Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1b0d91bf4b8f868ce1e12bd1f0143b57676d00f.cer
File:                     a1b0d91bf4b8f868ce1e12bd1f0143b57676d00f.cer (raw, json)
Hash identifier:          OrCXNIO8moxrwsXBxIF7vRV91MVbGZd3fismI8vN3SU=
Subject key identifier:   5C:C4:17:E5:ED:47:4E:87:59:A4:D3:27:AF:6D:8B:E6:40:4A:C6:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5AE37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f6e6918d-77f6-4d72-8efd-66b7df9b6db8/a1b0d91bf4b8f868ce1e12bd1f0143b57676d00f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f6e6918d-77f6-4d72-8efd-66b7df9b6db8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 21:40:17 +0000
Certificate not after:    Fri 24 Jan 2025 22:33:55 +0000
Subordinate resources:    AS: 265672
                          IP: 45.5.120.0/22
                          IP: 2803:b1c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15052343 (0xe5ae37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 21:40:17 2023 GMT
            Not After : Jan 24 22:33:55 2025 GMT
        Subject: CN=a1b0d91bf4b8f868ce1e12bd1f0143b57676d00f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:7a:d9:a5:2a:65:77:5a:ce:45:b0:d9:c3:38:
                    4f:64:99:46:bd:94:29:ab:44:0f:e5:dc:62:71:b4:
                    53:80:b1:e1:a8:50:67:59:be:da:d3:4c:29:e4:6f:
                    99:b6:e8:4f:c3:df:52:33:0e:3d:7f:ab:9b:5f:41:
                    2d:2c:0f:0d:19:2e:07:80:62:ac:c6:dc:87:4f:fe:
                    5e:f1:47:14:d7:9f:18:d2:fa:aa:6a:1d:a4:b7:0f:
                    c6:2b:b1:3b:62:ec:5c:72:2a:d8:1b:12:02:4c:09:
                    2d:3a:f6:bc:4b:19:65:3c:84:b1:ce:e6:c3:0a:0c:
                    09:78:51:e5:54:a5:ab:49:40:b5:65:65:d5:13:90:
                    b6:3a:a6:0f:44:4d:d4:6c:b5:af:2d:69:5d:e1:78:
                    c4:18:f0:7c:d4:f3:91:04:d6:af:a4:8d:2e:28:c4:
                    6f:a0:c3:15:25:72:67:6c:bb:28:1d:8c:17:bb:b8:
                    8d:44:a4:e1:3d:b1:31:36:59:55:7d:ae:97:51:0a:
                    56:5d:af:9c:37:41:74:97:2f:15:e2:b4:5d:78:20:
                    d6:50:2d:a2:dc:6e:bf:2c:2e:8c:bb:e0:47:80:ef:
                    2f:88:ab:9e:69:fd:61:94:66:30:03:11:a8:21:3d:
                    2e:f1:30:1d:ee:21:b1:95:37:f4:1d:4a:61:03:93:
                    7e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:C4:17:E5:ED:47:4E:87:59:A4:D3:27:AF:6D:8B:E6:40:4A:C6:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f6e6918d-77f6-4d72-8efd-66b7df9b6db8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f6e6918d-77f6-4d72-8efd-66b7df9b6db8/a1b0d91bf4b8f868ce1e12bd1f0143b57676d00f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.120.0/22
                IPv6:
                  2803:b1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265672

    Signature Algorithm: sha256WithRSAEncryption
         0a:06:7c:4d:cc:e7:29:a8:63:6e:20:c5:a0:a3:c7:12:1d:82:
         1c:a1:ef:c3:66:cd:1e:d5:56:1f:aa:4f:ac:a3:27:16:60:1e:
         33:a0:0d:bd:b0:86:0a:55:e8:44:29:2a:cd:2f:a4:5e:8d:49:
         bb:21:86:a3:e4:57:a7:8c:e9:cb:52:18:d1:2f:9a:3f:91:0d:
         a4:51:7d:03:6c:7c:b6:00:ec:25:7e:81:03:f5:d8:93:f9:6c:
         06:0e:f2:29:58:4a:5d:a7:48:5d:7f:c0:47:df:16:6a:d0:73:
         ad:fd:ca:06:2f:8f:3d:b9:9b:d0:f7:6c:b4:e8:89:de:91:da:
         27:df:76:ac:36:f0:83:cc:d2:c6:18:c8:1f:d9:21:b7:62:0a:
         34:62:af:b9:6a:ee:aa:0f:1f:b9:c7:41:37:91:ac:19:ca:2f:
         79:77:59:13:a9:10:64:73:71:1b:6a:11:0d:17:85:2d:3f:15:
         6f:61:ad:59:01:d8:15:6c:0b:fe:1b:71:a5:a1:27:ab:e9:7f:
         72:e0:0e:72:13:7c:8b:4e:01:8f:7c:c1:ea:68:bf:68:8d:f6:
         04:d7:0b:77:7b:c3:74:9d:94:f8:51:69:77:25:f2:45:db:23:
         9f:a5:8c:1a:5a:bd:44:2e:8c:74:fd:98:10:ca:0d:67:20:1c:
         42:bc:08:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----