Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d24df01db7376a68ad3131e82dcde7313633c845.cer
File:                     d24df01db7376a68ad3131e82dcde7313633c845.cer (raw, json)
Hash identifier:          KcGHUO0T2vqUOgDXu2fp+eV967zJtojsnpP3jrOtQl8=
Subject key identifier:   50:3C:CA:08:5B:5B:74:D6:F3:F6:C3:D0:97:BC:82:9D:81:04:CD:E5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF1E20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a528419-0486-45cc-9d6c-683b709ffa38/d24df01db7376a68ad3131e82dcde7313633c845.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a528419-0486-45cc-9d6c-683b709ffa38/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Jun 2023 14:40:11 +0000
Certificate not after:    Fri 14 Mar 2025 15:00:00 +0000
Subordinate resources:    AS: 263229
                          IP: 201.131.67.0/24
                          IP: 206.223.130.0/24
                          IP: 2801:1c:2000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15670816 (0xef1e20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 22 14:40:11 2023 GMT
            Not After : Mar 14 15:00:00 2025 GMT
        Subject: CN=d24df01db7376a68ad3131e82dcde7313633c845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:72:f0:8b:59:ea:6a:f2:18:ad:e0:27:16:
                    dd:c0:d4:96:20:17:d9:53:e4:d5:95:93:0c:dd:6d:
                    46:57:4a:f8:75:b9:51:6f:0e:1c:3e:18:c6:06:ff:
                    6f:a7:2c:73:b6:a9:d6:48:79:22:f0:9b:a0:57:13:
                    ce:64:2d:52:14:c8:74:43:3b:59:9d:6d:4a:22:74:
                    e4:d3:2e:86:84:7d:f4:1b:0e:95:cf:43:d6:ab:f6:
                    ac:a0:b6:8f:c6:0e:fc:6f:b2:18:b9:4a:ca:bf:29:
                    1a:72:97:f6:22:42:49:9d:20:47:01:a9:98:9d:be:
                    25:63:9a:ce:1f:29:f3:bc:7a:b9:f4:0c:7d:dc:66:
                    b8:43:de:91:a3:9f:e8:62:4c:a5:3b:75:4c:eb:2f:
                    15:06:fd:df:73:35:68:4d:51:fa:eb:12:43:8e:b5:
                    92:6d:fd:f9:33:e9:c1:b6:d1:03:8e:7a:63:7e:3e:
                    27:72:2a:8a:6a:7c:38:6a:b9:bd:06:76:8a:91:55:
                    fd:ea:c2:a2:d2:07:cd:63:c7:3c:3f:f2:94:2e:b0:
                    9f:c0:d8:5a:15:2d:71:d2:c6:3f:ef:9e:f9:cd:18:
                    33:47:e0:93:a3:47:45:61:25:4e:0e:39:80:d5:47:
                    9f:15:4a:89:a8:20:e7:1b:9d:be:07:de:e3:f1:07:
                    0f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:3C:CA:08:5B:5B:74:D6:F3:F6:C3:D0:97:BC:82:9D:81:04:CD:E5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a528419-0486-45cc-9d6c-683b709ffa38/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a528419-0486-45cc-9d6c-683b709ffa38/d24df01db7376a68ad3131e82dcde7313633c845.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.67.0/24
                  206.223.130.0/24
                IPv6:
                  2801:1c:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263229

    Signature Algorithm: sha256WithRSAEncryption
         79:05:34:68:73:d3:db:23:23:bb:fd:53:68:30:d0:25:5e:ad:
         c7:3e:d7:ac:d3:ca:27:41:bf:98:65:28:e0:a4:56:1a:f0:ff:
         d5:5e:c0:25:dd:99:ee:e0:69:98:08:08:7a:d1:51:f0:0f:b0:
         74:c4:dc:cc:dc:d4:d5:3f:55:d8:eb:e9:e0:b1:24:eb:10:8e:
         65:36:44:5b:6a:ae:47:8f:aa:c9:2d:4b:54:59:f3:38:51:2a:
         2e:0f:51:aa:95:07:f5:78:c6:07:72:79:be:a6:23:1c:71:d2:
         da:3b:43:b3:eb:1f:84:d8:d0:b9:6a:62:15:18:06:55:51:b4:
         47:a5:5e:de:ab:e5:40:bd:0b:81:63:56:3c:76:e9:87:d5:bd:
         78:e1:b0:7b:a5:59:2d:33:7e:d1:7a:d4:58:51:c5:2a:04:ad:
         b1:a4:96:13:dc:df:8c:27:3e:0d:9b:92:df:97:c3:90:12:3f:
         40:8c:d0:37:08:f2:71:47:c6:27:0c:99:14:54:65:6d:ee:df:
         82:a6:4a:e8:cf:45:40:62:53:80:85:86:0a:3d:79:c7:64:37:
         0b:09:90:ab:4b:15:fe:d3:1f:34:e3:d2:f3:e1:91:e0:68:0c:
         ec:59:e1:71:de:b4:3b:3c:33:52:b9:37:98:59:e2:08:0a:e7:
         6d:ec:52:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----