Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb5b0c10d56da4f594ee8c4289c5e9b0fe7287ee.cer
File:                     eb5b0c10d56da4f594ee8c4289c5e9b0fe7287ee.cer (raw, json)
Hash identifier:          8kCY+v0pXC9fLhve6n11HUAMd6v6lYC1A+paq/+3JbM=
Subject key identifier:   86:DD:F9:45:E0:A2:12:E2:69:7D:B2:61:24:E7:0B:1B:D5:FB:AB:9B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEAB01
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d8800dea-23bb-4fcc-bf86-580e70d84c3e/eb5b0c10d56da4f594ee8c4289c5e9b0fe7287ee.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d8800dea-23bb-4fcc-bf86-580e70d84c3e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:05:13 +0000
Certificate not after:    Sun 23 Feb 2025 15:11:13 +0000
Subordinate resources:    AS: 262732
                          IP: 45.236.132.0/22
                          IP: 138.36.104.0/22
                          IP: 138.186.224.0/22
                          IP: 167.249.0.0/22
                          IP: 168.196.68.0/22
                          IP: 170.0.140.0/22
                          IP: 170.231.44.0/22
                          IP: 170.246.0.0/22
                          IP: 177.39.40.0/21
                          IP: 177.39.88.0/21
                          IP: 177.85.24.0/21
                          IP: 179.106.88.0/21
                          IP: 179.124.240.0/21
                          IP: 186.192.208.0/20
                          IP: 186.232.144.0/21
                          IP: 186.237.120.0/21
                          IP: 187.0.164.0/22
                          IP: 187.49.64.0/20
                          IP: 187.85.96.0/20
                          IP: 187.109.224.0/20
                          IP: 187.121.176.0/20
                          IP: 191.6.168.0/21
                          IP: 200.9.132.0/22
                          IP: 200.237.80.0/20
                          IP: 200.237.112.0/20
                          IP: 2804:b48::/32
                          IP: 2804:270c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16689921 (0xfeab01)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:05:13 2023 GMT
            Not After : Feb 23 15:11:13 2025 GMT
        Subject: CN=eb5b0c10d56da4f594ee8c4289c5e9b0fe7287ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:9d:06:b2:56:81:d6:4a:a4:72:c7:33:ff:
                    5b:d0:40:ea:30:2c:4b:05:ad:53:2c:9e:69:08:36:
                    f0:90:4b:07:2a:ad:b4:33:b2:4b:df:f2:01:cf:4a:
                    31:e6:40:23:25:7a:a7:e1:9b:80:e6:d8:30:45:88:
                    22:0d:8a:df:42:95:ef:f7:d7:81:5c:45:36:5b:0f:
                    cb:91:f1:f2:be:37:03:d0:9c:d9:0b:0f:24:dd:4e:
                    c5:db:3f:de:8f:1f:f7:bb:fd:11:c7:8e:8b:b5:61:
                    4d:5e:45:9a:68:89:60:46:c6:7c:e2:1a:a0:ed:9f:
                    2d:c0:be:8a:aa:36:58:fd:c3:b4:33:1f:31:60:1a:
                    45:6d:ce:86:2d:6e:64:05:68:dc:e9:11:e5:20:2f:
                    c7:b1:e7:25:1b:37:d6:12:35:3f:d9:91:3b:23:e9:
                    f2:ea:11:fe:e4:e6:76:9e:02:ae:dc:19:13:69:c6:
                    79:1d:2c:e2:b9:04:a1:c4:c8:2d:64:33:e5:58:d6:
                    a5:a0:e0:d5:f6:9f:12:3d:8b:ce:ba:c4:79:22:91:
                    9a:4b:62:7d:45:2f:c5:fa:28:9b:8c:46:2e:36:76:
                    82:bd:22:e3:a1:28:fc:cc:20:f1:a2:8e:9e:46:2d:
                    7d:9b:2f:57:c5:56:2d:83:7f:3d:85:24:d1:ff:b4:
                    00:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:DD:F9:45:E0:A2:12:E2:69:7D:B2:61:24:E7:0B:1B:D5:FB:AB:9B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d8800dea-23bb-4fcc-bf86-580e70d84c3e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d8800dea-23bb-4fcc-bf86-580e70d84c3e/eb5b0c10d56da4f594ee8c4289c5e9b0fe7287ee.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.236.132.0/22
                  138.36.104.0/22
                  138.186.224.0/22
                  167.249.0.0/22
                  168.196.68.0/22
                  170.0.140.0/22
                  170.231.44.0/22
                  170.246.0.0/22
                  177.39.40.0/21
                  177.39.88.0/21
                  177.85.24.0/21
                  179.106.88.0/21
                  179.124.240.0/21
                  186.192.208.0/20
                  186.232.144.0/21
                  186.237.120.0/21
                  187.0.164.0/22
                  187.49.64.0/20
                  187.85.96.0/20
                  187.109.224.0/20
                  187.121.176.0/20
                  191.6.168.0/21
                  200.9.132.0/22
                  200.237.80.0/20
                  200.237.112.0/20
                IPv6:
                  2804:b48::/32
                  2804:270c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262732

    Signature Algorithm: sha256WithRSAEncryption
         94:71:f1:21:16:45:7a:a2:2c:59:68:61:c5:48:73:19:fe:07:
         bd:eb:42:6a:c6:29:4e:c2:63:17:63:2c:9c:5b:ec:f7:3f:a4:
         95:af:de:4b:f3:1d:ea:85:0b:41:6e:92:33:b2:e9:ae:c5:66:
         b8:b2:00:51:5c:a6:e9:a4:6d:a6:90:eb:ea:b4:f1:03:7c:dd:
         8a:97:35:12:62:f3:fa:8a:9a:e9:76:91:f4:4a:49:b1:7e:f7:
         9c:d0:84:b0:da:cc:5f:46:da:f5:ca:37:60:ce:3d:cf:d2:59:
         8b:a7:6c:5c:87:32:93:5d:96:98:4b:15:5b:64:4f:3d:d8:69:
         3b:17:8b:95:7d:aa:da:01:dd:74:9a:27:70:ac:64:16:a0:c6:
         3e:75:6d:b8:ec:06:10:38:5a:1d:d5:77:44:94:61:41:e1:73:
         b6:83:8f:d2:5b:e7:4a:d4:ee:8c:fa:89:93:0a:f8:6e:4d:64:
         00:e0:3f:7f:4e:98:8c:79:85:0e:31:c4:b1:cf:bf:46:14:8d:
         77:37:3b:26:42:f5:2f:70:1d:30:89:58:26:90:f5:c5:d6:37:
         73:ef:4b:fa:b2:f2:3a:f9:27:a5:6d:7a:20:d3:45:0a:88:1c:
         32:18:a7:cb:21:56:ab:8f:af:1e:4a:90:82:65:c8:39:03:09:
         6a:82:96:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----