Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb0d50fb966e4001e10ac528d57fe833560a5d85.cer
File:                     cb0d50fb966e4001e10ac528d57fe833560a5d85.cer (raw, json)
Hash identifier:          73JxFSYeHaswaOazmE9aX3UYugrwuIQnlBVlIDmwpzs=
Subject key identifier:   27:71:FE:F9:8F:EB:73:41:30:2C:D8:40:3F:8D:24:3C:47:AA:83:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB46D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/cb0d50fb966e4001e10ac528d57fe833560a5d85.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 11:37:33 +0000
Certificate not after:    Mon 10 Mar 2025 18:44:57 +0000
Subordinate resources:    AS: 267850
                          IP: 45.175.136.0 -- 45.175.138.255
                          IP: 2803:ec60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15419095 (0xeb46d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 25 11:37:33 2023 GMT
            Not After : Mar 10 18:44:57 2025 GMT
        Subject: CN=cb0d50fb966e4001e10ac528d57fe833560a5d85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:2d:b2:7f:d4:bf:12:95:95:cf:85:f8:1c:
                    f5:dc:16:8d:da:b1:24:3d:eb:51:fd:90:5a:ce:e7:
                    bb:db:f8:fe:d7:c1:f9:d2:0a:91:d9:a3:1e:c7:30:
                    53:23:32:77:62:81:1a:0c:37:f2:b8:65:fb:e8:ac:
                    52:02:24:2b:b1:65:70:1d:07:a8:f0:d7:d3:2f:61:
                    10:2e:85:98:3e:0f:d7:3a:05:bf:e7:2d:79:59:05:
                    a4:53:aa:36:e5:c2:36:22:78:71:fe:76:d5:c4:80:
                    29:98:09:c1:b2:3d:1f:00:a0:9d:5c:03:29:e5:79:
                    59:34:dd:97:18:79:69:4e:b3:f3:ed:b2:b8:52:91:
                    eb:fb:62:d6:89:e0:ad:2d:e6:46:9c:90:6d:b3:92:
                    9a:98:6f:77:55:b2:83:e5:e3:45:f0:3a:5d:90:b6:
                    c7:a1:9d:dd:9a:ee:20:77:0e:66:5e:04:32:72:45:
                    0a:c7:0f:1d:f8:39:7e:a8:a7:6f:47:d1:c3:b3:63:
                    f9:81:c9:a4:44:f3:93:99:fb:08:34:6f:ad:c1:16:
                    51:eb:d0:57:d6:f7:70:06:95:e1:52:1e:53:7b:a6:
                    aa:fd:5d:c9:d5:4a:42:63:38:44:41:fc:0e:4f:33:
                    82:5f:ee:fe:4f:3b:81:ba:5a:ca:ba:8c:36:8c:3c:
                    9c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:71:FE:F9:8F:EB:73:41:30:2C:D8:40:3F:8D:24:3C:47:AA:83:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dbfcb988-8a7c-459b-af49-dfa594a29a45/cb0d50fb966e4001e10ac528d57fe833560a5d85.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.136.0-45.175.138.255
                IPv6:
                  2803:ec60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267850

    Signature Algorithm: sha256WithRSAEncryption
         95:8e:ea:56:98:27:e0:d0:0b:5e:ce:cd:73:be:21:4e:70:c6:
         29:d3:45:52:48:fb:0d:4a:ee:78:ed:93:39:40:81:06:5f:b5:
         24:8c:7d:54:c1:1d:a4:c0:d0:7d:85:b2:00:b1:7a:7e:41:79:
         8e:6f:d5:76:d2:35:2c:67:23:c6:09:43:3a:98:6a:09:7f:65:
         dc:26:38:75:2a:83:57:81:8a:16:dd:70:5f:ee:ff:6c:ad:da:
         87:37:31:9a:96:d6:ca:e6:ed:97:8b:7d:c5:78:07:b2:3a:1b:
         09:38:69:87:3c:6d:c9:11:d3:93:24:62:f0:27:f5:31:4f:d5:
         e6:1f:5d:86:5e:93:88:84:c2:b0:f9:b6:41:ca:b5:87:7e:e0:
         94:a8:82:82:c1:f9:53:69:71:22:25:42:a7:8a:f8:68:0e:7d:
         10:2a:c6:fe:fd:be:66:08:30:4e:2d:ca:8e:5d:fd:1d:6c:47:
         dd:97:91:cc:e5:a4:3b:d6:d0:cd:9e:67:c4:cc:58:1d:6e:4c:
         11:ee:f2:15:44:83:98:77:a6:5e:23:7a:99:e1:16:75:03:a6:
         55:ca:53:24:bb:14:3c:c5:cc:bf:a2:99:f0:09:70:3e:09:0f:
         34:43:b8:52:72:78:86:a0:1f:36:3d:e5:92:bc:58:05:72:ce:
         be:2c:8c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----