Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f238f48f9589e438344d7270f591ba9998af2415.cer
File:                     f238f48f9589e438344d7270f591ba9998af2415.cer (raw, json)
Hash identifier:          Zh70dVwenyP77K9wfO379+pjL5Nc8dAS4A9e0Jg404M=
Subject key identifier:   E2:3C:66:9C:1D:91:48:43:64:C4:41:B3:E9:9F:36:A3:9A:35:6F:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F981E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/f238f48f9589e438344d7270f591ba9998af2415.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Sep 2023 09:06:17 +0000
Certificate not after:    Sun 26 Jan 2025 20:38:39 +0000
Subordinate resources:    AS: 267808
                          IP: 45.172.24.0/22
                          IP: 2803:6060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16351715 (0xf981e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 14 09:06:17 2023 GMT
            Not After : Jan 26 20:38:39 2025 GMT
        Subject: CN=f238f48f9589e438344d7270f591ba9998af2415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:09:b9:23:95:77:09:1b:af:a9:82:ab:bc:3f:
                    14:2c:b3:39:11:6e:50:e7:28:37:55:84:88:7e:1d:
                    9a:1e:71:c0:23:49:31:b5:68:d8:61:60:8d:e1:ed:
                    4e:08:ab:ec:3b:83:73:40:da:4e:7d:39:1f:57:7f:
                    18:0e:06:49:a6:26:fb:01:ee:30:8c:6b:d3:43:7b:
                    31:07:1c:4b:89:aa:7e:c0:57:a1:1b:ad:52:3d:5e:
                    2d:1f:74:f6:d1:0e:fd:b2:1a:19:a4:64:1c:2b:00:
                    8b:bb:84:5f:cd:ac:78:00:63:dd:0b:b5:3a:46:68:
                    5b:ae:74:f2:cf:28:51:db:b8:0d:f6:b1:fe:7f:63:
                    8b:b4:c5:20:d2:8c:00:bc:77:b5:cc:82:45:d5:56:
                    bf:a9:28:53:c5:47:35:d3:aa:13:57:67:dc:b1:f4:
                    2e:2d:06:19:b3:56:cd:89:7a:1a:22:c1:13:34:7d:
                    88:5e:9f:a2:d4:e4:7b:66:3a:94:89:9d:2f:1a:44:
                    73:cd:23:b7:ce:48:4d:06:1d:28:a4:03:64:67:6d:
                    c3:d7:ce:7e:e7:26:4b:14:c4:4d:69:3f:9b:b1:08:
                    43:63:53:ad:1b:f9:3c:c4:71:49:0f:2c:c1:fb:50:
                    71:b6:e4:12:eb:9c:dc:09:27:41:1f:b6:d7:7e:a7:
                    c7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3C:66:9C:1D:91:48:43:64:C4:41:B3:E9:9F:36:A3:9A:35:6F:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4659922c-b6b2-4c64-bea7-f5f2da6f635f/f238f48f9589e438344d7270f591ba9998af2415.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.24.0/22
                IPv6:
                  2803:6060::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267808

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:85:f6:9a:9b:3b:59:93:6c:ff:18:55:c5:d1:de:e8:70:
         9f:13:08:e0:7f:9b:47:b3:dd:cb:d1:04:ec:fc:82:4c:94:d0:
         2e:46:97:18:24:0f:74:88:ae:ee:aa:06:03:f4:17:58:c8:2e:
         a3:80:9b:23:b3:27:65:ab:c4:44:9a:d0:9a:b8:08:da:8d:b3:
         98:e3:d4:cb:32:e7:46:26:3f:ca:e0:af:2f:3a:d5:35:e9:06:
         67:ce:c1:d4:35:20:82:c0:1b:63:55:55:08:54:8f:a3:26:2b:
         6c:7d:13:c9:5a:71:bf:3e:db:73:1a:19:62:04:06:24:15:e9:
         f0:4e:6b:63:5c:37:91:b6:c5:1e:73:41:93:2d:13:e3:2c:6c:
         d8:35:4f:ff:9f:f6:0d:1c:0b:4f:77:2f:ed:f7:64:ed:fe:e1:
         48:e0:80:1c:b9:d6:3f:2a:8a:79:f6:01:67:32:10:1b:0e:f2:
         a7:d7:f2:2d:be:1d:55:0c:1f:f4:59:e1:ac:0e:b8:e0:b7:6e:
         1b:7f:5d:71:3e:5e:5c:c3:a9:6e:fd:c0:44:85:3c:27:b4:9d:
         e0:f9:d3:6c:7f:4a:10:f0:06:e8:a3:cd:f1:3c:e9:72:04:c9:
         00:71:fc:ed:db:68:ff:8c:39:87:1b:fd:68:9e:fa:2b:bf:69:
         5b:92:f3:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----