Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c32a2b88c06dd87e790d975152131df758d98cbb.cer
File:                     c32a2b88c06dd87e790d975152131df758d98cbb.cer (raw, json)
Hash identifier:          2xyAGdO/OdkwyS4bazX5bDv+pk41pZHTXJ/h3Zj2e5w=
Subject key identifier:   A6:4C:56:83:87:8B:47:4D:2E:4F:46:33:E6:68:5E:97:3E:32:AC:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E54044
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/39e46b3f-1be5-489f-a442-0e7209e14085/c32a2b88c06dd87e790d975152131df758d98cbb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/39e46b3f-1be5-489f-a442-0e7209e14085/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 20:27:37 +0000
Certificate not after:    Sun 28 Jul 2024 18:37:34 +0000
Subordinate resources:    AS: 267692
                          IP: 45.162.204.0/22
                          IP: 2801:13:f000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15024196 (0xe54044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 20:27:37 2023 GMT
            Not After : Jul 28 18:37:34 2024 GMT
        Subject: CN=c32a2b88c06dd87e790d975152131df758d98cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f6:1c:c9:57:c0:9d:f8:6d:70:56:fb:74:07:
                    3e:ad:aa:bc:83:76:78:5e:b2:e7:08:f6:cd:d1:f2:
                    8e:b3:d8:5c:e1:79:2d:0a:74:1c:33:ed:21:e5:29:
                    a7:3b:cf:7d:ef:ef:29:00:2c:96:e4:b0:48:b9:b2:
                    b3:3c:a1:a1:d8:1f:57:34:f1:e8:78:9c:f0:d8:34:
                    a0:4f:a2:9e:c1:8b:19:e4:85:1c:44:88:6b:43:0c:
                    ce:5f:f6:91:f3:a0:86:d4:6c:3f:25:3d:cc:75:99:
                    74:f1:82:b1:c6:d4:8a:65:03:c7:b3:54:05:aa:fa:
                    57:83:cb:da:1e:a8:39:24:6f:1f:ec:26:97:b8:e7:
                    fd:b1:d6:b6:7d:09:f2:bd:b2:a1:59:14:5b:bd:c0:
                    49:45:10:d7:3e:4b:4b:e3:76:e4:95:a1:bc:91:17:
                    4c:2b:d9:33:a0:01:f7:6c:53:34:82:27:0a:9b:76:
                    ba:de:f9:0e:20:03:be:3a:3a:cf:b7:0a:aa:0d:ed:
                    b4:2b:e9:7e:f3:52:8c:93:21:cb:e6:2b:6d:13:f0:
                    17:4a:ed:36:d1:3d:88:4b:1d:f1:2b:71:60:a8:40:
                    b3:df:c8:f5:14:48:52:22:bb:90:b2:41:ad:11:c3:
                    a1:8b:6e:0f:36:24:22:b9:3c:fd:69:58:4b:77:09:
                    98:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4C:56:83:87:8B:47:4D:2E:4F:46:33:E6:68:5E:97:3E:32:AC:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/39e46b3f-1be5-489f-a442-0e7209e14085/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/39e46b3f-1be5-489f-a442-0e7209e14085/c32a2b88c06dd87e790d975152131df758d98cbb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.162.204.0/22
                IPv6:
                  2801:13:f000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267692

    Signature Algorithm: sha256WithRSAEncryption
         48:69:0d:c3:5d:b4:aa:d9:19:c1:5c:00:2c:2d:df:a5:16:68:
         e2:86:1b:4f:1c:bf:63:f7:c9:19:29:ef:98:b7:e8:ab:8c:15:
         42:e8:7d:27:b5:6a:7f:79:22:36:30:05:9c:c2:fa:70:c8:9f:
         f6:ee:4c:49:37:20:4e:f7:9d:4b:9c:92:62:95:e5:ee:39:8e:
         4d:c1:87:fd:a5:fe:c5:b4:d4:3a:b1:37:6a:00:8f:a7:5c:f1:
         1f:bf:18:00:30:2d:ed:59:72:1c:ab:3d:ac:70:f9:21:ec:30:
         65:d5:b5:90:8c:27:f3:40:20:86:eb:d3:bd:bb:8c:4c:b5:78:
         cc:82:28:74:f0:8d:2e:4b:72:54:16:d2:45:76:01:43:ca:8f:
         7d:3f:f6:31:1c:8c:0f:9b:9a:83:3c:8c:79:ab:5f:36:aa:97:
         24:d3:9e:1e:b1:73:61:91:b3:1a:f7:ae:b1:99:6e:da:4b:0a:
         cc:43:aa:98:73:c9:07:67:ab:05:51:a6:4e:3d:25:da:b5:9e:
         8c:3f:35:47:70:6a:08:4d:8b:74:de:9d:04:06:0c:79:ba:62:
         67:cf:d2:69:1c:bb:86:d8:65:85:60:6e:7c:40:89:06:60:bb:
         14:1a:45:1b:47:16:89:14:89:89:80:87:bb:7b:09:5c:ae:94:
         46:94:bf:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----