Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9037487a3d8a6ff3f464f6372ea4051ea12ebcf.cer
File:                     b9037487a3d8a6ff3f464f6372ea4051ea12ebcf.cer (raw, json)
Hash identifier:          B8Yw8BOpp4XcGReev+vk50IxUvd7fhyqEEhMrTiRse0=
Subject key identifier:   D6:86:D7:7B:1A:46:21:6C:57:74:83:32:27:09:91:9C:25:8A:9A:FB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E49887
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2a4f22af-e5df-44c3-9d9d-31911b44a034/b9037487a3d8a6ff3f464f6372ea4051ea12ebcf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2a4f22af-e5df-44c3-9d9d-31911b44a034/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 15:33:33 +0000
Certificate not after:    Sun 19 Jan 2025 20:03:57 +0000
Subordinate resources:    AS: 52452
                          IP: 201.220.27.0/24
                          IP: 2801:17::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14981255 (0xe49887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 15:33:33 2023 GMT
            Not After : Jan 19 20:03:57 2025 GMT
        Subject: CN=b9037487a3d8a6ff3f464f6372ea4051ea12ebcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0c:0b:f3:ba:d3:69:6a:f2:fd:07:04:16:b3:
                    01:fb:1d:87:7d:c6:99:af:61:94:3a:05:56:a1:ab:
                    4d:2b:2b:22:1c:cc:61:b7:77:cc:47:8a:f8:bd:2f:
                    af:7e:98:a6:f3:f2:c2:d9:22:e4:d0:25:71:1b:84:
                    c8:36:5e:59:05:31:2c:3d:c5:0c:9b:e6:18:98:52:
                    43:0e:70:ed:07:76:11:77:be:2c:d2:6b:3b:0e:0b:
                    84:2e:00:ed:67:5e:bc:be:2b:e8:e4:ce:05:93:4e:
                    3d:4e:be:38:43:12:89:23:4c:e4:0f:90:95:1a:56:
                    ad:85:7d:53:f5:cd:5b:65:f8:bb:0b:3b:89:1e:17:
                    64:07:1c:94:79:2e:20:94:23:45:f8:0f:49:bf:ba:
                    e6:f4:7b:0f:2e:9f:40:81:19:0e:11:ac:26:9f:26:
                    e2:4b:82:c9:73:2c:a5:20:a5:5d:cc:d6:37:9e:21:
                    73:de:93:c1:a1:b2:6c:a4:81:c2:f9:35:2e:81:f2:
                    6e:8f:7a:8c:c4:88:d4:2b:cb:bc:b3:63:d8:3f:ce:
                    6d:04:99:4a:ca:5d:3a:64:0f:31:1f:95:5c:cb:21:
                    1e:1f:21:e8:ea:b3:0e:65:75:c1:90:37:49:6a:02:
                    8b:8a:1e:8e:00:c3:c3:cf:7b:aa:b9:8d:28:04:03:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:86:D7:7B:1A:46:21:6C:57:74:83:32:27:09:91:9C:25:8A:9A:FB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2a4f22af-e5df-44c3-9d9d-31911b44a034/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2a4f22af-e5df-44c3-9d9d-31911b44a034/b9037487a3d8a6ff3f464f6372ea4051ea12ebcf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.27.0/24
                IPv6:
                  2801:17::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52452

    Signature Algorithm: sha256WithRSAEncryption
         4e:43:2b:9f:ee:41:48:ef:76:e8:75:c2:d0:94:e1:df:83:03:
         ed:d7:e4:b7:58:47:e3:60:b7:e0:bd:06:0a:6b:51:eb:d8:f1:
         7e:f5:d7:c3:41:cd:89:6f:b4:56:35:5e:5b:de:9a:ea:7f:71:
         17:a0:d3:2f:07:05:2a:6f:e6:40:98:3e:ec:b8:47:e4:b4:bd:
         64:da:4a:90:f6:a0:d0:e0:4b:7e:c9:b4:36:db:b7:78:a7:0b:
         d6:64:4d:e3:21:ac:77:2c:30:c7:e4:99:6e:4e:e2:52:23:8f:
         67:4e:1b:45:f2:93:35:09:b1:10:9d:65:ca:2e:04:fd:58:7c:
         13:9e:d0:75:c4:2f:37:b4:8c:39:92:8b:e2:a1:07:a3:0e:f3:
         5c:b3:57:93:bf:a5:f4:4f:35:13:d0:2c:12:b7:94:78:9f:81:
         9a:1d:cf:47:79:26:c8:91:36:62:ab:16:28:1a:dc:fe:c9:9d:
         49:7a:68:55:c9:c1:45:c9:ce:49:96:b9:2b:59:6f:10:38:39:
         85:8a:b0:bc:8f:88:84:f0:d2:60:68:ea:9e:12:48:de:77:ca:
         4b:59:c1:32:ea:00:8b:b8:da:03:1d:ed:5c:20:c8:38:a9:e1:
         57:69:15:80:e9:ab:12:83:ce:9e:8a:02:2e:c7:9b:bf:bb:e2:
         6a:45:26:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----