Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa57a383173530360cf22838ad647557dc0663d4.cer
File:                     aa57a383173530360cf22838ad647557dc0663d4.cer (raw, json)
Hash identifier:          NKXQoahiO3nX82amRZ4dtugQuAZ+1As2JnJ1I9vjyEc=
Subject key identifier:   D8:E2:65:E9:7D:6E:43:01:1B:CD:B2:B2:54:CB:0C:90:43:38:F3:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECAE0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/055206e2-1a15-4ae2-9779-eacd3e9ce2f4/aa57a383173530360cf22838ad647557dc0663d4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/055206e2-1a15-4ae2-9779-eacd3e9ce2f4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 11:16:44 +0000
Certificate not after:    Thu 03 Apr 2025 16:06:43 +0000
Subordinate resources:    AS: 52259
                          AS: 264674
                          IP: 168.181.44.0/22
                          IP: 186.65.80.0/22
                          IP: 190.108.192.0/22
                          IP: 2800:8d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15511052 (0xecae0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 11:16:44 2023 GMT
            Not After : Apr  3 16:06:43 2025 GMT
        Subject: CN=aa57a383173530360cf22838ad647557dc0663d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:7e:86:6b:21:57:50:a2:9c:5b:dd:0f:44:75:
                    67:b4:8c:cc:10:3b:22:7c:8e:99:7e:13:5d:dc:1e:
                    b2:fc:25:68:88:e1:07:d8:47:78:6f:b2:d5:30:7e:
                    6f:cc:2b:d9:6d:2b:78:41:61:e2:0e:a7:e3:62:d8:
                    26:32:f3:18:89:c2:ff:b7:68:fd:36:c0:24:4c:2f:
                    77:18:ea:61:8f:9f:94:b2:e8:e1:7f:d5:aa:e0:28:
                    16:51:db:df:19:5c:ad:d6:33:c1:e0:f6:31:c3:48:
                    20:37:aa:a7:29:ce:d9:1f:74:a2:be:b8:2d:33:e8:
                    aa:dc:08:d0:58:9b:f2:cc:d4:18:d8:03:da:6b:fa:
                    e8:5a:9f:5e:5d:4a:9a:b1:6f:e5:0e:ea:ec:a0:87:
                    34:53:c1:d7:0e:ce:e5:2c:71:04:66:da:4a:94:a0:
                    79:a4:6f:56:f2:a9:ad:1f:18:cd:72:c2:15:a3:0c:
                    e2:28:60:09:61:89:b3:76:c9:f5:a0:aa:b8:ee:c7:
                    f3:2b:47:ef:45:5a:b3:a8:5a:40:a9:55:2f:70:33:
                    ce:94:63:39:5e:c3:8f:c1:e6:c7:2e:99:24:36:6d:
                    38:a3:77:8a:a3:f4:0d:72:ee:4e:19:0d:c4:38:e8:
                    52:8e:13:ec:6f:35:bd:26:e2:c1:ee:6f:b1:88:0a:
                    88:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:E2:65:E9:7D:6E:43:01:1B:CD:B2:B2:54:CB:0C:90:43:38:F3:89
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/055206e2-1a15-4ae2-9779-eacd3e9ce2f4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/055206e2-1a15-4ae2-9779-eacd3e9ce2f4/aa57a383173530360cf22838ad647557dc0663d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.181.44.0/22
                  186.65.80.0/22
                  190.108.192.0/22
                IPv6:
                  2800:8d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52259
                  264674

    Signature Algorithm: sha256WithRSAEncryption
         98:0d:f0:3d:c0:e6:5a:df:80:5f:22:3d:ab:32:1d:2f:23:01:
         d1:fd:ff:b7:20:43:53:1a:c2:55:49:bc:bf:71:e1:bc:19:61:
         1f:42:8b:4e:5a:4c:de:c8:f0:23:88:f9:69:14:46:27:65:d2:
         1a:ef:7a:bb:e7:00:be:06:12:64:0f:22:60:86:a9:b4:8e:d2:
         a2:fe:7c:9f:4d:a0:96:75:f2:3c:eb:a5:5e:06:54:ea:a0:55:
         7e:ad:8d:73:0b:78:36:02:87:83:bb:8f:59:36:b2:39:0a:da:
         e4:91:63:36:e2:5b:40:24:b7:c2:46:82:8a:ae:9f:6f:98:ab:
         2d:f6:ea:29:59:03:24:b6:ff:14:8b:2f:9f:9d:2a:9b:15:91:
         8a:7e:d6:df:a6:03:35:b7:09:bb:74:7a:e2:45:ff:c3:b6:a7:
         80:c2:9e:4b:3d:65:0b:02:3d:28:87:19:6e:95:28:e8:17:64:
         32:9d:6c:12:58:76:10:88:75:f9:75:55:c6:cb:2c:96:a8:46:
         ab:25:e5:10:cd:20:c8:7f:f4:f8:7a:da:d7:b2:95:05:71:39:
         b9:98:a4:2f:f4:5f:70:c8:d4:ea:85:65:e3:05:e4:3d:77:8a:
         40:37:6b:52:8c:9f:77:9a:a9:87:e0:24:de:b5:5c:2b:5f:e7:
         6a:36:d3:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----