Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87e3b33541cf9b0557a56b77e05aaf82d7e92c4.cer
File:                     d87e3b33541cf9b0557a56b77e05aaf82d7e92c4.cer (raw, json)
Hash identifier:          9hQhTDcJpi/BVKrCM8DNQhUolZ9+FkG4UCvIb0zrj40=
Subject key identifier:   BA:05:1A:FF:BB:FD:14:F1:E9:EF:4B:49:7F:A4:C4:94:A0:E8:19:C0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF0170
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/09a17080-6322-4c34-a726-c336bf26f533/d87e3b33541cf9b0557a56b77e05aaf82d7e92c4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/09a17080-6322-4c34-a726-c336bf26f533/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:50:10 +0000
Certificate not after:    Sun 17 Aug 2025 14:35:29 +0000
Subordinate resources:    AS: 266304
                          IP: 170.79.200.0/22
                          IP: 2804:35c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16712048 (0xff0170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:50:10 2023 GMT
            Not After : Aug 17 14:35:29 2025 GMT
        Subject: CN=d87e3b33541cf9b0557a56b77e05aaf82d7e92c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:49:70:d7:29:f5:98:b2:ee:e1:94:f0:f8:
                    19:47:04:3a:ee:c0:71:81:b6:5d:f1:00:a7:ad:e4:
                    57:b6:08:3c:ec:cd:2d:4a:a2:fd:f1:8b:0f:5c:ec:
                    f6:44:c9:88:21:6e:5d:8b:d9:2d:d1:af:4a:b7:4a:
                    46:34:ce:9b:1b:f4:cd:30:ad:c0:02:ff:53:a9:68:
                    df:54:3d:4e:8e:9e:cb:1d:df:f4:4e:36:68:38:83:
                    38:1a:96:04:02:ee:3d:c9:6f:93:75:85:bc:29:df:
                    dc:92:1d:98:c5:c2:d1:60:92:92:a4:f7:fe:59:dc:
                    ca:e7:72:27:71:55:14:b4:6f:e0:47:58:45:d8:70:
                    4c:8f:02:cf:b4:96:15:f2:69:f9:92:b5:c9:17:d2:
                    7e:60:1a:34:fa:2d:16:f0:a1:da:83:5a:65:9b:f1:
                    87:cb:c5:fa:55:b4:ca:75:68:47:85:54:f1:60:86:
                    0c:b3:15:c7:e3:cc:20:c3:77:e2:59:79:92:e2:ad:
                    2f:ed:47:fe:fa:c6:51:78:14:e2:6f:ad:a8:72:f4:
                    75:65:e4:85:04:4c:98:82:73:7f:dc:fe:84:79:73:
                    32:17:35:ac:70:d8:2b:71:7e:e2:d6:72:ee:ce:0e:
                    4b:48:70:44:be:d7:28:46:b3:bd:5d:8f:68:46:ea:
                    a1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:05:1A:FF:BB:FD:14:F1:E9:EF:4B:49:7F:A4:C4:94:A0:E8:19:C0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09a17080-6322-4c34-a726-c336bf26f533/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09a17080-6322-4c34-a726-c336bf26f533/d87e3b33541cf9b0557a56b77e05aaf82d7e92c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.200.0/22
                IPv6:
                  2804:35c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266304

    Signature Algorithm: sha256WithRSAEncryption
         89:31:f5:78:4c:a0:fd:a6:96:17:17:7d:29:82:a6:b9:e8:49:
         cb:14:c7:af:01:46:db:8c:c4:a7:1d:83:f4:2b:be:a7:9d:a4:
         de:6d:45:18:eb:6b:a0:43:1c:82:27:34:43:46:51:86:ee:39:
         1d:2e:f6:14:fa:04:ad:50:68:e9:fd:5a:27:5b:00:04:8a:11:
         ae:79:ad:a6:03:74:1d:10:95:69:8e:3a:66:c8:5b:f2:e9:2b:
         0b:7a:38:1b:f6:51:e8:89:87:0d:a8:57:7b:f8:74:5f:fd:0d:
         74:4e:e0:ad:c8:e4:4e:f2:69:6b:00:91:f2:61:b0:14:72:3a:
         40:e6:da:1a:6c:28:64:45:33:14:02:a0:43:17:b1:b0:fc:ab:
         0f:57:c8:dd:37:e3:4c:d0:47:34:c1:93:2e:bc:f8:99:3e:a1:
         10:b8:b5:36:74:a7:12:79:9c:f6:83:b4:1b:ce:8c:e7:38:ee:
         7b:f0:8d:1d:57:d0:51:24:14:18:ed:25:29:b1:8c:48:43:37:
         0c:f9:25:99:12:63:c8:25:97:54:46:19:cf:59:2e:35:a5:53:
         9e:93:02:75:2d:e1:19:77:36:3b:65:bd:a6:b2:2f:0c:49:a3:
         a4:00:fc:1e:2b:9c:0b:03:9a:5e:bd:f6:08:08:43:c7:c9:f2:
         11:7b:df:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----