Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8570438cd8a62f9224b95ce8651241a55674b366.cer
File:                     8570438cd8a62f9224b95ce8651241a55674b366.cer (raw, json)
Hash identifier:          KeEAQGD6SDbcmc4FBuiPPMt1KwNs22PUnckWCEVGirE=
Subject key identifier:   43:F3:91:11:FB:21:F5:B0:D1:51:01:19:27:24:E9:5D:64:26:1F:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF8633
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e94e7b2f-f398-4ba0-8179-b67638e0fdb6/8570438cd8a62f9224b95ce8651241a55674b366.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e94e7b2f-f398-4ba0-8179-b67638e0fdb6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:23:54 +0000
Certificate not after:    Fri 21 Mar 2025 12:51:16 +0000
Subordinate resources:    AS: 270732
                          IP: 189.8.120.0/22
                          IP: 2804:7088::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16746035 (0xff8633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:23:54 2023 GMT
            Not After : Mar 21 12:51:16 2025 GMT
        Subject: CN=8570438cd8a62f9224b95ce8651241a55674b366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9b:d0:08:a7:da:7e:b1:e8:8b:c8:bd:1f:6b:
                    bb:66:96:9a:a6:e5:b8:dc:e8:1c:15:79:6a:df:c1:
                    7e:d6:53:12:3d:4c:46:8b:23:b1:f0:5b:a6:50:64:
                    81:a9:f3:c6:e7:ed:01:22:2a:98:38:e7:5f:71:5c:
                    cf:b6:b1:d2:64:f9:50:68:bd:55:4c:15:8c:53:50:
                    45:62:6c:98:98:33:f5:77:d3:c8:2e:e5:16:22:84:
                    5a:6e:46:c1:0f:86:61:ab:85:d9:7d:6c:bd:0d:9c:
                    50:74:69:1c:f5:0f:ff:fb:34:82:59:cf:80:b9:45:
                    d6:ba:91:cb:4a:3d:ee:69:e5:ff:0d:fa:69:3e:d8:
                    7e:94:1a:74:e7:b9:53:0b:7c:9b:35:0c:84:bd:64:
                    1e:f9:ee:59:69:64:23:7b:73:87:78:9c:db:91:46:
                    cb:1d:6a:e2:63:7f:07:e3:7f:d5:f2:1d:72:47:90:
                    fd:a0:2f:21:ae:34:4b:37:73:b4:38:2c:64:9b:d3:
                    86:84:72:ec:a1:87:eb:15:a3:67:05:57:05:cc:60:
                    f2:b7:82:f7:99:dd:55:ff:95:a4:e5:4c:da:53:7f:
                    58:09:11:90:6a:4b:fb:0a:c6:46:1b:a8:04:8c:7d:
                    b0:e5:99:22:3e:23:b3:bb:16:cb:1f:1b:fb:40:45:
                    1a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:F3:91:11:FB:21:F5:B0:D1:51:01:19:27:24:E9:5D:64:26:1F:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e94e7b2f-f398-4ba0-8179-b67638e0fdb6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e94e7b2f-f398-4ba0-8179-b67638e0fdb6/8570438cd8a62f9224b95ce8651241a55674b366.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.120.0/22
                IPv6:
                  2804:7088::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270732

    Signature Algorithm: sha256WithRSAEncryption
         2e:89:0b:ef:ff:ad:77:47:7d:09:a2:b1:89:f4:df:ef:9b:55:
         0d:a0:05:ed:7c:69:e4:cf:91:2c:ab:4d:79:2c:75:7d:27:f7:
         d6:dc:b0:95:b2:ab:7f:55:39:6c:3f:df:c0:a6:85:e3:28:17:
         54:58:3f:bc:40:32:5b:01:c1:3e:92:44:78:f8:03:5c:c4:55:
         00:a7:e0:dd:18:e0:76:cc:a1:d4:99:87:78:c1:34:fe:9e:e0:
         38:bb:cd:62:6d:9f:bf:59:ca:04:f5:7d:e8:d5:dd:6b:6a:d2:
         07:a1:b6:af:b5:e2:ff:7d:57:0e:31:ad:69:fa:69:e2:e6:e3:
         42:54:f0:dd:14:75:6a:d5:57:66:6b:74:2b:4a:d9:49:99:e0:
         8b:6a:06:e4:62:cc:32:0b:25:0a:41:d8:db:bc:20:c4:b5:c7:
         99:71:23:c3:27:22:e0:0a:3e:f5:6f:09:23:17:50:f2:a1:41:
         1a:68:e3:53:17:b2:6a:ba:f0:4d:19:d3:d3:11:48:5f:e1:2a:
         c7:b0:39:01:8b:8b:d0:6e:49:74:2c:c6:4c:ba:7b:e8:7e:6d:
         02:a1:55:db:ef:9d:27:26:c2:3d:1f:e5:4b:32:c4:aa:a3:dc:
         25:a1:d9:0f:8a:38:31:51:34:eb:62:83:62:6c:bd:f3:af:80:
         9b:be:44:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----