Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d877a1c02680cb09c37436051c5dc6c8fc2b2eca.cer
File:                     d877a1c02680cb09c37436051c5dc6c8fc2b2eca.cer (raw, json)
Hash identifier:          pGNeARcJvHQVyw7VRqGEiz/kFVpUPIlq80GtDwEbQ2E=
Subject key identifier:   14:26:B0:3C:54:A7:0C:31:95:52:FC:A4:8D:1C:D1:67:EF:19:CA:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEC055
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fa1a950f-f862-4c3a-992a-a641d71712ad/d877a1c02680cb09c37436051c5dc6c8fc2b2eca.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fa1a950f-f862-4c3a-992a-a641d71712ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:11:39 +0000
Certificate not after:    Wed 30 Jul 2025 18:50:58 +0000
Subordinate resources:    AS: 28220
                          IP: 45.4.64.0/22
                          IP: 138.0.100.0/22
                          IP: 168.227.108.0/22
                          IP: 168.228.68.0/22
                          IP: 170.82.92.0/22
                          IP: 177.89.0.0/16
                          IP: 177.137.192.0/20
                          IP: 179.96.192.0/21
                          IP: 179.96.240.0/20
                          IP: 179.190.128.0/17
                          IP: 186.192.16.0/20
                          IP: 186.193.96.0/20
                          IP: 186.208.208.0/21
                          IP: 186.235.0.0/20
                          IP: 186.236.192.0/19
                          IP: 186.251.112.0/21
                          IP: 187.49.192.0/20
                          IP: 187.60.64.0/19
                          IP: 187.61.128.0/17
                          IP: 187.86.96.0/20
                          IP: 187.87.112.0/20
                          IP: 187.108.64.0/20
                          IP: 187.109.176.0/20
                          IP: 187.111.224.0/19
                          IP: 189.45.16.0/20
                          IP: 189.124.128.0/17
                          IP: 191.241.40.0/21
                          IP: 200.233.80.0/20
                          IP: 201.148.188.0/22
                          IP: 2804:54::/32
                          IP: 2804:2140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16695381 (0xfec055)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:11:39 2023 GMT
            Not After : Jul 30 18:50:58 2025 GMT
        Subject: CN=d877a1c02680cb09c37436051c5dc6c8fc2b2eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:04:6b:15:77:39:7e:18:89:e6:7a:c3:bd:78:
                    2b:62:b9:8b:a3:8d:a9:b2:d7:6a:16:d9:6f:a7:8a:
                    26:4f:70:d3:b9:6c:57:27:10:34:9f:77:c4:34:70:
                    78:cc:59:6b:29:5e:29:67:9a:9e:ac:b5:9c:75:2a:
                    8d:6b:29:23:4a:ee:3e:f0:fa:48:f4:79:0a:b9:d1:
                    f8:e8:00:6b:41:f9:99:68:1e:c0:e7:82:8d:7f:c9:
                    8b:80:0e:51:8c:8c:15:fd:12:b0:a7:ba:d6:31:76:
                    94:f4:bc:99:45:ce:0c:15:02:46:65:32:28:79:29:
                    7d:ee:1f:db:d5:ad:c2:dd:42:55:33:51:b4:b3:c0:
                    15:34:90:ba:35:8b:aa:ec:ad:a1:20:df:e2:ae:bd:
                    bd:2b:9b:b0:00:55:a4:95:f8:83:20:af:68:1b:ba:
                    a9:95:b0:f8:de:f4:16:97:b9:ae:46:b9:17:0e:ba:
                    49:22:34:b9:dd:83:e2:4d:a9:05:09:d4:6a:13:8c:
                    31:bd:08:a1:ed:9c:ee:84:ff:89:06:7d:27:f3:75:
                    44:55:bd:ca:77:29:1e:1e:a3:1b:38:f8:4e:f8:38:
                    24:5d:b6:2c:38:1e:96:08:81:be:5a:1d:1d:a1:6e:
                    68:bd:87:c8:a0:75:d0:f0:2c:87:a2:1b:76:57:15:
                    bf:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:26:B0:3C:54:A7:0C:31:95:52:FC:A4:8D:1C:D1:67:EF:19:CA:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fa1a950f-f862-4c3a-992a-a641d71712ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fa1a950f-f862-4c3a-992a-a641d71712ad/d877a1c02680cb09c37436051c5dc6c8fc2b2eca.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.64.0/22
                  138.0.100.0/22
                  168.227.108.0/22
                  168.228.68.0/22
                  170.82.92.0/22
                  177.89.0.0/16
                  177.137.192.0/20
                  179.96.192.0/21
                  179.96.240.0/20
                  179.190.128.0/17
                  186.192.16.0/20
                  186.193.96.0/20
                  186.208.208.0/21
                  186.235.0.0/20
                  186.236.192.0/19
                  186.251.112.0/21
                  187.49.192.0/20
                  187.60.64.0/19
                  187.61.128.0/17
                  187.86.96.0/20
                  187.87.112.0/20
                  187.108.64.0/20
                  187.109.176.0/20
                  187.111.224.0/19
                  189.45.16.0/20
                  189.124.128.0/17
                  191.241.40.0/21
                  200.233.80.0/20
                  201.148.188.0/22
                IPv6:
                  2804:54::/32
                  2804:2140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28220

    Signature Algorithm: sha256WithRSAEncryption
         bc:6c:c2:ff:c3:fa:9f:db:a6:a7:4d:f9:17:fb:30:a6:d1:47:
         f1:a9:04:eb:31:0a:55:22:f9:8d:c2:e4:91:63:89:0b:4b:99:
         58:d6:c5:dd:26:53:b7:ba:0b:36:a2:be:de:d2:99:14:f7:61:
         52:23:ba:25:c5:9a:4f:ce:8b:3d:55:1a:32:88:86:82:45:d1:
         78:5e:a0:c3:59:70:82:98:08:dc:df:f1:f8:68:41:d6:0e:60:
         70:ed:d9:bd:0e:5b:65:db:05:4a:97:eb:1e:36:c1:4e:93:b5:
         aa:4d:7d:2f:c1:60:8d:58:26:3b:a7:7d:94:83:cc:b9:37:c1:
         4c:b4:e1:3b:93:63:01:fc:74:80:1e:08:6a:56:6e:b3:92:da:
         35:9d:1b:68:7c:94:7d:31:fc:fb:8f:66:23:fc:cd:e7:4a:9e:
         e3:f0:f8:05:66:b5:43:69:1d:48:f0:e6:68:46:49:ed:b1:79:
         c7:84:fb:43:2f:f9:f7:4b:9e:15:45:98:8f:f0:bc:2f:30:22:
         eb:c7:7c:c5:b6:13:c9:4b:19:38:58:a4:62:15:5f:92:80:1c:
         81:51:c9:1f:ba:6a:d5:13:23:dc:d8:7f:aa:08:fb:5b:66:ff:
         cd:0a:52:ea:66:84:d0:f4:68:74:87:df:5a:e3:62:35:e8:6d:
         6b:92:03:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----