Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/842601fa44eedca80a2af201faefd1bee51292e0.cer
File:                     842601fa44eedca80a2af201faefd1bee51292e0.cer (raw, json)
Hash identifier:          jN6Jnd9SPpzyWsHYUK7Pudj9yvLaqWLHOD3g8YpeUy8=
Subject key identifier:   B3:CB:CA:83:8F:C8:70:76:AA:F4:E7:67:D7:A4:B4:68:34:3B:7C:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E916C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a57c46e8-3600-45a0-ab1a-06630552bd03/842601fa44eedca80a2af201faefd1bee51292e0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a57c46e8-3600-45a0-ab1a-06630552bd03/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 May 2023 14:24:49 +0000
Certificate not after:    Sun 17 Mar 2024 21:28:46 +0000
Subordinate resources:    AS: 266804
                          IP: 45.236.192.0/22
                          IP: 2801:17:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15275719 (0xe916c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  9 14:24:49 2023 GMT
            Not After : Mar 17 21:28:46 2024 GMT
        Subject: CN=842601fa44eedca80a2af201faefd1bee51292e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2e:20:07:85:d0:f9:1e:8b:de:4e:7f:79:be:
                    2d:db:db:4a:42:0d:46:03:2c:5e:82:28:ab:88:a4:
                    4d:3e:76:14:96:f9:0c:52:6d:83:ea:cd:ae:6c:50:
                    9d:ec:b5:0a:dc:7d:63:4b:40:8d:10:91:da:da:98:
                    4a:13:b7:40:30:39:c3:10:bb:05:02:04:8b:e8:61:
                    b6:db:76:c9:1e:a7:bc:49:26:2d:cd:b2:fa:fb:a5:
                    dd:45:1a:b1:1d:67:af:a7:eb:0a:73:05:f6:af:27:
                    e9:62:21:c1:33:9a:22:e5:c2:dc:d2:8a:45:c0:de:
                    ae:ed:27:b1:c1:45:01:56:2e:8b:8f:64:93:27:d8:
                    2c:78:76:0f:9c:d2:44:6e:7c:97:c2:13:e1:d6:02:
                    f7:38:72:2d:e9:a4:f5:48:fe:99:66:b4:88:53:74:
                    1e:8c:a0:31:7c:37:26:3b:11:4a:78:41:b1:be:84:
                    54:f1:fe:92:e6:85:37:a0:11:ac:38:bf:8a:bd:f9:
                    2b:b4:ef:cc:20:7b:94:19:98:f5:a3:82:06:a4:08:
                    0b:cd:26:cb:c3:cc:c0:97:1a:43:b7:dd:e9:5b:ad:
                    41:e2:82:cb:8a:2e:a0:c0:de:3d:dd:6c:33:24:4f:
                    17:c5:ed:33:ba:a0:29:8b:6e:24:66:99:46:71:b2:
                    c2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:CB:CA:83:8F:C8:70:76:AA:F4:E7:67:D7:A4:B4:68:34:3B:7C:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a57c46e8-3600-45a0-ab1a-06630552bd03/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a57c46e8-3600-45a0-ab1a-06630552bd03/842601fa44eedca80a2af201faefd1bee51292e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.192.0/22
                IPv6:
                  2801:17:7000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266804

    Signature Algorithm: sha256WithRSAEncryption
         26:8d:b4:be:41:be:af:b1:0d:fe:d5:39:8c:f2:b6:7e:58:94:
         f7:75:57:8c:1d:71:fd:fb:7b:70:95:5a:95:4f:84:72:03:81:
         fb:76:c7:e7:bb:cf:ee:34:c5:cc:3d:f6:17:27:f9:a9:bf:3d:
         50:ac:7f:47:32:e6:3a:cd:12:11:42:33:e9:be:2b:f9:1f:0c:
         68:d0:ba:c0:5a:54:05:e3:5e:68:61:29:35:61:25:e4:10:4c:
         37:a7:e4:8a:78:84:be:11:16:e4:70:14:9f:cf:a5:7b:9e:b4:
         5a:96:e6:a1:96:68:65:e7:65:3d:73:ca:a1:7b:d6:e3:b1:df:
         f8:c6:c4:92:1e:02:5b:11:7a:29:81:77:32:7b:9c:ec:45:37:
         41:34:2f:e7:6e:0e:46:83:53:20:bf:85:40:3e:dd:65:05:0e:
         4b:2b:5b:cf:55:85:bf:52:c1:4a:78:a0:fa:6e:92:8e:30:2d:
         99:fc:4b:06:ab:0d:ca:95:fa:cb:0d:f0:78:e8:14:22:77:90:
         b9:1f:33:86:1a:4a:c0:59:5d:3b:ec:0e:7e:e0:40:83:23:e9:
         72:26:2d:1e:bf:8d:85:d6:1e:1d:1f:94:72:ca:ee:b9:0c:fe:
         1c:99:1d:77:fe:57:5a:6a:51:75:4d:96:93:f5:b1:fb:dc:dc:
         ce:72:69:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----