Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad8c36c507af96fcaa01a28345aaa933b573ddf3.cer
File:                     ad8c36c507af96fcaa01a28345aaa933b573ddf3.cer (raw, json)
Hash identifier:          gZDqK4vUFydDT69vhB4nN5Juch3WyTde+uJEbS40czk=
Subject key identifier:   D4:49:1F:85:6A:DF:B2:A7:F8:A7:E1:57:19:71:BF:35:5C:38:0A:47
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01069C9D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/ad8c36c507af96fcaa01a28345aaa933b573ddf3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 Jan 2024 17:25:56 +0000
Certificate not after:    Tue 21 Oct 2025 16:02:50 +0000
Subordinate resources:    AS: 64157 -- 64158
                          AS: 273149 -- 273150
                          IP: 45.68.48.0/22
                          IP: 2801:155::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17210525 (0x1069c9d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 11 17:25:56 2024 GMT
            Not After : Oct 21 16:02:50 2025 GMT
        Subject: CN=ad8c36c507af96fcaa01a28345aaa933b573ddf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:96:72:e3:b0:36:91:9e:08:d8:9b:f7:68:2b:
                    4f:fb:ff:a7:29:15:f7:2a:44:3c:71:c6:d3:45:75:
                    38:a5:32:92:c4:ad:e3:84:f8:c2:de:cf:96:c9:15:
                    4e:47:de:05:c4:58:df:8d:9f:a8:66:71:ce:a1:4e:
                    4b:8f:b8:d3:93:6b:ee:dc:d8:c1:b6:6e:dd:c6:8d:
                    89:6b:98:f5:79:08:e1:a8:7a:75:6f:6e:c0:dd:d4:
                    1d:aa:75:5f:53:92:04:3a:6e:c2:5f:b1:7b:d1:29:
                    b1:d6:54:3c:6f:97:be:0c:57:0e:aa:66:34:48:0a:
                    43:70:2b:e6:bd:50:da:14:5a:8e:1d:a0:0d:10:3d:
                    38:52:78:b0:72:6d:3b:91:f0:7c:48:34:3a:e0:76:
                    d3:9a:e6:eb:68:ca:e2:e9:e6:3d:23:bd:0e:84:65:
                    a0:4c:79:f3:4f:a3:35:7c:9c:78:4a:c0:d1:17:8e:
                    99:5b:10:2a:85:92:32:12:9d:4e:e3:3d:d3:58:69:
                    5b:35:7d:fd:0a:eb:f5:ea:a5:b4:b1:4f:ea:1f:aa:
                    cd:1f:df:57:dd:eb:2e:86:db:70:40:e3:86:31:1a:
                    db:50:79:99:47:0d:ed:60:99:e5:1a:66:5a:5a:01:
                    a4:6f:f3:75:94:eb:4a:52:b4:00:c8:45:6a:f0:1c:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:49:1F:85:6A:DF:B2:A7:F8:A7:E1:57:19:71:BF:35:5C:38:0A:47
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f9e55010-a0a6-4231-8a0a-d612bd9b9ddf/ad8c36c507af96fcaa01a28345aaa933b573ddf3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.48.0/22
                IPv6:
                  2801:155::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64157-64158
                  273149-273150

    Signature Algorithm: sha256WithRSAEncryption
         63:04:97:36:36:32:36:df:2e:18:43:e1:da:19:2d:90:81:13:
         5c:8b:db:27:ff:f7:78:1e:cc:d8:52:f4:31:f6:b0:88:69:97:
         45:48:9d:d2:b9:6f:27:42:c6:71:4d:04:2a:87:98:a8:7a:22:
         e1:84:16:f6:c4:d8:61:22:03:c3:e5:22:18:50:90:9d:72:79:
         65:b5:a5:02:2b:f2:14:b9:c5:40:d8:97:d7:0e:c4:69:d5:f1:
         95:2c:88:20:fe:c5:5e:00:8c:59:20:e7:5d:aa:6a:97:15:4e:
         13:c4:43:98:3d:0b:83:23:b9:de:81:91:e2:d3:3e:b6:f0:2c:
         7f:66:63:bf:f3:b1:51:0a:b9:b5:ad:42:0b:2f:40:73:26:5a:
         0e:90:04:4d:37:eb:61:70:77:7f:9b:d4:d2:19:1c:62:50:fb:
         6b:f9:60:e9:34:8f:13:f2:21:a3:eb:e2:e3:f8:99:a9:66:88:
         b3:4b:be:19:bd:9d:d0:19:19:50:36:df:3d:64:5e:fb:a0:f1:
         a7:72:a9:60:0c:3a:51:24:d8:ea:1f:4c:42:be:0d:fa:99:3e:
         5b:85:43:76:b4:47:d6:a9:a0:d8:eb:1a:c3:43:af:d4:9e:65:
         48:08:44:43:cf:39:69:93:f2:88:d2:61:79:33:95:75:93:a1:
         79:02:df:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----