Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed744a5228386a98588ca2053b3091c08d059276.cer
File:                     ed744a5228386a98588ca2053b3091c08d059276.cer (raw, json)
Hash identifier:          lc1IJL8gBCFJE4aJPu8LwaIYSlT4zpOaKK2IzklCvDo=
Subject key identifier:   E4:5F:4E:5D:D6:21:83:4D:7A:FC:7A:72:42:E3:B1:CA:86:07:7B:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6059D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1af6ef8a-0440-41b9-9d57-c9b7a558a45b/ed744a5228386a98588ca2053b3091c08d059276.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1af6ef8a-0440-41b9-9d57-c9b7a558a45b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 21:05:05 +0000
Certificate not after:    Tue 22 Oct 2024 18:32:41 +0000
Subordinate resources:    AS: 272982
                          IP: 190.9.68.0/23
                          IP: 2803:be90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15074717 (0xe6059d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 21:05:05 2023 GMT
            Not After : Oct 22 18:32:41 2024 GMT
        Subject: CN=ed744a5228386a98588ca2053b3091c08d059276
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:6f:91:92:30:b4:99:f5:1c:c4:fb:f7:fc:0a:
                    c1:94:1e:b2:36:7f:51:eb:8b:00:5c:eb:16:1b:1c:
                    4f:3f:2b:d6:0b:5f:2b:9c:09:08:20:8f:bb:cf:9f:
                    53:43:26:b9:19:c4:7c:56:3b:05:53:36:53:08:90:
                    93:fe:31:7e:fe:df:2e:06:7b:9a:6a:d6:a7:73:20:
                    31:51:1c:e8:0d:a0:d6:89:42:35:af:dc:59:8e:83:
                    31:31:93:7d:16:70:fa:9c:25:e9:ae:5e:22:5c:ab:
                    da:34:7d:6e:3a:50:81:8b:d8:d9:5d:55:f3:9b:0c:
                    18:90:63:38:15:28:5b:f1:28:ba:63:ee:26:08:c7:
                    a2:f5:ff:65:75:2e:fd:de:cd:54:21:7e:d8:6b:52:
                    eb:71:c6:0b:8a:df:fa:9b:d3:91:92:19:8a:f2:09:
                    ad:d4:bc:c8:bc:44:3d:68:8a:a4:07:ce:8d:7d:de:
                    a7:99:16:df:17:0e:55:e2:dd:bd:6a:a0:2f:c6:c1:
                    58:97:da:d4:de:60:98:ce:51:5d:5a:11:8e:38:14:
                    53:5c:0b:67:96:f3:d1:22:f8:12:c2:8f:18:2e:5e:
                    76:e4:1c:8b:82:71:12:46:7a:e6:67:cf:49:99:0c:
                    b1:5a:ca:73:4f:36:27:c7:9f:09:44:d8:3f:a2:a1:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:5F:4E:5D:D6:21:83:4D:7A:FC:7A:72:42:E3:B1:CA:86:07:7B:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1af6ef8a-0440-41b9-9d57-c9b7a558a45b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1af6ef8a-0440-41b9-9d57-c9b7a558a45b/ed744a5228386a98588ca2053b3091c08d059276.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.9.68.0/23
                IPv6:
                  2803:be90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272982

    Signature Algorithm: sha256WithRSAEncryption
         16:59:8c:af:97:ec:1c:ec:50:56:6f:8b:08:1c:60:2a:84:92:
         05:40:ac:e5:fc:b2:2b:92:5a:06:cd:1e:eb:df:de:b8:fe:3c:
         33:4d:f2:e6:b2:c9:58:aa:c2:89:20:02:1b:ad:ee:12:7a:ff:
         bf:5a:1a:6a:61:e0:3a:7c:5a:31:32:a6:7f:68:e4:bf:9f:c5:
         cf:06:54:1d:f1:06:68:d2:a2:6b:22:0e:4e:97:0a:80:60:18:
         e9:06:3e:ac:3e:ce:a7:eb:70:ed:cc:5f:bd:11:81:cb:fd:07:
         82:e6:37:6f:d2:a5:1f:c8:53:bb:ae:4c:3e:03:2d:21:9c:86:
         55:75:a4:c0:cd:9a:76:bb:cb:5f:c4:3a:a6:3b:e4:45:91:aa:
         76:94:8c:ca:7b:c3:39:4e:e3:77:d5:12:83:0c:1e:30:4a:00:
         b2:1d:c2:ec:90:15:23:d5:b8:aa:f0:fc:c5:0e:d4:4a:7e:0a:
         45:31:29:f0:93:fa:99:5d:1f:91:19:88:74:11:5f:8e:47:d4:
         04:39:8d:40:97:5f:51:83:a2:2e:fe:46:2d:8a:06:13:7b:60:
         f0:e0:da:1c:ab:1e:5d:c3:04:c1:b6:24:84:d0:cd:0a:d3:6e:
         97:e7:13:3e:f9:96:50:38:1d:6f:dd:d3:e1:45:f5:ec:b5:85:
         6f:cc:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----