Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bcf6af61994e02dca53fcc5dfbcc4e089b579831.cer
File:                     bcf6af61994e02dca53fcc5dfbcc4e089b579831.cer (raw, json)
Hash identifier:          ObP4MoCK1cDnbq1a/nnjjOZgepJcyujyPiN9ldwxLCg=
Subject key identifier:   AB:23:BE:81:17:72:BA:2F:B6:F8:43:4D:BA:9E:1B:ED:C3:2E:3B:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E87C47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4504942f-8e92-4e91-a3f5-e41f0589cdb1/bcf6af61994e02dca53fcc5dfbcc4e089b579831.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4504942f-8e92-4e91-a3f5-e41f0589cdb1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 21:39:13 +0000
Certificate not after:    Wed 12 Feb 2025 00:16:45 +0000
Subordinate resources:    AS: 265579
                          IP: 45.174.168.0/22
                          IP: 2806:333::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15236167 (0xe87c47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 21:39:13 2023 GMT
            Not After : Feb 12 00:16:45 2025 GMT
        Subject: CN=bcf6af61994e02dca53fcc5dfbcc4e089b579831
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b4:c5:d4:03:e7:4b:97:48:58:02:82:e8:6b:
                    a1:f2:41:79:a2:94:c9:23:53:3b:04:bf:70:61:ea:
                    f7:12:50:52:26:32:ac:82:48:f3:99:e4:a0:ec:f9:
                    3c:ba:7a:e4:b0:db:b7:c3:43:f4:e4:36:78:27:7e:
                    c3:65:a7:b5:24:0c:69:e1:78:70:a2:83:f5:82:f5:
                    f4:80:36:77:9d:35:e8:d5:d3:8b:2c:6d:85:77:49:
                    28:f0:29:9e:2c:db:5b:2d:c9:01:91:41:3b:f7:80:
                    c9:93:cc:0d:68:c8:39:2e:38:d7:94:46:2f:76:7c:
                    28:1c:7a:c8:c7:d4:fc:a1:a0:ce:80:95:44:b9:e8:
                    37:d9:d2:0a:99:e5:bf:9f:d6:96:dd:26:77:d0:fc:
                    dd:88:73:34:7e:ac:ca:ae:81:63:c2:ba:f2:b6:49:
                    84:84:e5:46:3f:b8:9e:f1:01:f7:c9:e4:c1:35:ac:
                    62:da:53:9c:af:2d:87:12:41:7c:da:8c:7b:d6:c4:
                    c0:e4:03:23:d1:e3:48:25:c1:2c:e2:fe:59:9b:03:
                    c8:ee:8d:13:65:49:bc:ff:2e:d4:1a:d4:a9:4f:9d:
                    42:7e:8f:66:45:8d:d0:89:07:70:c6:02:78:eb:7b:
                    42:21:46:f3:42:15:ff:06:d5:23:20:bb:4e:fc:04:
                    4b:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:23:BE:81:17:72:BA:2F:B6:F8:43:4D:BA:9E:1B:ED:C3:2E:3B:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4504942f-8e92-4e91-a3f5-e41f0589cdb1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4504942f-8e92-4e91-a3f5-e41f0589cdb1/bcf6af61994e02dca53fcc5dfbcc4e089b579831.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.168.0/22
                IPv6:
                  2806:333::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265579

    Signature Algorithm: sha256WithRSAEncryption
         6e:36:c3:75:65:1f:cb:52:f8:cf:d5:65:b8:25:81:91:5c:39:
         ce:89:85:e0:db:f6:57:f6:c4:a3:10:f2:46:e4:f7:ad:37:2f:
         5c:33:ce:98:63:38:b6:73:d9:a4:e4:44:e9:06:76:48:20:61:
         3c:76:2c:fe:84:88:9d:72:83:d2:a0:70:8d:38:4e:22:a7:db:
         dd:5f:0e:58:a5:9d:5e:45:8b:0a:d6:71:9a:8f:a8:f3:30:c0:
         a1:35:e6:23:10:18:9f:4d:02:80:a9:99:07:97:0f:87:76:3c:
         f2:9c:f3:bf:dd:af:99:89:31:94:f9:ab:1c:09:43:68:fb:cd:
         54:8f:3e:b3:a5:8a:f0:e9:3d:4b:71:53:04:ea:81:a6:f5:28:
         9c:2f:8b:f2:a6:0c:be:05:64:31:26:76:54:f7:68:c5:ae:84:
         4e:c0:2d:7d:29:d1:54:5d:41:d3:3e:51:ea:09:22:e0:a2:15:
         ae:98:1d:39:ab:14:bc:07:02:29:3a:be:44:dd:58:3e:b0:f6:
         ad:d4:bd:be:f5:97:75:ff:83:23:2f:65:83:25:88:0a:03:b4:
         68:ab:f4:94:bd:36:cd:9c:d9:9f:50:ff:1d:a9:5f:cc:00:a3:
         ca:03:c3:d5:e1:38:d5:6f:ef:d1:23:2c:9e:71:ba:73:a3:ba:
         fd:f4:da:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----