Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a270232b8c133bf837c7d6af508613a05b5a58e0.cer
File:                     a270232b8c133bf837c7d6af508613a05b5a58e0.cer (raw, json)
Hash identifier:          FGOGUs5J5Ma2ji0rupCSQj5Kx57tm0ieK29zP059SmA=
Subject key identifier:   09:CB:0B:4B:86:33:25:4B:64:DC:5B:A5:2E:62:C2:1F:2B:F2:B2:80
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B1006
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/37c413f5-3a98-401d-9f0a-a3f221857e50/a270232b8c133bf837c7d6af508613a05b5a58e0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/37c413f5-3a98-401d-9f0a-a3f221857e50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 12:54:30 +0000
Certificate not after:    Sat 30 Aug 2025 15:23:27 +0000
Subordinate resources:    AS: 64155
                          IP: 148.222.228.0/23
                          IP: 2803:e850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17502214 (0x10b1006)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 21 12:54:30 2023 GMT
            Not After : Aug 30 15:23:27 2025 GMT
        Subject: CN=a270232b8c133bf837c7d6af508613a05b5a58e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:7d:c8:e2:71:ae:1e:ab:a5:de:d7:05:78:
                    0e:03:80:72:fe:b6:ac:a1:06:48:ea:3f:6e:de:d1:
                    c9:b2:d7:f3:bf:15:02:78:7c:a0:ad:d5:46:f3:20:
                    6e:a1:36:3b:d0:80:a0:09:e5:a1:3f:ce:cb:02:b7:
                    0e:ae:26:e1:64:ff:3e:11:ca:2d:4e:70:68:bf:1c:
                    d4:00:e9:59:ed:b6:aa:f6:a0:1e:99:85:18:e2:63:
                    2e:78:d0:39:e7:54:ac:f0:17:08:c9:74:42:09:59:
                    ac:a5:c3:14:cf:24:1e:e0:01:a5:40:1e:7d:37:81:
                    1d:57:c4:40:38:1a:39:75:68:ff:f5:f7:03:32:c8:
                    d2:1b:65:81:5d:0c:9c:59:9f:ed:31:fd:1e:69:b6:
                    a4:5a:1a:44:a0:4d:3b:df:b6:26:88:5c:f0:a2:89:
                    44:30:89:92:33:15:3c:58:98:b0:7e:63:99:47:53:
                    a2:7e:c1:33:7c:7a:f8:cd:6a:47:38:51:06:c6:b5:
                    69:6b:1f:6d:21:fc:ec:3b:b1:22:da:4d:ba:21:3e:
                    9c:3d:33:93:40:f7:1b:15:2b:41:8a:96:a2:84:7b:
                    08:1d:53:02:df:8e:82:54:4a:53:2e:60:c0:72:e2:
                    df:ee:7b:19:74:1e:f6:42:bb:67:28:0f:89:61:2c:
                    2e:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CB:0B:4B:86:33:25:4B:64:DC:5B:A5:2E:62:C2:1F:2B:F2:B2:80
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/37c413f5-3a98-401d-9f0a-a3f221857e50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/37c413f5-3a98-401d-9f0a-a3f221857e50/a270232b8c133bf837c7d6af508613a05b5a58e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.228.0/23
                IPv6:
                  2803:e850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64155

    Signature Algorithm: sha256WithRSAEncryption
         71:8f:39:5b:e4:41:e0:18:4a:75:95:61:1b:99:9e:41:23:dc:
         42:3d:50:19:91:ec:51:03:0d:87:df:e0:2e:a1:c5:bf:18:f2:
         78:44:1e:19:92:be:6c:be:83:90:05:17:60:a1:f8:ed:2e:da:
         db:50:ce:c7:0b:8b:59:c6:2e:87:d6:5d:de:5c:46:5b:fd:11:
         2e:01:07:79:7b:b9:f1:ac:10:b4:0a:d9:a2:71:a2:ed:61:0c:
         4d:0e:a3:45:fe:44:79:b1:4e:d7:11:bd:89:5b:04:d5:43:85:
         85:9e:aa:04:0e:51:28:dc:45:1a:6b:3e:74:23:22:1b:70:de:
         44:47:2b:99:4d:ef:45:fb:ae:81:ad:31:1d:50:6a:20:34:a2:
         2f:8b:72:1c:8d:a3:58:4b:79:73:2c:dd:99:58:bb:8b:3e:70:
         0a:88:41:ec:d5:01:c4:3f:f8:0b:a5:1b:59:9b:8a:38:1b:86:
         85:16:ef:ff:ba:e9:4b:de:4c:1a:eb:ed:0e:14:2f:a3:80:9f:
         1b:3e:da:db:81:5d:6d:8b:9c:7b:97:7b:95:4f:d3:8a:ad:96:
         f6:e9:b7:ec:b5:20:26:73:bf:e9:ef:86:11:7d:82:49:f3:59:
         48:08:88:f9:ad:8c:79:19:3e:86:f3:17:a0:0c:ff:1d:f2:4c:
         93:48:75:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----