Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/974cd2127f5d24807dc324c28b225519871b78c1.cer
File:                     974cd2127f5d24807dc324c28b225519871b78c1.cer (raw, json)
Hash identifier:          oCMrAtgR41DkwTuaQlRMB9C7LAvj9lxjHYARUfuyIaM=
Subject key identifier:   3D:13:E6:C9:C8:78:70:A2:C8:6A:88:29:98:3D:66:E8:A7:9D:62:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA3A88
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ffc765af-2a59-4d24-8094-46fa91801c1c/974cd2127f5d24807dc324c28b225519871b78c1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ffc765af-2a59-4d24-8094-46fa91801c1c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 19:34:04 +0000
Certificate not after:    Sun 09 Feb 2025 13:33:45 +0000
Subordinate resources:    AS: 267826
                          IP: 45.173.128.0/22
                          IP: 2803:d860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15350408 (0xea3a88)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 19:34:04 2023 GMT
            Not After : Feb  9 13:33:45 2025 GMT
        Subject: CN=974cd2127f5d24807dc324c28b225519871b78c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:17:31:6e:f3:37:7d:21:5c:64:12:cb:44:6c:
                    53:d9:8e:d1:4a:3e:eb:d1:bb:1a:6d:69:6e:67:57:
                    96:74:b4:cc:5d:3a:8c:43:df:c6:d3:41:a4:c9:d4:
                    88:95:08:85:fe:ba:d9:e4:94:88:66:cc:a2:a8:8c:
                    98:c9:66:b6:0c:e0:32:71:5b:88:01:f8:05:ba:39:
                    95:86:4e:a9:34:e6:d7:df:07:8c:cf:0b:69:ef:db:
                    13:3d:83:c5:e5:94:ac:34:3a:77:f2:ac:ad:3e:b6:
                    e6:0e:5e:68:24:30:24:11:5e:f9:9f:7f:fe:43:9c:
                    42:fa:9c:8b:92:82:60:de:27:c9:1f:23:58:db:a3:
                    ba:82:18:29:fc:8f:27:fa:06:21:65:e5:48:01:4b:
                    01:6f:fb:b9:19:20:5b:ab:e7:10:9f:db:a4:67:8f:
                    77:6b:9c:53:9b:a0:84:83:38:1f:6f:d0:ff:28:a3:
                    0e:5d:15:2b:40:b5:cb:61:f2:02:ee:50:fd:63:59:
                    84:bb:dd:cc:65:09:76:69:93:6d:06:7e:b5:cf:9f:
                    19:00:88:de:f8:bf:cc:50:78:1e:18:0d:0e:71:a2:
                    2a:8f:9c:47:a6:e0:d9:81:18:25:1e:a7:4a:79:b8:
                    1f:09:e6:f6:cf:de:88:9b:bb:c6:c4:19:40:5a:04:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:13:E6:C9:C8:78:70:A2:C8:6A:88:29:98:3D:66:E8:A7:9D:62:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ffc765af-2a59-4d24-8094-46fa91801c1c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ffc765af-2a59-4d24-8094-46fa91801c1c/974cd2127f5d24807dc324c28b225519871b78c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.128.0/22
                IPv6:
                  2803:d860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267826

    Signature Algorithm: sha256WithRSAEncryption
         86:e9:ea:d4:4b:d9:cf:8a:23:3d:d0:67:f2:2b:85:64:86:5a:
         84:b4:d8:53:7e:7a:12:4e:09:6d:ef:67:70:21:cd:6a:90:bd:
         23:a1:85:e8:c0:84:16:fc:b8:c6:52:05:5e:ab:30:04:41:bc:
         37:9b:a1:cd:7e:5d:b8:ee:cf:4f:17:af:9c:3a:a4:c5:cc:d9:
         de:cd:92:23:7e:a7:f4:5c:6d:88:72:90:da:34:6e:f1:a7:e7:
         76:3d:6d:34:5d:85:ac:20:61:c7:87:a3:40:6f:11:69:ea:49:
         d8:38:b3:98:97:16:02:79:48:5a:ab:6c:81:4e:27:20:29:40:
         63:32:32:91:7b:73:47:71:ad:c2:5e:3a:90:46:d9:19:cb:32:
         af:1e:7c:4a:27:8b:e5:da:80:9b:ad:c2:63:16:fe:a6:58:b8:
         ca:3a:2f:cd:1c:10:ee:91:3a:b3:9c:a2:41:fc:d9:f0:b8:fc:
         87:57:0d:fc:fd:a1:b1:a1:8c:24:6f:b6:c6:da:87:47:e6:79:
         f9:ec:a2:94:e8:d6:cc:e1:af:d2:96:a2:95:3b:e8:6c:68:da:
         8a:17:5d:1d:db:36:43:27:57:e7:49:5b:01:63:81:2d:84:9f:
         71:2c:37:7f:9d:b6:03:db:d9:9d:09:bc:1c:cd:25:ee:b0:af:
         57:ad:2f:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----