Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c99d0ed3c62e673b2f301536cb9024d744015b7b.cer
File:                     c99d0ed3c62e673b2f301536cb9024d744015b7b.cer (raw, json)
Hash identifier:          YhvlBmD8XsOd7wvjdNeFGC+KoF5y8yNHjhxNuxj6QF0=
Subject key identifier:   64:1F:44:BA:0D:66:31:F4:2F:EC:B5:BB:80:74:50:43:DF:01:7B:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01045CBF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df5e7a7f-2441-416b-97a9-cc49487efe34/c99d0ed3c62e673b2f301536cb9024d744015b7b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df5e7a7f-2441-416b-97a9-cc49487efe34/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 11:32:28 +0000
Certificate not after:    Sun 24 Aug 2025 15:00:00 +0000
Subordinate resources:    AS: 27870
                          IP: 179.60.220.0/22
                          IP: 200.110.208.0/21
                          IP: 2803:a880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17063103 (0x1045cbf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 19 11:32:28 2023 GMT
            Not After : Aug 24 15:00:00 2025 GMT
        Subject: CN=c99d0ed3c62e673b2f301536cb9024d744015b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:9a:20:cb:00:60:12:9b:02:39:ba:e1:22:6c:
                    fa:a5:af:64:36:16:db:13:32:5b:47:49:81:e6:58:
                    a6:15:00:8f:0b:5e:08:de:fe:a1:06:2f:ae:21:87:
                    80:05:82:2b:7d:bd:e0:78:40:1f:a8:74:59:19:be:
                    3f:ea:46:f3:fc:69:72:e4:2d:a0:10:7f:f6:e0:a2:
                    0e:8a:33:3f:0b:2b:0d:60:0f:d2:e9:62:ee:ed:49:
                    b4:12:02:2f:c9:f9:18:c3:75:07:19:52:d3:f2:9e:
                    14:57:f5:a7:4f:58:1d:19:c5:de:3d:8e:35:92:4b:
                    47:c6:f0:b5:cf:cd:43:82:a7:dc:0d:71:2d:57:62:
                    72:fc:6d:70:a0:e0:36:e3:a2:d5:91:af:e0:79:ae:
                    61:c3:86:cd:a3:ac:af:f1:e6:7a:73:92:93:5e:2e:
                    c1:b9:41:01:63:8d:2b:31:54:2b:14:56:94:ff:59:
                    c5:9f:3e:10:01:76:c5:b7:ba:da:ef:e7:1e:58:99:
                    d3:15:d0:49:04:71:55:47:9a:9f:06:2e:dc:6b:bc:
                    4c:7a:6d:b3:9d:39:ae:bd:fc:39:94:e5:16:e2:40:
                    ff:cd:a0:7c:64:7c:93:02:e8:9e:f3:16:45:ce:d0:
                    f3:42:9e:3d:64:f7:d3:3f:5a:75:f3:5d:f6:52:0f:
                    82:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1F:44:BA:0D:66:31:F4:2F:EC:B5:BB:80:74:50:43:DF:01:7B:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df5e7a7f-2441-416b-97a9-cc49487efe34/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df5e7a7f-2441-416b-97a9-cc49487efe34/c99d0ed3c62e673b2f301536cb9024d744015b7b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.60.220.0/22
                  200.110.208.0/21
                IPv6:
                  2803:a880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27870

    Signature Algorithm: sha256WithRSAEncryption
         9b:2b:80:fd:2e:8e:92:7e:b0:65:fc:6b:84:d4:c4:ea:37:93:
         72:08:1e:a6:58:6e:e2:52:19:af:20:aa:8b:84:36:38:c4:7f:
         fe:69:f0:7f:fa:be:4d:f4:de:f6:2c:bc:78:c9:19:46:9a:72:
         68:6b:ab:af:1a:c7:2f:bc:5d:a7:d8:1b:a9:b6:d2:c5:49:28:
         3e:0e:4f:79:00:cc:02:12:2c:d3:88:91:77:44:d6:2d:21:67:
         4e:21:e5:89:4a:97:2d:36:ac:34:c7:36:33:5f:dd:76:36:31:
         d6:6c:d8:ea:65:e2:6b:67:70:86:f7:c6:4c:30:c9:f8:0b:93:
         6c:f1:8e:d7:82:6f:04:86:0f:ae:70:e1:bf:5b:4a:e4:30:85:
         38:76:8c:e7:ab:e9:cd:c4:34:f1:e3:f0:07:d4:90:61:fd:3c:
         62:b9:8e:90:a7:19:8d:0e:f7:58:53:97:f2:12:1f:1d:17:2c:
         18:c2:ee:50:5d:53:ec:b4:d0:da:f0:9b:4c:cb:c9:f0:b8:99:
         2b:10:87:c5:f7:8f:d5:7a:01:64:46:c5:32:7b:41:6d:a4:90:
         d0:b7:e2:9e:4e:6d:7b:2e:a0:f8:79:54:25:cf:d6:a0:d9:f4:
         ba:60:df:b1:71:15:ac:a9:d4:c8:66:1c:fb:dc:b8:0e:ea:df:
         10:e1:aa:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----