Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c470532cd07d92b66dbd6065dd8456bcf8fbd88c.cer
File:                     c470532cd07d92b66dbd6065dd8456bcf8fbd88c.cer (raw, json)
Hash identifier:          J3HnWHlCTHoVfqazI9Uh7Kw54/0TUcmFotSytR1gLGs=
Subject key identifier:   AD:C6:2D:E6:69:28:09:45:47:C1:5B:99:DA:94:D8:11:81:87:BC:E9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF181A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dcb05c67-1d69-47bf-ae4a-222fd44bbd6f/c470532cd07d92b66dbd6065dd8456bcf8fbd88c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dcb05c67-1d69-47bf-ae4a-222fd44bbd6f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 21:24:34 +0000
Certificate not after:    Fri 07 Mar 2025 15:55:22 +0000
Subordinate resources:    AS: 28592
                          IP: 177.128.228.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16717850 (0xff181a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 21:24:34 2023 GMT
            Not After : Mar  7 15:55:22 2025 GMT
        Subject: CN=c470532cd07d92b66dbd6065dd8456bcf8fbd88c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:20:0f:c0:6e:2e:96:5d:4c:dd:e5:43:62:c9:
                    58:77:b4:72:72:80:42:4f:4f:19:f6:35:63:24:23:
                    5e:59:60:90:48:60:b3:18:0f:ee:b6:5e:cf:48:fa:
                    35:3d:38:70:a8:88:d4:ae:4e:67:ea:83:1e:0a:ad:
                    e2:d3:19:0d:b2:6a:01:27:78:82:1e:11:59:35:18:
                    98:20:4d:8d:a7:fe:e8:e7:a3:b2:58:a1:8c:e2:b4:
                    06:00:c1:97:c8:fd:27:b4:c9:a2:16:98:15:99:4e:
                    6f:c5:6d:a2:a4:b7:72:8b:90:05:91:e7:f5:d3:94:
                    33:8b:32:ab:3f:6b:b0:58:b8:a7:da:60:b3:47:79:
                    5b:4f:76:2b:a0:e7:15:d6:23:71:9c:7f:f2:b1:16:
                    fe:00:ee:e7:e2:8b:b1:6c:63:90:90:4f:7a:ee:0f:
                    da:7f:35:cc:07:34:ce:2a:f0:df:0c:ad:f4:f5:58:
                    3c:d8:23:cb:34:ae:99:07:03:c7:41:92:20:b2:69:
                    05:15:ac:84:13:6d:02:f9:3a:7f:4a:46:fd:29:2d:
                    50:8e:98:2f:09:09:92:86:a2:26:9e:e4:29:31:e3:
                    23:b1:87:a1:6f:30:af:95:27:48:23:aa:97:eb:fe:
                    09:ef:f4:47:81:2a:4e:ef:c3:58:92:ab:37:8b:59:
                    cb:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C6:2D:E6:69:28:09:45:47:C1:5B:99:DA:94:D8:11:81:87:BC:E9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dcb05c67-1d69-47bf-ae4a-222fd44bbd6f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dcb05c67-1d69-47bf-ae4a-222fd44bbd6f/c470532cd07d92b66dbd6065dd8456bcf8fbd88c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.228.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28592

    Signature Algorithm: sha256WithRSAEncryption
         76:60:c3:3e:10:90:cf:dd:a5:57:d3:a0:c4:78:4f:19:2d:0d:
         08:4c:a2:10:5e:d7:ce:d6:27:de:b1:98:e5:df:92:d0:69:73:
         76:73:1a:d7:88:96:0c:63:2c:38:7e:ba:40:17:9c:82:e1:e7:
         e0:b1:e4:9a:44:c5:1e:20:a6:b2:b0:5f:f2:cd:f9:62:09:8a:
         a8:35:37:86:96:12:49:ff:e0:64:79:8f:4f:df:e4:dd:9c:21:
         9f:ad:28:14:40:25:b2:d3:52:b9:e0:9d:68:2a:78:20:73:fd:
         4f:18:80:7e:73:ad:61:56:e4:16:a3:49:9f:3b:6d:fb:8a:3a:
         09:f8:77:9f:39:cf:db:83:a8:4d:2a:f6:a0:16:44:7f:07:61:
         bd:e0:57:2a:bd:40:3c:0d:eb:cf:ef:4f:1f:ab:e3:b9:e5:27:
         e7:e1:2c:2f:b6:ea:5f:03:75:fd:97:dc:be:8e:d1:fa:be:91:
         2b:8c:71:f4:20:38:1a:d8:02:3f:58:d0:4a:ad:56:7e:f8:70:
         19:99:15:16:79:f9:a8:8f:d9:b2:1a:73:02:d5:fb:dc:35:83:
         59:88:a2:2d:e8:12:4d:0a:8e:fb:a7:b9:f2:f4:5c:5a:7b:41:
         b4:31:cd:a5:be:d1:82:92:ae:68:9f:0f:78:aa:54:d9:af:bd:
         88:7c:9d:08
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----