Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.cer
File:                     a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.cer (raw, json)
Hash identifier:          G8TtCbTplLK8vjuJjAw9yWvLJxi4+9LXZ5J3fOMaL1I=
Subject key identifier:   42:60:3D:16:FD:E1:C0:20:C5:55:D7:07:D5:1C:A8:E4:B6:1B:4B:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8AE4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Sep 2023 19:05:30 +0000
Certificate not after:    Sun 13 Apr 2025 20:28:12 +0000
Subordinate resources:    AS: 267901
                          IP: 45.178.68.0/22
                          IP: 2803:5660::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16297547 (0xf8ae4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  7 19:05:30 2023 GMT
            Not After : Apr 13 20:28:12 2025 GMT
        Subject: CN=a0f3c11bf87b51890ebc2a5d1af786c28b7c7535
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:25:8e:fd:be:96:e7:8d:18:e5:f9:69:85:0e:
                    59:f9:20:1a:e1:f1:76:ad:ed:c5:2c:71:0b:c0:f0:
                    e1:3c:a4:1f:55:81:e2:1f:7f:c7:da:c4:64:59:fc:
                    46:16:79:91:50:68:cd:ab:53:67:fb:3d:bb:ac:7e:
                    90:38:0c:77:87:4a:62:ec:5e:f2:67:e7:96:16:6c:
                    f5:02:1e:f1:09:4b:01:e6:c3:f1:c7:7b:55:69:4e:
                    08:8a:89:c0:87:b6:de:db:73:df:db:0e:22:d6:f4:
                    56:62:f2:ac:e8:21:46:52:db:ec:33:eb:7d:bd:fd:
                    6b:dd:21:41:02:85:37:43:14:59:d7:af:4f:3e:69:
                    2e:52:92:cf:88:0f:8a:32:19:8e:de:a6:bd:a3:c3:
                    ea:e6:87:31:8a:ea:a9:d2:ff:0e:6c:53:07:6f:e0:
                    28:0d:6a:21:a3:d6:53:71:a2:ca:8a:75:18:21:f2:
                    43:ce:77:28:b2:13:84:2f:fb:a5:a9:89:af:0f:75:
                    41:2f:db:73:3b:b5:f9:7c:c9:9c:6f:e6:59:4e:15:
                    77:7f:08:fb:93:15:81:3c:0b:5a:c6:c8:92:1f:0d:
                    3e:ad:4c:50:f0:b5:f1:9d:5a:7d:a1:3f:1c:e9:0a:
                    d7:78:38:d1:b9:3b:05:5c:ee:e4:89:c4:dd:27:c7:
                    3e:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:60:3D:16:FD:E1:C0:20:C5:55:D7:07:D5:1C:A8:E4:B6:1B:4B:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ba499960-b2b3-495a-b77a-4d0cfa079c0a/a0f3c11bf87b51890ebc2a5d1af786c28b7c7535.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.68.0/22
                IPv6:
                  2803:5660::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267901

    Signature Algorithm: sha256WithRSAEncryption
         6e:8e:b5:c9:7d:e5:ef:29:c7:ec:75:63:d7:94:a8:0c:15:74:
         9b:47:5b:a9:88:a9:e0:d4:8c:cc:85:70:d0:48:26:a0:88:fc:
         e3:78:24:88:91:ef:0b:27:b4:fa:a7:4e:a0:28:dc:f9:c2:e1:
         56:fb:2c:99:ce:43:7c:d6:12:76:6d:3e:60:34:7f:53:1f:e8:
         3d:ef:98:12:15:88:d5:a9:d7:c5:96:1f:89:aa:19:2b:19:be:
         c0:33:40:81:19:ec:a1:af:98:f9:f9:ee:16:09:f6:52:e8:93:
         a0:91:f1:a3:0f:a2:83:88:83:84:58:75:d0:4f:0a:3c:03:f4:
         ea:b6:83:de:f7:73:4f:d2:7c:9c:12:c6:bd:f3:3b:f5:02:e5:
         31:a3:a5:db:0e:bb:43:62:92:19:fa:c3:b0:06:d3:5b:01:b3:
         02:e8:35:1b:1c:d4:11:55:bf:95:72:da:06:38:a7:c6:36:41:
         7b:af:09:0c:12:68:ec:7e:45:6c:0c:d4:d6:9e:9d:39:03:65:
         58:c0:ba:53:2f:ca:f8:c1:2f:d5:f0:39:25:8d:4b:ee:9e:63:
         5b:df:03:4d:11:62:30:c5:43:86:33:5f:84:9b:fb:c9:35:fa:
         17:bf:e9:01:98:33:8f:ea:a9:d5:9a:68:22:11:cd:71:75:3e:
         d3:6e:c6:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----