Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9329e96abfcaf34a4fc1d9a161fe743d88602fc.cer
File:                     c9329e96abfcaf34a4fc1d9a161fe743d88602fc.cer (raw, json)
Hash identifier:          gSyRzZHJkccNMyR8mbjr2KG7VLKLWbXkcFEaaXO8hBI=
Subject key identifier:   28:8B:8D:E1:B5:46:7A:FB:C9:C0:ED:A7:F9:92:83:3D:88:8E:2A:FB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9FA5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/c9329e96abfcaf34a4fc1d9a161fe743d88602fc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 13:25:07 +0000
Certificate not after:    Thu 06 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 264701
                          IP: 168.232.248.0/22
                          IP: 2803:7340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15333981 (0xe9fa5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 16 13:25:07 2023 GMT
            Not After : Mar  6 06:00:00 2025 GMT
        Subject: CN=c9329e96abfcaf34a4fc1d9a161fe743d88602fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:50:c4:3d:fc:44:72:37:e8:3a:10:75:7d:
                    e8:d5:c7:e5:b5:5f:f3:b9:b5:3e:80:00:bc:c3:0c:
                    8d:e2:04:13:bb:8b:03:76:5b:6e:f9:ff:23:03:3f:
                    8b:26:ca:3d:97:11:96:e6:a7:41:c0:e0:cf:fc:a4:
                    92:c9:13:4a:c3:b6:f6:5d:95:1e:f0:0b:db:b1:42:
                    cf:d8:5e:b6:52:37:d0:eb:73:57:b3:80:38:52:8f:
                    7f:ce:3b:e6:0e:fd:c5:18:40:88:9f:44:dd:5d:0c:
                    d5:57:03:86:e7:88:45:6b:7b:ae:61:3c:20:0e:61:
                    08:97:5c:da:08:ee:58:46:03:bc:10:f0:dc:c4:20:
                    dc:42:bb:d0:62:58:be:5c:93:6a:db:b3:0c:ab:d2:
                    e8:c8:7b:a2:f1:7e:f4:ba:77:d8:15:63:4c:70:4a:
                    a5:89:bf:6c:3e:aa:ac:5b:b2:28:4f:e7:5f:ca:d5:
                    c4:1f:a7:3e:86:3a:0a:16:ca:49:03:dc:e4:84:63:
                    ac:3b:74:b9:6d:f9:02:74:c4:88:51:35:c7:74:a1:
                    25:31:d3:ad:d5:6d:33:ef:fc:0c:d4:18:4b:7c:10:
                    86:aa:b3:fb:33:3c:50:3c:0f:e4:cb:1a:ff:f4:8a:
                    8f:24:f3:eb:c9:40:e9:80:21:31:9d:e2:95:8c:5e:
                    ff:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:8B:8D:E1:B5:46:7A:FB:C9:C0:ED:A7:F9:92:83:3D:88:8E:2A:FB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/979a989a-ac4b-467f-8e31-f705b936d6b2/c9329e96abfcaf34a4fc1d9a161fe743d88602fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.248.0/22
                IPv6:
                  2803:7340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264701

    Signature Algorithm: sha256WithRSAEncryption
         40:d4:f2:1e:48:77:7c:4e:19:67:c0:30:0b:89:7f:7b:40:aa:
         d1:6a:d1:3c:4f:b3:30:e6:61:ad:03:d7:1a:70:96:ac:f5:37:
         24:a2:55:f5:a3:2a:90:6c:58:59:84:95:79:5e:e7:9d:35:59:
         ec:d0:06:28:56:e2:fc:36:d3:9b:d1:ba:29:94:68:27:d1:fb:
         30:4f:23:58:5f:58:6e:8b:f3:82:61:b8:86:23:a5:34:97:a6:
         75:43:19:9e:db:ad:ea:d0:82:20:f4:37:03:54:da:bc:6c:7f:
         8a:20:33:36:7d:29:26:d6:2a:a7:f6:41:07:9f:0e:c2:d0:8d:
         0d:44:96:88:19:c0:f1:ca:fc:7f:af:9b:66:e2:ce:07:b0:6d:
         a0:b6:93:c4:af:ce:94:02:f6:88:c7:b3:bf:cb:5b:0d:b9:d3:
         39:2f:f7:9b:0b:d5:5b:f8:86:47:9c:6b:db:98:af:7f:ea:ac:
         b7:8b:a4:74:51:fa:98:8f:01:09:d8:67:0e:f4:d5:98:36:56:
         cc:67:dc:04:51:7e:72:ba:16:7a:61:bf:64:74:1b:f9:80:fc:
         d6:2c:55:65:16:98:72:99:11:cb:ae:72:9f:34:02:25:dc:b2:
         90:20:f4:ee:3b:28:29:8c:4a:f4:83:eb:3f:04:22:c1:09:18:
         4b:17:2f:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----