Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb7e69f46a152b78830f40899af261ee255b6598.cer
File:                     bb7e69f46a152b78830f40899af261ee255b6598.cer (raw, json)
Hash identifier:          yyUtlNwZzPh4hqbtO9Wvg637mWggrp69IoFFYFQU+1E=
Subject key identifier:   16:7E:76:DB:72:71:22:50:AF:DA:40:99:6E:86:FF:DC:32:8F:ED:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF0678
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d9829186-6b19-448a-abbb-3d761ec2380c/bb7e69f46a152b78830f40899af261ee255b6598.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d9829186-6b19-448a-abbb-3d761ec2380c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:50:39 +0000
Certificate not after:    Wed 01 Jan 2025 14:55:24 +0000
Subordinate resources:    AS: 52971
                          IP: 168.90.76.0/22
                          IP: 177.38.176.0/21
                          IP: 2804:2d2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16713336 (0xff0678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:50:39 2023 GMT
            Not After : Jan  1 14:55:24 2025 GMT
        Subject: CN=bb7e69f46a152b78830f40899af261ee255b6598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:87:0d:23:11:7a:42:13:36:e2:54:e4:b2:f5:
                    be:70:9b:2a:31:83:4a:81:a9:eb:45:ac:70:fd:33:
                    c6:76:28:93:42:31:83:fe:79:7e:d5:10:d3:6c:34:
                    fb:e1:0d:78:b7:82:c3:de:d1:71:34:e1:1f:68:16:
                    f3:40:31:98:0a:c7:eb:36:09:19:6f:73:db:d3:d7:
                    3d:08:cd:d8:ef:fe:d3:16:59:4a:a3:9b:06:c6:84:
                    ce:6d:2c:6d:9b:30:f0:84:53:9e:41:2a:e4:91:b9:
                    1d:ce:28:55:34:b2:cc:69:90:fb:a2:70:e8:cc:87:
                    34:d1:5d:3a:d7:7e:61:4b:c5:72:e5:4d:3f:83:35:
                    0f:4d:51:12:3c:53:ac:81:f4:27:d5:ae:ee:13:c7:
                    ef:4f:03:9d:58:b8:b2:c8:0c:61:72:d5:a9:9c:ec:
                    bf:5f:71:01:d4:0c:c1:e1:a9:dc:34:fa:9f:59:40:
                    f2:a7:3a:d0:e1:51:2c:6e:94:37:90:5a:b9:da:ac:
                    a1:f3:01:0d:1d:74:6a:5a:45:25:a5:45:39:54:69:
                    3d:d3:b5:ff:f1:18:9b:d0:11:dc:79:1b:30:0e:48:
                    60:8b:b7:43:85:cb:aa:7d:6e:18:e5:00:93:c1:e1:
                    2b:2f:b1:cf:76:26:07:06:5d:fa:46:df:bb:52:50:
                    12:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:7E:76:DB:72:71:22:50:AF:DA:40:99:6E:86:FF:DC:32:8F:ED:89
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d9829186-6b19-448a-abbb-3d761ec2380c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d9829186-6b19-448a-abbb-3d761ec2380c/bb7e69f46a152b78830f40899af261ee255b6598.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.76.0/22
                  177.38.176.0/21
                IPv6:
                  2804:2d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52971

    Signature Algorithm: sha256WithRSAEncryption
         10:4a:18:b5:39:a9:46:3c:4f:ca:99:bf:0e:d4:cf:2f:40:ae:
         99:db:dd:23:15:02:a1:4c:f4:cc:0e:96:2b:7b:ad:2b:48:47:
         e1:7b:7a:0c:07:fa:8c:4b:d7:19:26:37:5b:de:31:15:df:4e:
         20:fe:86:42:52:5c:b8:cf:17:de:bc:f8:07:46:53:fc:d4:f8:
         cd:ec:1b:4f:d8:44:10:2f:ed:40:d0:0d:02:48:41:34:c5:f2:
         89:42:28:52:63:be:0a:73:ab:61:e6:2d:bf:8f:9d:ab:ed:e7:
         de:47:99:a2:7c:ca:09:99:a5:1d:70:0b:42:f9:07:f2:15:f6:
         10:6a:aa:7c:c9:4f:5f:bc:ba:f5:27:bd:c3:d7:33:45:af:90:
         dc:b1:c6:b8:f6:e5:a1:ee:90:94:9d:3f:59:e2:4d:37:64:23:
         aa:c9:fc:23:6a:c9:b6:5f:14:d4:91:3c:ff:f0:17:ea:ad:b9:
         98:e2:0b:5e:0a:97:fd:02:99:3b:cf:3e:71:28:cc:82:10:9d:
         0a:d7:90:af:80:a9:5e:92:db:44:3a:50:2d:e2:85:da:b1:86:
         ab:93:93:c5:5c:f8:6b:6d:3e:fe:4e:9e:fc:ae:d0:28:6f:ae:
         10:d9:5e:ab:ea:1e:9d:7c:4a:8e:04:ed:0d:d3:d8:5d:ce:40:
         75:79:b5:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----