Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7200b34be7647ebd9d885def6fa03cf6faaf2ed.cer
File:                     a7200b34be7647ebd9d885def6fa03cf6faaf2ed.cer (raw, json)
Hash identifier:          66MBR8TGECEKKKSUeR8sRge1bRvf2VCz+MdPkeIis8k=
Subject key identifier:   3D:F1:05:FB:05:3D:B7:99:AB:A8:D0:99:83:5D:B3:22:E1:73:B9:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF88D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50443928-d8ea-46e7-a73f-7c71bae5743b/a7200b34be7647ebd9d885def6fa03cf6faaf2ed.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50443928-d8ea-46e7-a73f-7c71bae5743b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:24:01 +0000
Certificate not after:    Fri 06 Dec 2024 13:17:55 +0000
Subordinate resources:    AS: 273683
                          IP: 45.238.48.0/22
                          IP: 2804:8aa4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16746707 (0xff88d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:24:01 2023 GMT
            Not After : Dec  6 13:17:55 2024 GMT
        Subject: CN=a7200b34be7647ebd9d885def6fa03cf6faaf2ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:d2:9e:d9:d6:73:ed:a6:76:42:ea:24:54:56:
                    33:8b:2f:4b:44:95:d8:0d:75:56:bb:98:3c:5f:c2:
                    a4:76:d8:c7:84:eb:d7:a9:4a:30:5e:3f:62:d8:24:
                    16:11:3f:c2:55:b6:a6:a4:c0:38:71:9d:f6:6e:2a:
                    af:cc:ce:9a:65:41:73:76:2e:5d:55:2a:0c:1c:c9:
                    b3:b1:96:29:5c:4e:5e:ab:01:19:12:82:7e:4a:94:
                    4e:fc:50:5c:65:6a:27:22:b5:70:c4:f4:bb:24:40:
                    4a:bd:2c:a7:fa:4c:27:37:4c:a7:ed:93:7f:9c:b0:
                    20:5d:c5:cb:d3:5a:f9:bc:1c:49:9e:73:8d:4c:50:
                    cb:3d:32:a2:0f:c7:bf:a9:b4:7b:58:52:ff:99:77:
                    2b:8c:e9:34:50:6f:ca:29:db:6a:eb:b2:52:33:8b:
                    c4:a6:f0:3f:95:7f:2f:01:e0:18:a5:9e:ac:fd:a9:
                    90:87:63:9e:ab:fb:9f:5f:94:3f:33:32:ad:3a:ac:
                    8d:5c:ac:84:d9:64:ec:a8:a7:5a:92:a6:63:3a:14:
                    de:17:97:21:27:b8:0b:8d:76:5e:23:8c:f7:4b:53:
                    fa:1c:71:e8:89:25:e7:64:c6:0e:9b:60:97:c7:17:
                    ef:7b:37:77:f7:ce:85:64:23:93:63:5e:9d:38:aa:
                    7f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F1:05:FB:05:3D:B7:99:AB:A8:D0:99:83:5D:B3:22:E1:73:B9:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50443928-d8ea-46e7-a73f-7c71bae5743b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50443928-d8ea-46e7-a73f-7c71bae5743b/a7200b34be7647ebd9d885def6fa03cf6faaf2ed.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.48.0/22
                IPv6:
                  2804:8aa4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273683

    Signature Algorithm: sha256WithRSAEncryption
         8d:fa:66:57:7a:2f:00:71:c2:83:4c:bf:67:57:cd:4b:fc:6f:
         ea:e4:ac:1d:43:07:02:42:95:ce:ed:9a:03:69:38:83:a2:50:
         0f:74:ca:a4:68:53:18:da:29:aa:90:d2:bf:d4:1c:45:bc:8d:
         bb:8c:17:82:b2:f0:72:4c:23:fc:aa:1d:1b:5c:88:5c:69:dc:
         6e:83:7e:54:53:83:f4:97:6e:9c:0b:21:46:8f:0f:33:eb:29:
         87:af:9b:ec:40:9d:97:3b:2f:b8:58:3e:ec:5c:f4:d8:b3:07:
         21:e7:6e:5c:c4:2a:be:6a:b4:06:90:5b:e8:87:7a:5d:3a:68:
         35:4f:9a:16:22:ef:68:fd:d6:9c:67:b1:b1:a1:c3:15:c2:14:
         bd:61:33:84:88:51:4d:87:70:ab:8b:d8:8b:cb:e4:9a:96:93:
         ed:42:a4:a3:e8:20:41:72:c1:ec:99:48:c1:64:fe:ce:60:a2:
         f4:2a:ac:af:34:5c:2b:e5:8e:b0:ea:06:0e:42:a1:ed:b6:58:
         12:a4:3d:37:24:7a:97:9e:e5:78:10:33:b3:66:b6:e1:e1:20:
         02:20:9e:5b:78:c4:94:fd:29:0e:8b:11:28:1c:28:53:dd:40:
         eb:c5:37:1e:c8:bd:02:0f:9c:c9:6d:a9:e9:f2:48:01:2b:72:
         a2:e1:83:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----