Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.cer
File:                     cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.cer (raw, json)
Hash identifier:          FNsB1u1SfkFCuCvBMYrXFMUcNNdD+zFX+ZWJVd35YXQ=
Subject key identifier:   4B:BB:65:D6:78:FD:C6:D1:04:8D:59:C2:E5:6C:F5:21:DA:14:DF:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102B37D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 02 Dec 2023 00:05:02 +0000
Certificate not after:    Tue 25 Feb 2025 22:42:48 +0000
Subordinate resources:    AS: 264696
                          IP: 168.232.168.0/22
                          IP: 2803:9340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16954237 (0x102b37d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  2 00:05:02 2023 GMT
            Not After : Feb 25 22:42:48 2025 GMT
        Subject: CN=cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8a:4b:b6:f1:2d:39:85:46:ec:af:d8:f2:f6:
                    b3:91:b9:83:90:87:0d:c2:45:e0:e1:2a:9f:9c:56:
                    74:a6:f3:13:f4:5c:dc:6b:d1:4e:d5:27:88:16:41:
                    f6:68:97:d5:e7:5d:7f:2a:9a:49:dc:d8:4d:74:92:
                    98:de:c0:5c:f5:fc:da:ee:be:7c:42:0c:83:f1:2d:
                    e8:e7:26:7c:ee:97:0a:f7:87:ca:ef:d2:59:37:81:
                    61:fa:f6:78:fb:fc:74:bb:ab:23:f6:bd:9d:f8:65:
                    26:80:09:fd:92:f7:27:0a:ef:58:33:8b:32:73:60:
                    85:b5:07:80:b6:ea:b7:c4:d8:8c:a4:f9:f7:30:ad:
                    a1:6a:9b:2b:c6:29:d6:f8:93:f2:04:da:59:6e:9f:
                    0e:a3:a7:3d:c9:43:71:6d:97:5f:00:ca:d0:4c:9a:
                    03:0f:e5:0f:45:51:5c:db:4c:51:6d:77:37:84:c4:
                    e8:ba:e3:e8:8f:f6:8f:87:61:04:5c:ae:66:b4:50:
                    fd:8e:61:05:bf:97:6c:46:d3:c6:12:c0:3b:62:bd:
                    97:95:ba:c2:7d:4a:61:d7:2a:a0:1c:1b:ce:37:73:
                    72:3c:6e:4b:8a:2c:a3:4a:4c:b9:af:ac:ad:0e:8d:
                    5f:28:58:2d:85:88:09:00:56:65:fd:ca:65:e0:b2:
                    c3:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:BB:65:D6:78:FD:C6:D1:04:8D:59:C2:E5:6C:F5:21:DA:14:DF:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ace8b0b1-8025-4d54-8a8f-09ea9f1fc049/cb25c1b8e5b5e9b0773a5ea5a4cbcbc15f3aa968.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.168.0/22
                IPv6:
                  2803:9340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264696

    Signature Algorithm: sha256WithRSAEncryption
         88:2f:64:86:63:b0:a6:b0:11:d8:7f:18:2c:f5:6b:24:be:b4:
         a6:0a:98:d4:ad:26:74:79:ef:c7:b0:c6:76:79:3e:60:a7:01:
         51:1e:8d:80:dc:6b:40:e4:15:3b:4e:b4:5d:8c:83:f8:9c:30:
         ba:e5:56:12:15:cf:98:69:57:b8:f7:8d:58:ac:56:35:ca:68:
         25:b2:bb:90:1a:fc:74:36:07:f0:d8:f1:a4:04:25:6f:5e:1d:
         2b:63:a2:5c:42:f0:5d:a1:0d:ab:12:40:30:59:b3:d4:8f:04:
         cf:a0:71:b5:f1:3c:a6:d4:44:16:56:12:65:b3:32:10:fc:2e:
         3d:8e:a6:20:66:6b:00:66:18:cf:29:65:28:90:a3:5b:c9:90:
         d6:49:9a:c4:17:ba:bb:d1:e0:33:cb:d9:38:56:df:00:8a:3f:
         2e:67:ef:da:fd:3e:0b:71:07:d2:6c:e2:99:a0:4b:ce:ee:a5:
         85:11:65:41:80:0b:40:2c:19:8b:0d:30:91:c4:3a:d1:67:b0:
         12:fd:31:1a:95:f8:b4:c5:9e:38:88:38:0b:63:9f:ca:19:2e:
         0c:ac:1d:a5:1b:14:b9:83:62:d0:ae:5c:04:5d:92:94:6e:5a:
         ad:d1:38:95:32:7a:24:a0:1e:93:85:34:61:b6:85:4a:ec:d8:
         2b:f7:cc:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----