Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer
File:                     dd9b1c33269fd77ee0908dd34d4a659cafbb2430.cer (raw, json)
Hash identifier:          4QTvnXxQFAiekeuyM44t7DeyV5vLUC28S+1DQ9B+DvI=
Subject key identifier:   43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8C275
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 07 May 2023 00:35:53 +0000
Certificate not after:    Thu 06 Jun 2024 19:47:05 +0000
Subordinate resources:    AS: 266876
                          IP: 45.160.32.0/22
                          IP: 2803:3aa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15254133 (0xe8c275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  7 00:35:53 2023 GMT
            Not After : Jun  6 19:47:05 2024 GMT
        Subject: CN=dd9b1c33269fd77ee0908dd34d4a659cafbb2430
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:66:8c:8b:15:33:6d:2d:01:4c:8a:c5:a5:e3:
                    88:71:7a:7c:39:92:a3:4e:91:e6:66:15:3b:d4:13:
                    fa:84:cf:ae:2c:a6:ef:45:d3:9d:a6:ca:79:31:81:
                    04:f7:b5:38:95:8a:e3:6a:57:a9:40:d6:01:a9:cf:
                    c1:f3:50:66:c7:2a:c0:9b:c5:19:80:76:36:77:ef:
                    23:bf:d3:13:0a:44:50:38:91:f3:8e:60:17:19:0e:
                    60:01:15:cd:ff:55:4d:52:d2:00:26:8c:fa:ab:c8:
                    5a:cc:fa:7e:f6:b0:8d:ec:99:b7:8e:a9:52:ed:86:
                    64:6b:53:d7:59:a5:1d:d4:6f:e0:43:5e:25:43:b6:
                    d3:a0:be:d6:1a:9b:00:f2:84:b6:3d:a8:8b:b2:4d:
                    ef:fa:62:c1:e2:6c:40:6b:cc:da:11:3a:4a:e7:45:
                    1e:61:71:1a:cd:06:c9:11:e4:89:91:d7:9d:84:ed:
                    4b:5b:7b:5c:65:56:e8:33:20:55:0d:40:6b:f6:6c:
                    ca:c4:6e:85:29:ca:7b:4f:f1:b7:9e:88:bd:12:8f:
                    5e:27:67:d0:c6:13:26:38:79:3b:d5:d3:1d:74:83:
                    44:27:a7:e4:7d:1e:b2:2b:62:4a:fe:9c:88:47:54:
                    b2:78:a3:34:6a:e2:49:21:d4:70:94:cf:bd:fc:ec:
                    49:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:CE:D6:B6:77:7B:59:6D:D9:A7:34:06:01:AB:E1:E3:27:57:01:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/32cfc704-a7b0-4f22-8841-666bd3c39492/dd9b1c33269fd77ee0908dd34d4a659cafbb2430.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.160.32.0/22
                IPv6:
                  2803:3aa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266876

    Signature Algorithm: sha256WithRSAEncryption
         79:22:76:cd:30:5e:64:c8:44:a7:86:a3:a1:27:7a:5f:0e:ff:
         c1:22:7c:4d:71:ea:a5:3a:ef:17:5f:59:6a:1a:58:2d:ff:d6:
         ad:c7:30:cc:54:b1:2b:15:8b:6e:d8:bc:7e:b9:6c:c6:f9:94:
         f7:84:16:62:7f:18:05:a6:ba:fc:ea:99:e5:82:c2:92:9d:9b:
         47:8a:69:d7:b5:e2:d7:cf:0a:6b:75:0d:59:ee:60:82:19:6a:
         f3:01:0d:37:c9:f4:c9:8b:dc:9b:1f:8f:fc:97:ff:2d:77:59:
         58:b5:9d:ef:c5:ab:58:a4:6c:81:5f:c7:ec:52:b6:4e:ff:ff:
         83:e3:fc:62:2e:df:96:53:a7:c9:62:38:91:3e:91:4e:7c:ad:
         5d:f9:dc:3c:50:a5:c9:c1:d5:b6:22:10:97:8e:78:da:26:59:
         e9:18:89:1e:5d:3d:d9:ac:7b:f7:ef:72:22:e8:d2:c2:35:ce:
         a6:86:82:94:23:21:e8:14:62:67:2f:9c:8c:b5:38:99:3d:0c:
         2d:65:f9:99:6f:2e:2b:f4:fb:07:98:a1:f3:a4:53:ac:85:46:
         aa:64:1c:5d:19:13:76:d2:4b:75:fe:b2:9b:47:a5:84:76:c6:
         27:a7:32:63:e2:14:dd:15:69:ec:c1:e3:d2:ce:96:91:84:4e:
         ae:75:a0:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----