Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4eaf76bf89399e5f672ead0c362c73c25cf3c34.cer
File:                     b4eaf76bf89399e5f672ead0c362c73c25cf3c34.cer (raw, json)
Hash identifier:          9rHSSZzrF77lSTWmMWbbYtlhgvzfsdcdhsO2DUumJzI=
Subject key identifier:   D9:1B:41:5D:9A:1A:4E:F7:20:58:D9:F3:E4:4B:A7:01:EA:AB:D5:76
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3E34E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5e9cf318-1472-47c2-a816-b2fefa4eea72/b4eaf76bf89399e5f672ead0c362c73c25cf3c34.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5e9cf318-1472-47c2-a816-b2fefa4eea72/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 Aug 2023 20:38:37 +0000
Certificate not after:    Thu 17 Oct 2024 11:47:01 +0000
Subordinate resources:    AS: 265614
                          IP: 45.190.76.0/22
                          IP: 2806:36b::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15983438 (0xf3e34e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  3 20:38:37 2023 GMT
            Not After : Oct 17 11:47:01 2024 GMT
        Subject: CN=b4eaf76bf89399e5f672ead0c362c73c25cf3c34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ce:d3:96:5c:65:33:0c:ab:94:ce:4f:4b:d1:
                    0f:1a:e0:77:b2:ad:63:9d:eb:06:55:81:fa:06:cc:
                    52:9b:b0:ac:6a:6f:9e:60:50:d5:2e:f5:2a:3d:27:
                    75:45:e7:7b:c1:21:af:e2:3c:1e:37:c4:8a:2c:ef:
                    ff:ce:44:3a:85:eb:3a:de:6d:4f:6c:da:8c:61:e2:
                    6b:15:b4:47:3a:c0:01:70:bc:2d:5f:9e:61:44:76:
                    a4:5a:3e:8c:b5:9e:ee:6f:66:37:f4:85:05:b2:c7:
                    ed:f3:09:e3:03:57:5f:fc:da:66:10:76:e0:45:01:
                    18:02:de:bb:df:68:cf:d3:b8:c3:40:4f:7b:53:4a:
                    73:fe:98:e2:a8:16:03:4a:f8:ef:8d:0a:e6:ac:27:
                    02:e0:5e:5b:d6:99:b0:c4:aa:b9:4c:45:d0:80:72:
                    dd:f8:32:af:e6:74:c9:e0:41:db:ad:59:30:57:d1:
                    7d:eb:37:17:40:ef:91:58:26:ea:d9:31:3f:b2:d4:
                    3c:5e:ae:73:1b:20:57:a8:af:3c:c2:8b:b1:ac:23:
                    8a:19:c4:3a:03:79:a0:54:0e:c8:dd:3b:6b:1c:6f:
                    d4:ce:02:a4:82:34:8c:bf:f0:97:b5:aa:73:e4:8a:
                    f7:8c:70:16:f6:16:6f:65:d5:04:8b:e0:9a:8e:a9:
                    ec:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:1B:41:5D:9A:1A:4E:F7:20:58:D9:F3:E4:4B:A7:01:EA:AB:D5:76
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5e9cf318-1472-47c2-a816-b2fefa4eea72/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5e9cf318-1472-47c2-a816-b2fefa4eea72/b4eaf76bf89399e5f672ead0c362c73c25cf3c34.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.76.0/22
                IPv6:
                  2806:36b::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265614

    Signature Algorithm: sha256WithRSAEncryption
         88:43:65:d0:9f:5d:8c:91:df:49:0a:1f:a7:93:de:3e:f8:8b:
         6f:e5:23:df:bd:22:0c:6e:e8:ee:41:86:73:7d:da:43:61:ac:
         06:51:c8:66:48:9a:c4:cc:09:83:35:7f:f3:a2:34:2f:de:a0:
         ee:42:4f:fd:88:b4:62:7c:1d:89:01:b9:95:ed:f7:c6:7c:7b:
         c4:5a:34:79:c7:dd:8f:d7:62:fd:18:02:a2:7f:47:44:3b:14:
         2e:39:55:d5:d5:14:63:84:d1:cc:76:7e:57:ab:3b:a1:6a:96:
         82:8e:e5:7c:76:18:19:79:d2:a6:fb:34:1b:39:86:05:a2:66:
         b4:ea:11:23:bc:da:37:bc:98:54:04:80:18:6d:ce:95:69:29:
         c5:d1:0d:0c:ca:df:f5:35:7e:74:84:8a:48:e0:82:93:98:0e:
         44:53:08:44:c5:77:b2:fa:b5:e9:23:18:e8:47:55:86:cd:67:
         26:13:2a:86:59:91:6c:95:5d:ca:1b:59:57:ae:0e:ae:fd:22:
         37:19:f4:34:57:95:d7:b5:35:02:fa:3b:10:a4:59:76:12:7e:
         2f:ae:b5:89:98:e3:41:70:d8:fd:0a:15:f6:e9:5d:10:86:72:
         af:b7:da:f4:24:70:27:9e:56:dc:96:51:51:6a:be:2e:5b:4b:
         15:b3:ca:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----