Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d8e4b3eb0a6d73b9d70a389e470c02445ff3444.cer
File:                     7d8e4b3eb0a6d73b9d70a389e470c02445ff3444.cer (raw, json)
Hash identifier:          JBJkIQdvOCqS21MdEgZn5WNNpSZrzpWst1nkt5O6C4o=
Subject key identifier:   94:11:1B:36:88:40:CA:CB:40:BF:0C:09:8A:16:58:F6:EA:BD:D5:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F179EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4724c725-5366-46e6-ab4a-cb5796a7d9d8/7d8e4b3eb0a6d73b9d70a389e470c02445ff3444.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4724c725-5366-46e6-ab4a-cb5796a7d9d8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Jul 2023 15:10:06 +0000
Certificate not after:    Tue 25 Mar 2025 17:46:33 +0000
Subordinate resources:    AS: 266813
                          IP: 45.236.40.0/22
                          IP: 2803:38a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15825386 (0xf179ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 12 15:10:06 2023 GMT
            Not After : Mar 25 17:46:33 2025 GMT
        Subject: CN=7d8e4b3eb0a6d73b9d70a389e470c02445ff3444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:74:70:5a:85:43:55:ea:30:8a:dd:94:83:50:
                    84:4b:25:22:e5:95:44:e2:ad:e1:d3:e7:9e:25:92:
                    fd:ba:c7:21:55:d2:fe:50:9b:0a:08:8f:f9:40:f7:
                    26:09:93:bd:60:ef:0d:48:20:61:cf:bf:a3:1b:6a:
                    af:f1:b3:d2:01:e0:e6:d9:f6:4b:7e:b8:3b:47:c9:
                    b3:45:cc:89:d5:92:62:6f:89:88:c1:13:92:7f:30:
                    6c:b7:f3:28:94:93:0d:60:8f:2d:4f:fd:d2:0e:8e:
                    3b:fd:c2:4b:9e:30:1a:34:17:fc:cc:d5:5a:d6:80:
                    00:3c:49:10:13:75:f6:8f:99:3e:59:e6:d8:9a:18:
                    74:4a:ca:8d:07:16:eb:3e:93:59:1d:4c:cc:13:fb:
                    ea:11:64:d8:09:bb:81:8f:81:e1:11:97:30:34:31:
                    c8:59:b4:fc:00:4c:aa:6e:d4:84:f1:3e:5b:ac:63:
                    78:86:23:ed:4e:9d:78:7b:b6:69:2b:43:15:7a:a5:
                    56:43:b8:66:33:42:46:b9:ed:fe:6a:ee:e5:64:33:
                    9c:2b:cc:16:4b:ee:06:b9:dc:e8:7f:49:d4:c0:90:
                    40:99:78:04:dc:17:48:da:28:91:83:8a:d6:7c:53:
                    68:6a:3c:7e:a8:4b:9a:29:c6:a9:83:e0:03:98:7a:
                    eb:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:11:1B:36:88:40:CA:CB:40:BF:0C:09:8A:16:58:F6:EA:BD:D5:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4724c725-5366-46e6-ab4a-cb5796a7d9d8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4724c725-5366-46e6-ab4a-cb5796a7d9d8/7d8e4b3eb0a6d73b9d70a389e470c02445ff3444.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.40.0/22
                IPv6:
                  2803:38a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266813

    Signature Algorithm: sha256WithRSAEncryption
         c2:a8:5c:38:e4:e1:95:b4:cf:df:fe:3f:88:f0:6d:14:8c:31:
         c1:ab:2e:53:33:53:c9:cb:fa:47:d4:ec:2e:ec:b7:c2:7e:da:
         7a:68:a7:5f:68:19:e2:75:6c:82:13:d9:27:28:5c:b4:1f:24:
         89:38:29:b4:1f:40:bf:f5:e3:c1:20:51:f7:aa:9b:8c:f6:dd:
         97:bd:04:ff:fc:d7:5f:75:69:de:1d:54:f7:a0:ec:8d:74:bd:
         ff:00:f8:c9:36:98:cc:e4:31:72:0c:d6:d8:d3:e2:1f:3c:85:
         15:8c:5a:a3:7b:07:18:34:c9:7a:51:0c:1a:a1:28:b3:48:16:
         07:25:32:a2:14:18:24:be:c6:5a:0e:e5:5f:4e:97:1b:17:17:
         1e:1d:72:44:f4:16:43:63:80:c0:e2:a1:e2:94:79:da:e7:14:
         5c:bb:e8:1f:94:a2:bb:4a:19:ab:47:7a:bf:0a:9b:02:63:6d:
         28:03:d2:fa:62:14:49:61:68:7c:1e:3e:f4:e8:7c:68:73:86:
         2f:cc:d3:6b:93:50:45:d0:d5:d7:3b:2d:68:8c:1b:6c:1c:9d:
         91:2a:31:c2:9a:e8:e6:1b:94:6c:ef:cd:c1:b1:a9:2b:74:9a:
         d0:3b:13:dc:54:eb:64:ba:16:63:27:e3:41:70:9b:22:cb:34:
         23:a8:fe:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----