Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a1b684825d80b6c64343f45a48158cd16b805e5.cer
File:                     9a1b684825d80b6c64343f45a48158cd16b805e5.cer (raw, json)
Hash identifier:          BOWYXDULKL8SF2jrXiuRutt1SOWmHFfjcdawobhJqT0=
Subject key identifier:   F5:87:92:5E:11:92:F9:92:C9:6C:CD:55:9D:12:F9:CD:18:92:73:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3D6C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4b18a5b-5eb7-4cc1-9b95-9581befb9c72/9a1b684825d80b6c64343f45a48158cd16b805e5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4b18a5b-5eb7-4cc1-9b95-9581befb9c72/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 15:18:13 +0000
Certificate not after:    Sun 27 Oct 2024 20:47:12 +0000
Subordinate resources:    AS: 266689
                          IP: 45.228.202.0/24
                          IP: 2803:9520::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15980228 (0xf3d6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  3 15:18:13 2023 GMT
            Not After : Oct 27 20:47:12 2024 GMT
        Subject: CN=9a1b684825d80b6c64343f45a48158cd16b805e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:4b:07:f9:9c:b5:83:32:e5:d9:29:90:a6:f3:
                    4d:54:f9:0a:19:b7:6a:22:2d:4c:bb:e5:fe:15:01:
                    32:f0:16:1c:f8:a8:b6:42:a8:5a:da:10:1f:8a:a1:
                    ed:b7:c2:db:7d:59:6d:ac:99:b5:04:b1:d2:d2:1b:
                    96:5b:5c:df:75:2d:ed:a5:20:d7:01:ab:2b:d3:0d:
                    8b:7b:de:92:e3:d9:5c:d5:54:cb:8e:8a:5a:b8:b6:
                    d8:72:17:51:c8:bf:47:2e:8c:c7:27:f6:d3:80:9f:
                    5a:65:84:ef:12:73:98:3d:d9:4f:e6:04:13:78:90:
                    7d:32:f2:de:36:10:ba:06:50:43:70:81:c7:23:25:
                    47:fe:27:65:0f:0e:2b:57:d0:e5:17:ef:f1:e1:dc:
                    ac:1f:7e:60:d4:69:7b:96:cc:27:9d:af:2d:1f:4f:
                    b1:e8:34:51:d1:81:f5:b4:4a:19:ff:ef:fc:01:59:
                    2a:9b:90:97:5c:1d:7a:c2:26:bb:d8:ea:5f:45:83:
                    50:27:c8:3c:2b:a6:34:b3:6f:e9:8f:1c:5f:b1:9a:
                    bf:c6:fb:48:13:0f:95:10:c6:67:2a:8b:1a:11:f0:
                    c2:e0:39:3c:39:bf:24:85:0b:fa:62:3b:c4:1e:a2:
                    68:c1:6f:c4:c3:f5:b1:de:88:20:b2:f7:9b:5a:8e:
                    6b:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:87:92:5E:11:92:F9:92:C9:6C:CD:55:9D:12:F9:CD:18:92:73:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4b18a5b-5eb7-4cc1-9b95-9581befb9c72/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4b18a5b-5eb7-4cc1-9b95-9581befb9c72/9a1b684825d80b6c64343f45a48158cd16b805e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.202.0/24
                IPv6:
                  2803:9520::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266689

    Signature Algorithm: sha256WithRSAEncryption
         91:58:d1:d2:71:db:5f:3d:f8:8e:1f:3a:d0:96:5b:ee:72:a3:
         2a:87:a7:8b:63:11:a0:ff:59:6e:e5:0e:11:60:96:6f:fe:d7:
         e2:b4:89:53:4a:ec:6b:f4:78:04:fc:78:12:a9:0b:9f:3c:ba:
         70:ea:ae:cf:2f:ef:8f:ba:89:5c:31:c3:83:e0:22:bb:ad:ec:
         48:51:76:01:a2:a1:ef:41:e3:94:cd:e9:82:30:57:5d:44:4d:
         98:75:a6:f3:ac:8a:8d:6b:a6:2c:45:ad:c4:6f:a4:93:f5:92:
         79:8f:da:a8:b1:7d:06:99:83:b4:7d:b2:a4:b8:38:38:2b:df:
         24:e4:06:07:75:a0:e5:fb:f4:88:12:b5:bf:2a:0d:5a:97:3b:
         f4:6b:58:9f:b1:a4:33:40:c0:e7:64:5b:8f:f1:3a:b5:ca:2a:
         f8:b0:a1:81:8a:72:1e:27:b6:53:1c:9e:b2:44:e5:22:d2:4d:
         8d:2d:82:ec:ea:19:10:a1:48:3a:bd:08:b4:88:a3:96:37:95:
         31:18:79:41:97:c7:f0:05:22:0e:c3:27:0c:ec:49:12:1d:f3:
         6e:53:fe:c6:32:d0:58:a5:32:aa:1f:d8:ba:36:ca:d5:a7:f9:
         0b:cb:fc:45:c7:cb:23:eb:41:75:24:ec:ff:4a:dd:03:48:48:
         72:08:97:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----