Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.cer
File:                     cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.cer (raw, json)
Hash identifier:          4HHTc1RH7gvucP0TbIowH2o3fas/BXRkxhdlfEOda1Y=
Subject key identifier:   20:ED:5F:78:2C:4F:78:3A:93:08:89:B1:4F:E6:44:62:27:94:56:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3581E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 17:55:10 +0000
Certificate not after:    Sun 20 Oct 2024 04:00:00 +0000
Subordinate resources:    AS: 267742
                          IP: 45.169.36.0/22
                          IP: 2803:3da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14899230 (0xe3581e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 17:55:10 2023 GMT
            Not After : Oct 20 04:00:00 2024 GMT
        Subject: CN=cf32f89c33fc0cfad67adbc1d4a10a3113854f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:11:9d:6b:51:b9:e9:90:11:43:6d:8c:a5:e8:
                    a1:5f:1c:df:69:69:aa:d2:64:bd:58:74:06:43:62:
                    a5:37:63:23:a8:09:b3:cd:6e:45:7b:eb:c5:cf:bf:
                    d9:cb:1b:62:30:cf:eb:9e:07:a9:a5:21:2a:ea:44:
                    e0:5e:4e:94:27:09:25:7e:3a:92:36:0d:67:85:ad:
                    89:50:4c:e3:ce:7b:4f:3e:97:8b:32:de:93:e0:5b:
                    39:fb:4e:c5:39:4b:1d:db:7a:3a:59:ce:e0:fc:eb:
                    4a:c0:c1:8e:4f:2a:2f:87:86:60:1f:5d:fe:17:5c:
                    a4:f6:dd:5b:e9:16:47:b9:eb:70:6d:99:6a:df:28:
                    29:0d:8c:a2:da:60:e3:d5:81:1c:f9:66:32:2e:11:
                    a5:8b:24:9e:56:48:ac:c3:0e:8c:74:a4:06:8a:77:
                    9c:0b:cc:cb:cc:ed:b5:d0:32:18:38:51:d4:a3:a4:
                    c4:0c:a5:fb:b9:45:67:4d:36:aa:81:c6:10:df:73:
                    d2:8c:22:7b:75:3c:9b:bd:25:07:05:6d:f3:74:ce:
                    c9:06:aa:ea:61:da:c1:ff:9c:1f:b3:8a:04:1a:b1:
                    33:55:de:50:43:9c:03:08:66:60:60:a7:66:8b:bc:
                    0f:15:f8:56:40:fa:4f:79:39:17:c1:95:0d:92:58:
                    dc:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:ED:5F:78:2C:4F:78:3A:93:08:89:B1:4F:E6:44:62:27:94:56:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d043e881-1700-4b8d-8f45-255495dc5181/cf32f89c33fc0cfad67adbc1d4a10a3113854f7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.36.0/22
                IPv6:
                  2803:3da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267742

    Signature Algorithm: sha256WithRSAEncryption
         42:49:ab:cd:92:d5:ec:45:3c:6d:8c:7a:74:99:ec:60:14:3b:
         1a:79:37:59:4f:49:7b:7c:7a:1b:a4:5c:f1:43:5b:08:b9:13:
         ba:04:55:78:75:0b:62:6f:6a:4e:65:75:86:09:83:15:b5:d4:
         1e:93:49:96:4c:8d:88:b8:59:db:aa:09:c8:f9:0b:f3:a7:94:
         0e:4a:21:12:77:b7:ed:0b:5f:ca:07:46:68:da:2a:09:92:d8:
         23:2d:53:84:c1:ee:e7:60:c9:5d:47:50:9c:11:15:f6:3a:a6:
         c8:95:fa:c0:57:b8:2e:b0:dd:4e:10:57:76:9b:db:2f:fd:f3:
         25:4e:03:dd:f4:c8:02:1e:d9:93:38:ac:84:61:15:86:c4:11:
         c2:01:51:24:db:7d:5f:97:c9:d6:4e:ef:27:cc:f1:4c:0f:f6:
         00:e4:af:6c:72:74:2c:e9:58:be:7d:61:61:45:9e:24:97:1f:
         de:34:d6:8d:74:95:c2:ea:d9:2c:b5:98:03:2b:66:08:70:34:
         14:d9:e4:87:be:08:29:f2:83:66:e0:08:59:ba:46:88:f3:38:
         c3:37:18:06:19:ca:42:6b:4a:4f:97:4b:34:4f:50:1a:98:6d:
         f9:09:57:d3:f2:06:7a:88:76:a4:c2:63:19:06:e5:96:90:65:
         b6:01:51:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----