Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7d9d7bcafe24c033e823cb7101a54fa339b0df6e.cer
File:                     7d9d7bcafe24c033e823cb7101a54fa339b0df6e.cer (raw, json)
Hash identifier:          96tDuXICcBHuEUGwbE4kBPWeIj6/x3jx3DwcSZXuHi0=
Subject key identifier:   71:8D:37:0C:1F:A7:F7:31:25:27:35:10:DE:B9:EC:D5:36:8A:9F:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F53030
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/19cc73aa-5a75-4c70-8eb6-da8c21e7c228/7d9d7bcafe24c033e823cb7101a54fa339b0df6e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/19cc73aa-5a75-4c70-8eb6-da8c21e7c228/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 10:39:05 +0000
Certificate not after:    Fri 04 Oct 2024 17:28:14 +0000
Subordinate resources:    AS: 266661
                          IP: 45.227.172.0/22
                          IP: 2803:3120::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16068656 (0xf53030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 15 10:39:05 2023 GMT
            Not After : Oct  4 17:28:14 2024 GMT
        Subject: CN=7d9d7bcafe24c033e823cb7101a54fa339b0df6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ec:3c:4f:9b:cb:a9:9b:80:d6:c3:33:1b:e0:
                    68:60:88:7a:86:26:78:ab:b7:b6:ea:93:03:7d:31:
                    fa:6c:27:9d:32:ef:6f:91:03:a5:73:e8:2d:08:31:
                    38:d5:56:09:76:ef:58:33:19:98:1c:be:48:14:47:
                    32:e9:ab:bf:9a:e2:ff:37:2c:6e:51:5c:9e:f3:a7:
                    c6:2b:58:5d:1d:28:d2:6b:80:5c:e1:65:55:00:cf:
                    3b:43:0b:e3:e6:1c:28:fc:d3:ea:16:8a:4e:cd:02:
                    33:01:f7:39:ab:9b:42:dd:8a:b2:8c:84:68:8e:6f:
                    de:0c:b8:64:1b:3a:23:e0:dd:68:16:f3:e2:79:f4:
                    98:e3:b4:c2:4a:45:a8:35:95:a0:5b:20:e6:c6:64:
                    5a:35:c0:42:d5:6c:ec:b3:9e:26:c2:8a:48:9c:a1:
                    7a:84:95:71:d7:10:f4:20:69:2b:03:09:c7:4d:88:
                    78:7e:e0:db:e2:fb:63:c8:2a:87:b1:3b:ac:4d:e1:
                    19:de:16:84:20:52:2e:ee:ec:8d:3e:76:34:1e:0c:
                    ca:03:75:b0:75:01:e5:cd:3a:19:44:25:6d:c7:ff:
                    f9:bb:8d:47:c9:f0:8f:d0:52:ec:7f:c5:17:c9:fb:
                    c9:2c:a2:28:1d:03:7d:f6:e2:ef:51:6a:35:fc:0f:
                    95:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:8D:37:0C:1F:A7:F7:31:25:27:35:10:DE:B9:EC:D5:36:8A:9F:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19cc73aa-5a75-4c70-8eb6-da8c21e7c228/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19cc73aa-5a75-4c70-8eb6-da8c21e7c228/7d9d7bcafe24c033e823cb7101a54fa339b0df6e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.172.0/22
                IPv6:
                  2803:3120::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266661

    Signature Algorithm: sha256WithRSAEncryption
         b4:2b:5c:c8:14:0f:20:b5:39:7a:f8:41:1c:de:8e:d6:75:88:
         3c:ec:b7:79:f8:77:b8:81:b7:6a:90:1d:8e:9c:26:80:7e:f7:
         a2:e2:0c:5b:4d:94:0f:8f:3d:07:e7:05:d2:b7:02:16:cc:78:
         7f:8b:b9:b0:c9:d9:b5:df:a3:8b:0b:6b:30:0a:d4:02:c1:c2:
         b4:2c:09:78:e3:e3:37:32:af:81:40:c6:96:d0:e8:cd:0f:b7:
         39:92:2c:dc:5e:ea:15:59:50:f0:57:e8:3d:99:09:a5:97:b8:
         76:b1:a3:71:99:70:44:7d:af:82:c3:a4:33:79:8e:10:fc:70:
         6a:f6:c4:90:2e:5c:5a:4f:b4:b1:5c:16:45:04:c7:5d:a7:bc:
         74:dd:3c:8b:29:7c:ea:d9:e3:d6:78:bd:dd:c8:c6:9e:20:90:
         71:be:bb:2d:5c:a8:18:00:a9:40:05:60:0f:3d:4e:fc:bb:c3:
         14:9a:e1:54:46:77:2d:a4:27:df:d4:f5:fa:41:e8:54:2b:13:
         60:88:c8:e4:b3:6e:a1:48:56:fa:12:12:00:bd:65:3d:b0:41:
         3d:52:2b:6e:61:56:14:71:4a:fd:0a:79:94:84:01:2e:a3:03:
         6d:a5:99:3e:54:b0:ef:73:27:08:66:c9:ef:09:ba:5f:0d:25:
         81:98:d8:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----