Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/82503eedd50e1495fa89bb4ecc2684002acd4692.cer
File:                     82503eedd50e1495fa89bb4ecc2684002acd4692.cer (raw, json)
Hash identifier:          wOwrzOBcDYMmrNYWffHrgj3UHQqxdGunTT+BQm49tAM=
Subject key identifier:   6E:9A:FE:56:10:AB:8C:1C:82:56:BB:C2:80:F1:CE:5E:1A:68:60:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101D9CC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d6b7a06e-b58b-420a-bc56-34c7ca1cf2d1/82503eedd50e1495fa89bb4ecc2684002acd4692.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d6b7a06e-b58b-420a-bc56-34c7ca1cf2d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 14:42:26 +0000
Certificate not after:    Wed 01 Jan 2025 16:19:53 +0000
Subordinate resources:    AS: 52447
                          IP: 170.80.172.0/22
                          IP: 190.124.168.0/21
                          IP: 2803:1d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16898508 (0x101d9cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 21 14:42:26 2023 GMT
            Not After : Jan  1 16:19:53 2025 GMT
        Subject: CN=82503eedd50e1495fa89bb4ecc2684002acd4692
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6d:1c:73:b6:58:26:ec:e6:f4:e9:2c:b2:96:
                    92:e7:e0:08:9c:37:f5:d5:20:27:51:b1:43:01:7e:
                    59:5b:78:4b:0d:60:f1:89:20:c7:b3:fe:0f:a1:57:
                    80:92:65:6c:b4:bf:da:fe:39:1f:e6:2c:fd:35:eb:
                    a5:de:92:18:7f:6b:cf:30:c6:7e:53:49:bd:1d:08:
                    82:80:13:78:bb:e0:d7:42:b4:b5:89:ab:a0:bc:de:
                    3f:e6:f8:60:41:07:14:99:da:9b:b9:43:4d:5e:7f:
                    a7:ea:c3:da:2c:18:46:72:1e:5b:84:41:21:77:99:
                    a2:e4:88:a0:fd:9b:dc:c6:e1:6f:7a:5d:1b:09:cc:
                    4e:d1:87:01:45:7c:86:1e:69:8e:3c:92:c5:e7:1e:
                    22:b2:fa:b5:cb:af:5c:87:c0:f1:60:97:d0:b2:a0:
                    95:db:ca:94:6d:16:c4:cb:83:ed:7f:24:52:ff:90:
                    64:b0:cd:ac:13:e9:43:11:4e:95:da:1a:69:ee:88:
                    ae:1a:0a:cb:34:5a:3b:6c:a3:5c:16:a9:3a:79:de:
                    9e:e0:33:44:7f:9d:38:00:d2:50:5b:09:f5:fe:60:
                    5e:7c:5b:f5:7e:41:ef:7a:8e:04:93:73:08:9d:82:
                    a2:dd:08:51:a5:5f:08:3c:78:4d:1c:79:09:ae:13:
                    a3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:9A:FE:56:10:AB:8C:1C:82:56:BB:C2:80:F1:CE:5E:1A:68:60:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d6b7a06e-b58b-420a-bc56-34c7ca1cf2d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d6b7a06e-b58b-420a-bc56-34c7ca1cf2d1/82503eedd50e1495fa89bb4ecc2684002acd4692.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.172.0/22
                  190.124.168.0/21
                IPv6:
                  2803:1d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52447

    Signature Algorithm: sha256WithRSAEncryption
         2f:d5:bd:d3:4e:87:0e:71:41:96:b9:db:74:8c:21:14:63:97:
         da:b8:31:e1:2d:3f:05:94:21:a4:17:8e:65:c7:71:d3:55:8f:
         af:13:1e:49:48:d2:e7:0e:8f:f2:10:26:17:50:ab:f4:2c:10:
         ee:28:d1:16:a1:a5:40:f0:e6:af:29:a1:df:93:a4:91:3a:73:
         16:29:dd:d5:b3:41:c8:f4:20:ad:4e:be:a9:3a:c1:09:60:17:
         94:f3:a1:8a:df:32:94:c5:15:95:d9:f8:61:cc:99:a9:ff:51:
         41:5b:43:6b:65:11:05:23:c7:b3:b2:a7:7e:e6:34:23:74:47:
         f3:8c:cb:f8:c0:60:93:da:cb:21:83:a8:8c:e4:34:4c:e9:9b:
         78:fd:37:7b:f6:4b:7f:d5:45:8b:0b:87:52:c4:82:7a:57:d1:
         b1:46:db:69:d2:71:c4:9f:2d:71:58:4f:6e:55:e0:c7:04:9f:
         d0:95:ef:6b:1d:5b:e4:ad:5c:d6:27:ba:0c:f5:e6:ee:87:74:
         8b:95:37:e2:50:d6:e7:5f:71:a3:28:a6:ca:45:70:cf:ce:c8:
         c6:0f:78:2c:93:2b:34:32:bc:99:72:44:e5:6b:12:57:79:3e:
         d9:ed:52:54:2a:47:2c:a5:cc:cd:ff:49:c0:85:89:a4:82:25:
         76:48:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----