Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c53e7b94bc48227686ccd3c48996d6350aa0bc59.cer
File:                     c53e7b94bc48227686ccd3c48996d6350aa0bc59.cer (raw, json)
Hash identifier:          o/93OsFIGkGC3Ef87t6dhBdheaO+t1Yqyk97/0dbHQc=
Subject key identifier:   3C:A0:45:7C:E5:6D:F5:57:1B:39:96:31:18:4A:C6:83:7C:68:14:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AC092
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/20217a35-c793-4013-82be-0d22aef99e54/c53e7b94bc48227686ccd3c48996d6350aa0bc59.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/20217a35-c793-4013-82be-0d22aef99e54/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 15:21:43 +0000
Certificate not after:    Tue 28 Jan 2025 13:04:01 +0000
Subordinate resources:    AS: 268829
                          IP: 45.173.220.0/22
                          IP: 2804:5b40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17481874 (0x10ac092)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 16 15:21:43 2024 GMT
            Not After : Jan 28 13:04:01 2025 GMT
        Subject: CN=c53e7b94bc48227686ccd3c48996d6350aa0bc59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:64:1d:fd:27:91:c3:6f:7b:bd:e4:3b:65:6c:
                    2d:e6:01:25:85:79:e0:0a:50:fd:35:df:6e:ca:a6:
                    24:2f:01:14:76:06:c4:97:90:c2:4d:45:7a:73:d6:
                    7e:e0:0d:d0:92:45:6b:56:14:b3:aa:1a:a7:22:da:
                    3d:e0:eb:75:27:fd:25:d6:c2:c4:44:e7:0f:4f:4d:
                    7e:e5:c2:0e:b3:79:e9:95:06:b3:71:30:35:4b:1a:
                    84:86:5e:46:bd:f5:bd:6c:3e:6b:51:54:c5:e2:a2:
                    7f:3f:d6:58:5d:75:67:9a:31:1c:0d:c9:d4:40:e8:
                    17:ec:3b:a2:5f:ed:51:da:da:54:d6:b3:52:4c:e7:
                    83:ba:e8:95:f7:55:86:53:61:d6:01:b6:75:4b:ea:
                    14:6c:53:4d:8c:5f:d7:3a:47:0b:62:a1:de:93:2c:
                    83:fe:98:d0:eb:58:06:1c:be:f8:8d:2b:50:76:95:
                    11:eb:97:b5:a0:c3:31:cf:2d:6b:16:2b:f2:70:25:
                    66:f7:ab:81:ef:cf:c0:12:e7:c9:db:3b:4f:5c:f0:
                    f3:b4:bd:df:52:f8:03:ca:89:b4:13:17:c1:f2:ff:
                    5e:82:d1:ff:76:6f:75:99:4a:38:00:34:ca:e5:50:
                    b5:a6:a7:09:ea:4d:91:39:a5:d1:01:a1:be:7e:8b:
                    1a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:A0:45:7C:E5:6D:F5:57:1B:39:96:31:18:4A:C6:83:7C:68:14:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/20217a35-c793-4013-82be-0d22aef99e54/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/20217a35-c793-4013-82be-0d22aef99e54/c53e7b94bc48227686ccd3c48996d6350aa0bc59.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.220.0/22
                IPv6:
                  2804:5b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  268829

    Signature Algorithm: sha256WithRSAEncryption
         83:57:ae:a8:93:a3:63:22:6d:3f:27:87:bb:2f:3a:2e:8a:09:
         65:c3:52:52:37:94:eb:8d:6d:ca:a9:0b:8b:ca:67:a0:00:11:
         27:cb:1b:f0:be:19:d8:12:05:dc:2c:d9:24:76:1a:9c:18:88:
         9b:0d:e7:c7:9c:93:b8:db:fe:2c:d5:08:40:30:b8:c3:c6:cd:
         c6:c5:f0:45:08:e4:5c:96:04:ee:58:27:13:b6:ce:af:55:da:
         6b:4f:02:0c:c4:58:0b:7f:d8:b3:01:70:03:7e:ee:d0:11:96:
         be:e7:8b:4f:47:ed:60:28:ce:c1:36:96:19:42:61:cf:67:21:
         66:87:65:f1:19:02:64:da:2b:99:59:8e:aa:ff:1e:28:06:69:
         63:f4:55:09:c0:ac:ff:97:fc:e7:f9:d4:99:a0:3c:00:61:0c:
         e0:4a:b0:0b:94:a7:e2:d5:dc:7c:ca:fa:b7:31:64:ce:4e:89:
         e1:67:b8:0d:f0:3e:86:b4:c6:50:3a:c9:8c:4b:fe:81:56:9e:
         d4:cd:51:7d:2e:64:2c:f0:da:a1:a0:45:6a:77:3b:32:b4:a3:
         3e:aa:1b:cd:52:ad:16:49:d9:cf:7a:70:5b:98:d3:82:84:44:
         42:fb:85:3c:1b:99:38:11:47:eb:ef:42:ae:cf:be:55:95:fd:
         04:b2:65:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----