Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf470436f0ac67cdfa23fd869125292ae0114184.cer
File:                     bf470436f0ac67cdfa23fd869125292ae0114184.cer (raw, json)
Hash identifier:          +AZgYae3vP9i1L8a/3nFlRFI1cr6SHE/w3Tm+A0pCZs=
Subject key identifier:   5D:B9:53:A6:73:C3:AE:D0:09:9A:E2:6F:96:DE:FC:23:D5:3F:ED:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE4446
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8c396f2c-9c2f-4b35-929b-b734a828809c/bf470436f0ac67cdfa23fd869125292ae0114184.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8c396f2c-9c2f-4b35-929b-b734a828809c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 11:31:19 +0000
Certificate not after:    Sun 15 Dec 2024 18:23:44 +0000
Subordinate resources:    AS: 267771
                          IP: 45.170.212.0/22
                          IP: 2803:47a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15615046 (0xee4446)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 11:31:19 2023 GMT
            Not After : Dec 15 18:23:44 2024 GMT
        Subject: CN=bf470436f0ac67cdfa23fd869125292ae0114184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:0a:fa:96:36:70:ca:c7:d8:4d:12:7e:35:
                    38:d7:ee:88:d3:b0:3c:48:57:6f:22:4f:05:2f:f2:
                    5f:af:b5:49:c3:0a:b1:e1:93:b1:60:34:ce:23:1e:
                    99:95:fd:f4:b9:17:3b:e2:a7:2c:6d:3f:da:31:1d:
                    94:bb:86:0a:52:27:f0:48:d9:ba:68:70:35:b2:37:
                    1e:e3:f2:53:6c:d9:c7:5a:66:50:1d:ba:c8:3f:c7:
                    b0:93:0d:90:7f:95:06:5d:8e:e9:ea:a9:e7:fe:9d:
                    d5:8a:9d:ad:27:e8:6e:e1:3a:79:fb:c7:0f:a1:9b:
                    d5:7c:bf:d9:0d:14:51:f1:c9:ef:6c:81:6b:a1:d0:
                    52:70:4c:a5:e5:4a:bf:71:83:90:97:c1:82:92:2c:
                    ea:b6:9a:e1:38:2a:39:b6:2e:20:83:96:1a:68:08:
                    60:f6:8b:20:0a:a3:00:a3:71:b5:67:c3:a5:12:33:
                    68:ed:ff:77:e7:9a:6a:0e:6e:32:b7:e1:1f:00:5f:
                    e3:65:b8:b8:d7:92:2f:bc:1a:b5:70:2f:0e:95:ad:
                    29:aa:3e:03:32:99:81:1f:42:3d:a0:b5:06:1a:64:
                    ff:be:5e:55:e2:db:ba:fc:3c:7e:59:8d:81:2a:fc:
                    7f:26:d5:6c:d9:5c:99:b3:2e:da:21:51:bd:4e:af:
                    4a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B9:53:A6:73:C3:AE:D0:09:9A:E2:6F:96:DE:FC:23:D5:3F:ED:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8c396f2c-9c2f-4b35-929b-b734a828809c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8c396f2c-9c2f-4b35-929b-b734a828809c/bf470436f0ac67cdfa23fd869125292ae0114184.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.212.0/22
                IPv6:
                  2803:47a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267771

    Signature Algorithm: sha256WithRSAEncryption
         0a:3c:76:38:d0:11:1f:0d:dc:45:07:df:e8:a3:9c:43:8d:9f:
         86:84:9e:b0:79:6b:4d:1b:cf:ab:aa:62:9b:53:8c:6d:1c:23:
         8a:35:9b:0c:09:30:cb:f0:2d:30:5c:a8:e4:68:09:c9:5d:68:
         e8:db:f7:e1:76:41:a7:89:b1:17:1e:f6:d8:73:5e:93:ee:94:
         5f:d1:8a:91:be:d4:d6:41:ea:ef:49:a8:f4:65:c5:a5:00:9c:
         ac:1c:14:79:0c:91:75:62:bd:09:35:f0:1c:88:c4:84:99:da:
         0f:42:bb:68:12:92:75:1e:28:9d:2a:84:06:b8:56:a3:29:71:
         73:88:d4:f9:10:97:70:49:7b:ea:1a:1f:51:99:7c:b7:39:7f:
         b9:9d:e7:7c:eb:2a:d5:79:e0:3c:3e:65:75:50:f8:9b:b4:d1:
         00:32:ef:d7:90:fa:80:70:de:f8:7e:40:59:00:dc:14:68:d6:
         2c:e5:f1:47:d8:77:4c:c4:45:e9:c8:71:cc:53:a5:28:a3:4b:
         14:15:4d:00:2e:92:e8:cd:26:62:87:7f:8c:1f:1e:11:ec:ea:
         b0:37:84:fa:cf:31:28:ed:00:07:1e:30:ea:f8:13:cc:2a:87:
         be:cc:e8:81:76:2a:d9:f7:1f:bf:db:5f:14:e4:8b:8a:f4:d8:
         79:9b:69:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----