Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b94817bbb4081f9170d01678cf2ece728ef42544.cer
File:                     b94817bbb4081f9170d01678cf2ece728ef42544.cer (raw, json)
Hash identifier:          Iy3hIeDYCJxlsAW0KuPB80CZn8vGnWnAM/wzQL4hDMs=
Subject key identifier:   A3:E2:4D:F3:C4:48:57:EC:09:06:FD:1E:4B:A1:78:1B:A0:41:07:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF69CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d33a77a0-c0fa-456c-a64a-551910e98ac8/b94817bbb4081f9170d01678cf2ece728ef42544.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d33a77a0-c0fa-456c-a64a-551910e98ac8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:19:01 +0000
Certificate not after:    Wed 28 May 2025 16:18:17 +0000
Subordinate resources:    AS: 262760
                          IP: 179.106.32.0/20
                          IP: 186.225.16.0/20
                          IP: 2804:414::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16738763 (0xff69cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:19:01 2023 GMT
            Not After : May 28 16:18:17 2025 GMT
        Subject: CN=b94817bbb4081f9170d01678cf2ece728ef42544
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:4d:1f:cc:86:90:c6:fe:48:93:4a:2b:ef:30:
                    de:6b:70:0e:a4:c7:78:da:b5:78:22:4b:e2:43:6d:
                    77:08:00:28:5a:76:a8:52:0e:52:f5:c4:cb:43:85:
                    99:1b:95:79:a9:b5:80:06:bc:8b:1e:af:a4:7f:f0:
                    34:54:b1:69:ff:08:ec:d3:c1:64:8a:a3:96:fb:28:
                    2c:73:00:3c:c8:4a:ae:ed:2c:5f:4f:08:77:0e:3c:
                    b4:3e:d9:7c:8e:61:28:35:35:22:0e:bd:31:3a:26:
                    0a:a2:87:72:b8:02:32:24:cf:89:8c:05:e0:1e:97:
                    c2:7c:44:fe:58:de:75:03:ea:0e:1a:84:3b:85:a2:
                    7e:1f:11:39:b8:d5:89:f9:46:cd:29:35:4b:92:14:
                    ba:a0:1c:64:a3:4b:c7:41:00:ff:21:00:b9:8a:36:
                    52:ca:29:30:b4:e1:aa:74:9e:78:6e:7c:71:32:bc:
                    f5:53:c6:70:05:f8:49:c8:3d:cc:b7:a0:f9:e1:65:
                    5d:06:34:1b:ea:09:f1:1e:11:db:9c:42:ed:37:e4:
                    2a:8a:25:f0:32:1b:1b:a9:88:09:20:f2:ad:b9:0c:
                    dd:04:90:24:5f:bc:aa:b7:df:1d:9d:91:1d:ca:c6:
                    0b:ce:70:ca:eb:17:a7:e3:aa:94:81:a1:ed:a7:6c:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E2:4D:F3:C4:48:57:EC:09:06:FD:1E:4B:A1:78:1B:A0:41:07:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d33a77a0-c0fa-456c-a64a-551910e98ac8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d33a77a0-c0fa-456c-a64a-551910e98ac8/b94817bbb4081f9170d01678cf2ece728ef42544.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.106.32.0/20
                  186.225.16.0/20
                IPv6:
                  2804:414::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262760

    Signature Algorithm: sha256WithRSAEncryption
         3f:21:e9:aa:9b:b7:44:c7:2a:26:45:1f:8d:a8:73:4e:f6:c9:
         7d:e2:4d:d0:76:be:81:24:7b:b2:6b:50:aa:74:4b:2c:8e:7f:
         bd:6d:3f:fd:66:c6:11:d2:d6:cf:bb:c3:dc:c3:6c:34:dc:ec:
         e1:d0:57:ac:7f:2b:9b:10:4c:98:10:78:3d:50:1c:07:85:06:
         0c:f5:eb:4d:0a:85:bd:c6:a3:71:48:01:e1:df:9b:ee:46:27:
         44:2c:58:d8:29:9b:13:f2:83:fa:7e:81:49:be:be:9d:fe:45:
         c7:cb:9a:c0:d6:4b:29:16:02:7b:c3:d6:40:1a:a8:54:bc:21:
         9c:9c:f7:e4:57:9a:ef:f9:b7:2c:38:c5:03:f2:ae:a4:82:84:
         df:7e:5c:dc:48:9d:1e:ed:e2:c7:01:4c:e3:1c:60:73:c1:60:
         5e:d6:49:ec:d8:ed:be:54:56:72:6f:b2:d6:3c:a9:e5:51:7a:
         c5:39:7e:d9:91:69:37:ed:a1:c8:86:bd:5d:7d:96:07:91:ce:
         2f:74:65:a3:14:99:1d:21:14:d4:9f:20:e1:1e:d4:b9:b4:e4:
         c7:cc:84:09:fe:ba:f3:fe:48:6c:b9:70:01:bb:f5:56:40:93:
         24:16:1f:d2:b4:56:82:99:90:c9:8e:3f:c1:86:8f:30:3e:b8:
         f4:a2:58:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----