Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad3ea5eaade120985d345db60696c92c8f089796.cer
File:                     ad3ea5eaade120985d345db60696c92c8f089796.cer (raw, json)
Hash identifier:          e/F8O3pQBaLs1+jCIYocSlFx7y8fLwbwxpXzU3s5t6A=
Subject key identifier:   A2:44:40:86:B9:2F:B7:5C:0D:9A:9E:52:AF:D2:AE:33:FC:48:3C:24
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01084AC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/84abc3c4-a2d9-486b-92cb-9bf0fc19453a/ad3ea5eaade120985d345db60696c92c8f089796.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/84abc3c4-a2d9-486b-92cb-9bf0fc19453a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:14:16 +0000
Certificate not after:    Sun 23 Feb 2025 12:50:39 +0000
Subordinate resources:    AS: 267420
                          IP: 45.235.160.0/22
                          IP: 170.231.208.0/22
                          IP: 186.209.123.0/24
                          IP: 186.209.222.0/23
                          IP: 2804:4d3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17320643 (0x1084ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:14:16 2023 GMT
            Not After : Feb 23 12:50:39 2025 GMT
        Subject: CN=ad3ea5eaade120985d345db60696c92c8f089796
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:cd:7c:cc:19:c0:6b:4a:83:e1:4b:ef:30:bd:
                    57:fa:c9:7a:81:9d:4d:4c:1a:42:1e:2a:ee:23:e3:
                    43:4f:06:f7:0c:b3:3e:39:5f:94:a7:31:58:16:20:
                    ca:46:dd:3d:01:0c:be:a0:d4:05:ae:99:f7:2c:3b:
                    07:72:08:1e:ff:a2:65:14:5f:2c:53:6f:95:3b:c9:
                    cd:da:2a:b2:ea:4e:6a:67:a6:bc:d9:cc:8e:7a:21:
                    a2:04:b1:c5:cb:f5:ec:61:f5:39:53:a4:f4:b9:dd:
                    56:a8:07:85:25:e2:47:b1:e5:33:50:83:1f:b0:40:
                    cb:e6:35:62:b4:a5:f6:7e:57:23:3a:47:5f:21:25:
                    73:3b:41:7b:31:86:4d:4e:34:b8:4a:db:42:32:a8:
                    19:2e:53:45:7f:3c:82:ad:36:37:57:f7:83:82:c8:
                    cc:80:15:43:1f:9e:23:95:af:1a:46:a2:bc:83:70:
                    45:21:ca:86:8c:8e:72:6a:c3:76:60:6f:12:91:10:
                    8f:60:bd:35:57:05:74:67:b0:0f:ac:05:86:63:13:
                    00:17:3c:a1:75:a6:dc:ec:c4:ae:3c:dc:ac:cf:33:
                    8a:15:5c:68:f0:fd:45:ae:ab:7e:33:1b:68:9d:df:
                    48:65:11:cb:39:a9:5a:9b:ab:5a:af:0e:5c:60:09:
                    d7:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:44:40:86:B9:2F:B7:5C:0D:9A:9E:52:AF:D2:AE:33:FC:48:3C:24
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/84abc3c4-a2d9-486b-92cb-9bf0fc19453a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/84abc3c4-a2d9-486b-92cb-9bf0fc19453a/ad3ea5eaade120985d345db60696c92c8f089796.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.160.0/22
                  170.231.208.0/22
                  186.209.123.0/24
                  186.209.222.0/23
                IPv6:
                  2804:4d3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267420

    Signature Algorithm: sha256WithRSAEncryption
         61:81:eb:90:cb:a7:d8:f3:2f:9a:5e:9a:7d:79:75:24:a1:68:
         57:12:17:35:1f:73:75:a0:72:f8:dc:fc:0c:12:8b:6d:ce:22:
         32:83:82:ed:6f:26:47:b6:f4:3f:f5:52:07:6b:b1:39:d1:f6:
         55:2c:47:f6:99:74:e8:ca:54:d4:ca:de:6e:59:3f:4f:6c:1b:
         ed:8c:0d:e8:3e:5f:29:98:e5:72:ef:0c:6d:67:4c:cf:8d:f7:
         38:69:43:8b:32:e2:05:23:56:e9:a6:e1:c1:9e:c8:53:14:36:
         8a:43:eb:39:6e:84:95:c8:3b:74:8e:26:cf:c1:8e:bf:2e:dc:
         1e:0b:73:d0:93:a5:90:ac:b6:02:ab:b6:0d:60:3e:98:48:59:
         c4:c9:56:2f:5c:3a:37:ee:b4:7e:c4:3a:28:8f:bf:b5:06:51:
         1e:ee:a9:d3:bd:64:5d:42:a0:ac:9c:1d:c3:8e:48:59:08:42:
         32:37:29:be:cc:d2:83:44:63:70:f3:c3:c1:9c:14:ce:9d:9d:
         a9:21:fc:19:95:ff:38:63:a9:01:50:99:31:c7:41:94:80:c1:
         8a:1f:b8:f6:38:4f:aa:57:87:12:18:28:cd:fa:f2:3e:70:60:
         b3:90:15:d0:b4:48:36:b2:9f:01:5c:a5:8b:32:7e:5f:70:f5:
         c2:5a:27:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----