Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a94476d1897af32d02ad132c5ac7918ba3d6e754.cer
File:                     a94476d1897af32d02ad132c5ac7918ba3d6e754.cer (raw, json)
Hash identifier:          oJn9ebicXBtQ4kjsuUZbIqttFFFtsJF92PQ5CCoyAxA=
Subject key identifier:   29:C0:05:0D:60:6B:41:E1:56:20:EF:45:B0:66:94:7B:BC:07:E2:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C6FF5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eec598ea-d48c-4c6d-9a07-c5a7b7ee988e/a94476d1897af32d02ad132c5ac7918ba3d6e754.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eec598ea-d48c-4c6d-9a07-c5a7b7ee988e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Mar 2024 16:26:23 +0000
Certificate not after:    Thu 25 Dec 2025 19:16:18 +0000
Subordinate resources:    AS: 272077
                          IP: 189.84.52.0/23
                          IP: 2803:6b10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17592309 (0x10c6ff5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  1 16:26:23 2024 GMT
            Not After : Dec 25 19:16:18 2025 GMT
        Subject: CN=a94476d1897af32d02ad132c5ac7918ba3d6e754
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:17:d3:5c:92:1f:5c:f9:07:69:8b:33:f3:df:
                    c9:33:52:46:8a:d1:7b:13:5b:7a:6b:2d:45:bc:07:
                    04:39:eb:85:28:0e:b4:e4:bb:37:15:4e:20:c7:62:
                    52:4f:94:53:85:0c:0e:f1:df:54:3a:8a:50:e6:b2:
                    80:cd:d1:90:fe:1c:c2:ae:a3:71:91:65:90:69:e2:
                    c2:54:b2:e6:b3:42:53:a3:aa:ed:10:4a:85:6f:64:
                    18:c2:25:09:26:fe:81:46:38:51:36:c3:9b:e9:be:
                    a8:2c:2a:71:80:96:39:22:3c:e6:de:f2:4a:c9:1e:
                    0c:06:65:3e:85:40:14:c5:f3:ba:87:d6:14:8e:b7:
                    0d:c1:86:0a:9a:66:c6:68:0c:ab:98:17:64:44:28:
                    77:85:82:d6:b5:0b:c7:b6:c3:5d:10:c8:44:e5:15:
                    20:ba:d9:3c:0d:b8:93:fe:84:b8:64:31:0e:59:38:
                    3d:bc:0a:01:81:e7:18:c0:bb:ed:27:81:ff:e7:fb:
                    66:44:7d:8a:67:9e:79:cd:0f:4d:31:72:36:cd:d1:
                    a9:53:2e:20:14:cc:99:ed:a5:56:fd:ba:a2:ed:9a:
                    1d:6e:cf:84:13:73:ff:e7:7c:c6:3b:db:91:aa:08:
                    7f:bc:d6:36:f2:c0:3d:58:89:4b:d1:b1:62:f5:5d:
                    85:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:C0:05:0D:60:6B:41:E1:56:20:EF:45:B0:66:94:7B:BC:07:E2:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eec598ea-d48c-4c6d-9a07-c5a7b7ee988e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eec598ea-d48c-4c6d-9a07-c5a7b7ee988e/a94476d1897af32d02ad132c5ac7918ba3d6e754.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.84.52.0/23
                IPv6:
                  2803:6b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272077

    Signature Algorithm: sha256WithRSAEncryption
         15:bf:86:f3:47:63:f3:a8:54:e3:57:ac:2e:15:bf:89:0f:78:
         66:89:f6:08:85:7c:d0:87:44:79:9f:41:27:87:49:1c:4e:0c:
         52:7c:b2:13:d8:ca:c0:e3:2d:40:86:ab:83:40:23:b4:0a:eb:
         27:9c:cb:93:67:90:2b:c3:00:f1:af:bf:76:e6:94:4d:d6:4e:
         fd:11:2f:87:59:38:dd:53:69:89:2c:de:a5:78:1f:4d:3d:f8:
         9a:85:52:ca:a8:c7:bc:d2:e4:98:d5:8b:39:dc:96:2e:cd:67:
         e9:6b:2c:21:9f:83:51:31:1d:78:0f:78:ff:78:e1:43:cf:19:
         2f:e9:45:48:d4:90:fa:d1:70:38:77:b7:b4:23:12:e0:1a:0e:
         ad:1c:75:f9:64:4a:64:48:80:8f:32:2c:3f:ec:03:5d:65:9d:
         ba:2a:fe:f9:f2:09:c7:bb:e1:10:ca:c8:fa:c8:82:55:50:18:
         08:52:bd:6b:e1:fa:f9:51:04:28:2f:42:54:e6:8c:bf:20:33:
         e1:dc:2a:cc:90:bb:76:6b:67:4a:d8:7f:97:b2:20:67:e1:e1:
         47:99:5c:fc:ae:e3:7e:76:67:3f:13:61:3d:ad:f2:69:94:51:
         ab:98:31:8f:0b:f7:d1:08:0b:d9:7a:ea:21:73:8f:73:4e:9d:
         2f:6b:a6:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----