Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68b15b9a0fd39440e56c398be6affb3ac5cfda0.cer
File:                     a68b15b9a0fd39440e56c398be6affb3ac5cfda0.cer (raw, json)
Hash identifier:          daK/t0UgeNQtOyjKAKa2J0JPkte33LM7WpZrCx6risc=
Subject key identifier:   3A:5C:39:47:A6:83:92:8D:05:AC:CE:56:5D:DB:89:13:8C:89:A4:41
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF419A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/59ce2d5b-8be9-49ac-af52-dcb0884c0fb2/a68b15b9a0fd39440e56c398be6affb3ac5cfda0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/59ce2d5b-8be9-49ac-af52-dcb0884c0fb2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:13:54 +0000
Certificate not after:    Tue 07 Jan 2025 13:13:17 +0000
Subordinate resources:    AS: 268763
                          IP: 45.172.104.0/22
                          IP: 2804:5a4c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16728474 (0xff419a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:13:54 2023 GMT
            Not After : Jan  7 13:13:17 2025 GMT
        Subject: CN=a68b15b9a0fd39440e56c398be6affb3ac5cfda0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:67:be:6e:c9:12:99:98:d8:8d:16:0d:a7:a0:
                    17:55:32:3c:cc:b7:d4:8e:b5:ac:5a:3d:7c:1a:af:
                    71:08:93:79:32:3f:27:82:23:4e:eb:8c:9a:db:88:
                    c0:06:75:6d:39:75:19:81:95:f8:2e:2c:bc:d7:a9:
                    8b:b0:f4:0d:e9:16:b4:16:5e:17:41:1b:17:26:5b:
                    b9:3c:a4:13:3b:1e:eb:6d:5a:26:bb:d0:e9:bc:b6:
                    8e:9e:97:93:c0:98:24:05:fb:7d:9d:cc:f1:84:22:
                    ef:43:9d:e8:24:73:d0:86:ff:63:cb:fa:02:a8:a3:
                    24:7a:f2:e9:84:2e:02:ed:22:b3:71:c6:f5:74:99:
                    9e:34:ee:cf:0c:6b:f9:41:f8:22:14:d3:35:61:8c:
                    a3:28:07:90:2a:6a:63:d5:81:30:23:7f:e1:ec:3f:
                    2d:3f:18:85:d6:bc:18:ee:ff:f9:1c:16:97:2e:09:
                    93:d7:c6:ec:c4:e8:dd:e3:b3:17:ed:27:2c:62:1e:
                    fc:67:6b:1b:42:60:4a:19:a0:82:22:71:5e:1a:9b:
                    0e:95:3c:61:09:99:8f:4c:67:1e:a3:33:c9:e3:25:
                    1e:a7:c2:4b:58:b6:c7:20:9c:20:61:6c:35:8c:be:
                    9c:82:f1:ca:8e:dd:49:cc:ff:a0:af:fe:a8:c1:52:
                    3a:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:5C:39:47:A6:83:92:8D:05:AC:CE:56:5D:DB:89:13:8C:89:A4:41
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/59ce2d5b-8be9-49ac-af52-dcb0884c0fb2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/59ce2d5b-8be9-49ac-af52-dcb0884c0fb2/a68b15b9a0fd39440e56c398be6affb3ac5cfda0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.104.0/22
                IPv6:
                  2804:5a4c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268763

    Signature Algorithm: sha256WithRSAEncryption
         18:f2:54:78:72:a0:e4:98:3d:db:ad:05:1c:b9:00:51:80:2d:
         45:fd:1f:06:7b:0d:84:5d:a0:c9:3b:cb:28:52:f3:c3:bb:68:
         ff:4d:ef:39:02:09:1e:b4:d8:d0:d0:64:60:87:26:37:c5:74:
         9d:36:65:e1:90:ca:97:9a:59:da:33:eb:2b:68:a0:c5:ad:9e:
         0f:5a:e3:f3:b0:10:16:b7:e3:cd:a3:5c:ba:33:10:21:92:0b:
         61:bc:21:69:bc:53:34:e1:5c:c1:1a:96:80:3f:f6:15:56:62:
         bf:df:22:84:31:07:7c:98:e7:39:97:7d:64:15:c3:05:be:5e:
         21:9d:32:a3:b1:b4:76:95:1f:ca:14:34:e1:fc:b9:2f:00:b2:
         7c:f4:df:50:5c:b9:98:1c:8b:cc:dc:85:a7:33:f3:27:35:be:
         8f:aa:6e:47:83:9f:1f:be:9f:94:44:38:41:69:33:4f:53:f0:
         b0:47:b1:cf:29:6f:a3:9a:7e:a9:e0:3f:af:a3:a1:62:5f:ad:
         13:67:ff:97:2e:66:a3:8d:df:da:ee:28:f7:c7:da:84:f1:16:
         7e:66:35:15:e1:99:23:cd:b6:50:5c:94:29:64:41:de:f5:19:
         7a:de:da:cb:40:36:3f:ed:19:27:c4:ea:ab:70:e0:4a:28:60:
         7d:75:66:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----