Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8cd2319b46640a23457db32a2b83a60b176318c8.cer
File:                     8cd2319b46640a23457db32a2b83a60b176318c8.cer (raw, json)
Hash identifier:          cPR2f55hTkLFqgSIk+XxWeqlFPxp20knWvWTxdWdUrM=
Subject key identifier:   30:74:E9:47:FB:76:39:E2:F4:DA:F5:6D:99:57:E9:9C:3F:5A:99:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F15F00
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83ccb807-cacf-4487-bbaa-7adeffa1111e/8cd2319b46640a23457db32a2b83a60b176318c8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83ccb807-cacf-4487-bbaa-7adeffa1111e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 15:46:43 +0000
Certificate not after:    Thu 02 Jan 2025 16:59:54 +0000
Subordinate resources:    AS: 266746
                          IP: 45.229.246.0/24
                          IP: 2803:1b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15818496 (0xf15f00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 15:46:43 2023 GMT
            Not After : Jan  2 16:59:54 2025 GMT
        Subject: CN=8cd2319b46640a23457db32a2b83a60b176318c8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:64:ce:08:f7:cd:2c:5f:67:25:1a:55:ec:31:
                    df:70:3e:d4:89:e2:71:68:5b:46:ae:a2:94:3f:92:
                    63:29:c5:56:ee:65:23:13:ba:bb:19:65:ab:3a:eb:
                    dd:7e:26:b2:b2:7b:a5:26:03:85:ff:87:2b:6a:ea:
                    12:39:bd:e4:46:f6:bd:37:e2:a4:8e:e8:e3:1e:23:
                    e8:92:ed:ad:ff:f9:d0:50:3d:58:dc:e2:34:dd:df:
                    3c:9b:8c:b9:45:c9:9f:42:23:c2:ce:94:e0:9b:31:
                    a4:b6:6c:18:3c:52:3b:95:05:ae:69:1d:0a:57:dd:
                    2f:f2:64:bd:f4:9e:6b:d4:1b:60:27:30:2f:f4:cb:
                    57:eb:53:69:f3:ef:12:3f:e8:4e:d1:b3:9d:6e:a7:
                    a7:44:52:b0:c0:7b:4f:31:43:d0:d9:6e:26:0a:13:
                    85:ef:2e:42:3c:51:90:37:d4:67:a8:6f:a2:cc:9e:
                    5b:14:4a:39:dc:77:8b:44:f1:9e:c8:5e:41:5f:54:
                    e9:f9:f9:7a:79:bc:b4:79:09:9d:37:9d:7f:30:0e:
                    3c:e2:74:7a:d3:18:9b:ed:8f:4d:80:dc:a0:f2:73:
                    48:9e:98:13:73:9d:b5:8a:9f:a4:58:a9:d0:5d:eb:
                    00:ca:0f:44:8a:d0:60:88:6d:0e:c4:ae:a4:95:85:
                    0c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:74:E9:47:FB:76:39:E2:F4:DA:F5:6D:99:57:E9:9C:3F:5A:99:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83ccb807-cacf-4487-bbaa-7adeffa1111e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83ccb807-cacf-4487-bbaa-7adeffa1111e/8cd2319b46640a23457db32a2b83a60b176318c8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.246.0/24
                IPv6:
                  2803:1b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266746

    Signature Algorithm: sha256WithRSAEncryption
         36:37:1d:e8:5c:02:8a:89:1b:c0:42:76:9a:a9:01:3a:93:17:
         24:87:a7:e1:f8:e2:ef:c5:c5:92:70:71:a5:53:ea:be:3f:21:
         15:b8:c5:73:85:ba:66:e9:5e:e1:9f:10:8f:b0:17:b3:74:a3:
         ba:fe:f6:39:a7:4b:d6:15:9f:49:5c:87:45:a2:2b:ea:11:e3:
         05:da:f5:d5:98:96:3d:6b:c7:7a:d8:10:c8:d0:da:b0:ea:56:
         8c:8f:c5:e3:7e:e2:51:b9:b5:8f:a5:dd:7b:87:6d:ea:7d:0f:
         28:64:5f:8b:bc:ac:f6:7c:db:60:8b:c2:9c:6b:11:f0:ba:c0:
         e0:d8:a2:c0:bc:24:c6:03:3f:d7:3b:ae:c7:56:0a:63:54:2d:
         5b:8e:c9:32:0e:92:38:23:64:37:6d:b3:54:0a:9a:26:07:de:
         36:21:f8:b4:6c:9e:40:47:e6:9e:62:b7:13:45:66:f1:97:8b:
         a5:06:86:db:2d:ec:05:9d:87:00:a5:52:83:67:12:ab:d0:07:
         53:cf:0c:90:21:7d:6a:cb:6b:6f:57:ac:08:23:fa:98:4b:37:
         67:06:ff:fb:42:e6:89:d2:6e:2d:5b:d9:7e:46:60:cd:05:ce:
         27:a6:37:c5:64:9c:7f:b9:0c:ad:18:67:65:96:cd:20:f2:2c:
         0e:c4:46:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----