 +0000
Certificate not after:    Tue 24 Jun 2025 19:15:57 +0000
Subordinate resources:    AS: 270208
                          IP: 200.23.198.0 -- 200.23.201.255
                          IP: 2801:c4:a1::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17695633 (0x10e0391)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 14 21:10:26 2024 GMT
            Not After : Jun 24 19:15:57 2025 GMT
        Subject: CN=7d3a4f2ba6c777bd16b61a064c6586436763f44d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:77:6d:62:25:ac:fa:b8:08:4d:71:16:a0:3f:
                    1c:49:fd:9b:85:1a:73:8a:79:39:d5:0a:2e:dc:29:
                    5a:25:ff:4b:cf:27:c1:42:7f:2c:aa:de:20:d2:52:
                    55:d4:d7:d8:1f:01:37:14:64:9c:c9:0c:7c:b4:51:
                    8d:62:c7:d2:4d:e4:54:25:1f:7a:67:f3:54:f5:d9:
                    d6:cb:73:e5:08:cd:24:a5:44:7e:0e:03:7e:05:74:
                    01:cf:d8:e7:85:07:87:a0:89:ad:ee:5c:4a:a1:5a:
                    20:28:cb:6f:e8:0b:c7:d1:49:f2:95:71:fd:77:08:
                    a6:d9:2e:77:30:38:f6:ab:cf:e6:a8:30:dc:05:ec:
                    42:cc:4f:d4:73:02:ff:77:e7:91:f5:bd:59:c3:92:
                    9c:c8:e8:c5:58:7e:ce:cd:d1:af:28:51:ab:bf:24:
                    e5:23:38:cf:cd:f4:7a:dc:68:1a:f5:3d:f6:93:29:
                    3e:7d:11:05:fa:3b:4d:23:b4:2f:3a:bc:70:35:46:
                    22:e4:6b:89:50:d5:83:41:91:cd:95:f7:9e:fd:3a:
                    3d:3f:33:d6:d7:e2:98:25:37:b7:e5:82:23:1e:70:
                    0a:95:c9:31:4c:78:b6:ce:42:c7:0f:a4:6f:cc:e0:
                    0d:ef:fe:3c:98:65:eb:4f:83:ae:02:a7:db:6a:96:
                    77:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:9F:9B:36:B8:6E:A5:BD:23:5A:36:F7:38:10:43:0C:04:7A:A1:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e47f258-63ee-461a-a36b-ee2ddaa1fbd1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e47f258-63ee-461a-a36b-ee2ddaa1fbd1/7d3a4f2ba6c777bd16b61a064c6586436763f44d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.198.0-200.23.201.255
                IPv6:
                  2801:c4:a1::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270208

    Signature Algorithm: sha256WithRSAEncryption
         40:06:91:35:88:be:55:c6:fc:07:8f:e7:de:ab:61:e7:44:cc:
         ce:63:89:eb:5d:c5:d3:54:49:eb:b0:40:d9:00:66:ff:b8:7d:
         97:ea:93:b9:96:a9:2b:a9:29:ce:14:f7:b3:df:e3:47:e3:23:
         71:34:dd:04:eb:a7:5e:c6:78:5e:b6:26:cc:36:58:7b:06:fd:
         f1:0b:66:f1:37:60:01:a3:b8:ed:32:5e:ec:7f:81:94:67:c9:
         ce:48:69:8a:3d:d8:1f:44:04:3c:d0:fe:59:03:dc:d5:32:1f:
         53:ec:af:0c:20:46:b3:eb:72:4c:72:6d:6e:52:62:d4:f9:58:
         90:18:ad:4b:41:72:40:f8:4b:5a:66:ed:c2:24:22:24:cd:f0:
         5d:d7:e2:23:72:93:03:fa:8d:ef:94:32:07:2a:35:36:7d:8d:
         a1:cf:fa:bf:1a:76:4f:c2:ef:98:ba:99:fd:9b:2a:da:90:42:
         a4:89:e2:44:85:21:4d:d2:b0:ff:42:11:42:05:f3:99:e7:69:
         20:16:90:06:71:8c:44:0d:88:63:e3:b2:a2:f6:d2:01:ef:3b:
         70:ac:84:2d:0b:35:9d:fd:01:dc:5c:fa:20:bd:82:26:be:4d:
         e4:15:64:36:dc:06:53:34:ee:fb:97:8b:31:61:d7:c4:3c:3d:
         c8:6a:6a:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----