Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a515f3deed148bd93535c46d07e413ea6586a83e.cer
File:                     a515f3deed148bd93535c46d07e413ea6586a83e.cer (raw, json)
Hash identifier:          YXRpfQTt4djfvL+WFEYS98PnKvcldZUpqlos6PBcZNA=
Subject key identifier:   D4:CB:45:3A:65:BC:36:CC:DE:0C:C9:AF:34:91:45:E5:81:44:51:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC55B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/a515f3deed148bd93535c46d07e413ea6586a83e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 19:56:03 +0000
Certificate not after:    Tue 11 Feb 2025 02:51:45 +0000
Subordinate resources:    AS: 28428
                          IP: 45.174.44.0/22
                          IP: 2806:325::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16537009 (0xfc55b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 19:56:03 2023 GMT
            Not After : Feb 11 02:51:45 2025 GMT
        Subject: CN=a515f3deed148bd93535c46d07e413ea6586a83e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:5e:6a:c4:4c:08:ab:a6:ed:97:dc:22:03:02:
                    9a:61:4b:2c:00:2a:cc:5d:e6:60:ba:83:a0:4d:1d:
                    f1:19:e1:84:94:04:3b:99:47:53:5c:1e:a0:60:8f:
                    86:71:de:87:6e:b2:d0:aa:90:39:c6:2d:7f:80:6a:
                    44:f0:de:20:4f:9e:36:c6:c6:23:4f:c1:ae:df:9f:
                    84:44:b2:3c:23:be:47:99:e1:98:57:0b:42:92:6f:
                    23:c5:b2:b3:01:9b:a7:9a:b1:bc:a7:f1:bb:50:2e:
                    b2:25:c7:e9:ca:5d:71:61:6d:0d:2c:d5:0d:21:37:
                    3c:87:1e:32:70:e0:b0:bb:53:b1:11:f0:ea:08:e0:
                    06:a4:a5:c4:a4:ce:f1:02:be:7a:f6:41:7a:6c:69:
                    c2:3f:ef:85:07:c2:db:25:f8:6b:c2:5d:3f:a3:26:
                    cc:19:80:d7:4b:68:0c:fc:64:34:93:f0:64:fd:35:
                    09:75:df:7e:b4:a0:38:f0:77:ad:75:95:b6:b2:6a:
                    10:11:fa:1f:ac:6a:23:5f:85:c6:25:79:14:58:fa:
                    69:db:11:3c:42:13:2e:19:52:fe:cb:85:39:a4:07:
                    e3:90:77:bd:af:db:91:da:0c:d5:c8:6a:8d:ac:b0:
                    f4:e8:72:b1:4e:e6:cf:71:01:45:9b:e0:4f:a4:93:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CB:45:3A:65:BC:36:CC:DE:0C:C9:AF:34:91:45:E5:81:44:51:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3dd467b6-3f64-4af7-8ee2-56066a526d40/a515f3deed148bd93535c46d07e413ea6586a83e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.44.0/22
                IPv6:
                  2806:325::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28428

    Signature Algorithm: sha256WithRSAEncryption
         aa:64:21:66:89:5c:9e:ee:cd:fd:91:49:04:75:62:f3:8a:c9:
         c6:4d:52:f2:36:8f:90:60:29:be:30:05:ac:48:5b:97:9b:77:
         3b:65:f7:dd:7f:21:09:8b:90:de:55:1f:af:cb:ac:c6:0c:e1:
         66:96:5a:28:99:aa:cd:f2:1d:91:64:ed:96:e5:ab:f5:ea:b5:
         70:fc:62:12:24:15:fd:40:7a:12:96:d9:87:a7:01:03:de:07:
         fd:c1:66:d4:55:e7:7c:8a:23:bc:aa:47:62:3f:4f:b6:16:3c:
         ae:f9:ec:e3:68:24:ca:e5:0d:d4:cb:66:35:d7:a8:86:3b:69:
         40:85:5c:da:3f:a7:db:4e:f9:c3:f5:b2:3f:49:71:6b:26:54:
         c3:32:18:03:fb:1b:96:c0:9c:4b:28:d9:c7:1a:fd:df:4e:a6:
         80:f7:13:26:5c:67:0f:16:63:83:fc:65:36:7d:45:28:d8:4e:
         03:e3:5d:29:fe:86:0f:3b:4f:16:d0:95:b9:c0:fd:44:9d:ee:
         ad:d1:1f:67:21:2a:2b:2b:4c:96:e9:08:04:88:6c:24:7a:fb:
         ec:a8:e7:da:a7:2e:1d:d0:27:15:20:57:6d:12:0a:c8:79:ab:
         4b:9a:f7:8e:ca:ae:c6:0f:b5:9f:4c:eb:a7:01:94:6e:a6:6c:
         74:4e:25:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----