Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b305b0510a357c96833ef9719f32f57509eced6f.cer
File:                     b305b0510a357c96833ef9719f32f57509eced6f.cer (raw, json)
Hash identifier:          6n2hHtesN2pf6wN4FlhD6spHqIPAowmJfA+qoBiM8dY=
Subject key identifier:   FB:15:FF:8B:07:68:40:9F:1B:2B:FD:E6:F6:1D:B0:E8:01:59:A8:37
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010772C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43d7d541-38f0-46c1-abb1-81ae4805685f/b305b0510a357c96833ef9719f32f57509eced6f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43d7d541-38f0-46c1-abb1-81ae4805685f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 22:59:21 +0000
Certificate not after:    Thu 24 Apr 2025 03:36:46 +0000
Subordinate resources:    AS: 270118
                          IP: 201.159.44.0/22
                          IP: 2806:3bd::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17265347 (0x10772c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 18 22:59:21 2024 GMT
            Not After : Apr 24 03:36:46 2025 GMT
        Subject: CN=b305b0510a357c96833ef9719f32f57509eced6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b8:19:78:08:81:a0:17:7b:07:3c:92:94:5f:
                    4a:42:02:96:0c:09:23:c5:50:1f:57:6c:e8:f8:0a:
                    39:d8:44:a3:68:26:69:3f:38:11:56:fc:23:f5:56:
                    59:70:40:45:14:16:5e:00:2f:62:41:97:6c:cb:b2:
                    c5:0f:1c:5a:e8:56:24:f9:b4:17:3d:a6:fd:e7:a4:
                    b5:cf:9d:21:66:e8:fa:83:e9:f3:ca:97:fe:e1:e5:
                    4b:90:15:d8:ae:7c:cd:e2:09:38:6e:48:5d:58:50:
                    72:76:82:cc:ae:2e:66:a5:e9:0d:8d:d3:63:4a:09:
                    09:a4:81:52:08:4f:15:0b:48:66:ff:c6:1a:fb:7d:
                    64:0b:da:36:7c:45:ae:51:4e:6b:c2:be:b5:86:fe:
                    65:a3:05:e7:64:d5:d9:6e:65:65:e0:15:1a:e9:7c:
                    39:16:3c:21:dc:f0:ae:8e:7d:78:2b:cd:f2:bc:14:
                    56:8a:a9:da:52:aa:3c:df:12:5d:66:5e:a2:d7:b6:
                    cc:42:6a:3f:0b:a2:f8:79:77:6f:30:6b:6c:1d:e9:
                    8b:95:2e:f5:1e:25:98:2c:a9:81:a9:ac:2f:26:73:
                    e2:71:88:af:cb:e4:13:fe:ed:ff:bb:09:31:09:76:
                    89:ed:5a:ac:c0:fb:ad:67:f8:30:89:07:84:17:84:
                    90:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:15:FF:8B:07:68:40:9F:1B:2B:FD:E6:F6:1D:B0:E8:01:59:A8:37
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43d7d541-38f0-46c1-abb1-81ae4805685f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43d7d541-38f0-46c1-abb1-81ae4805685f/b305b0510a357c96833ef9719f32f57509eced6f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.44.0/22
                IPv6:
                  2806:3bd::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270118

    Signature Algorithm: sha256WithRSAEncryption
         88:8a:35:e8:6f:38:83:b2:00:ec:02:2c:f5:07:9b:bf:f6:30:
         a6:90:76:7b:ab:85:39:93:1b:62:96:f4:bc:e6:20:81:ab:a4:
         f8:4a:e2:cf:fd:1b:d4:5b:cb:84:32:b4:70:eb:b6:56:1f:6a:
         92:f0:c3:f4:b2:83:34:52:45:a7:0e:ea:0e:00:27:c5:30:81:
         0e:51:9c:18:54:0c:b3:9d:91:ed:70:7e:92:21:43:c3:28:98:
         08:22:59:a4:e7:75:4c:21:7c:94:aa:56:63:24:f9:63:8f:3e:
         9f:5f:ee:23:a5:73:63:2b:35:09:04:aa:a6:8a:7b:d0:73:3d:
         b5:42:f0:40:f2:21:62:3d:5e:90:5a:a4:55:50:7b:0f:13:6c:
         16:0b:ff:34:ab:8c:a5:73:14:1c:86:f8:99:1c:0a:1e:0f:f6:
         1a:c8:e5:86:07:ae:fc:c1:83:1b:a1:09:7a:4e:39:a7:ec:09:
         05:d7:55:15:a2:dc:3c:46:d1:f5:2b:08:2d:b4:06:61:16:83:
         5a:f0:a8:2b:9a:11:a2:fe:18:21:1c:a8:37:15:56:e0:e1:1f:
         1e:13:35:34:42:59:5f:3a:b4:85:2a:f2:68:fe:e4:69:a3:d7:
         7a:0f:69:8c:d1:83:67:92:c9:c5:74:85:0d:d8:ef:19:55:cf:
         0c:3f:72:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----