Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3471c07cd0623ebca2d4a4743ee97b55aa59871.cer
File:                     f3471c07cd0623ebca2d4a4743ee97b55aa59871.cer (raw, json)
Hash identifier:          aMxUfxLMAm8AXzkeNm2wtKIWHaTBLmota/Yh5kcgSas=
Subject key identifier:   46:3C:39:5E:C8:2F:18:C7:2C:AD:60:4C:7A:8B:EC:AD:7A:51:80:55
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF7EEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/359445f8-39f4-48c3-96a9-b033dea3f6e7/f3471c07cd0623ebca2d4a4743ee97b55aa59871.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/359445f8-39f4-48c3-96a9-b033dea3f6e7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:23:32 +0000
Certificate not after:    Fri 25 Apr 2025 17:00:54 +0000
Subordinate resources:    AS: 262955
                          IP: 186.216.152.0/21
                          IP: 201.150.20.0/22
                          IP: 2804:e70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16744171 (0xff7eeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:23:32 2023 GMT
            Not After : Apr 25 17:00:54 2025 GMT
        Subject: CN=f3471c07cd0623ebca2d4a4743ee97b55aa59871
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:0d:0d:16:92:f7:6d:73:29:a0:a0:db:ec:bb:
                    41:2d:d1:e5:1a:6b:7c:8b:6a:ae:fc:21:1d:a5:8d:
                    39:2f:5c:09:a8:b8:6f:53:9d:b2:7e:07:5d:83:34:
                    2e:80:bc:1f:22:77:1f:8d:43:a2:6d:e4:c1:e2:b9:
                    9b:f4:9c:34:b0:ae:33:1c:7d:18:b7:7b:62:ca:0b:
                    99:68:a6:12:08:50:5e:5c:51:42:f0:73:54:e3:1e:
                    66:8c:15:d1:5f:c3:d4:53:ef:7f:99:ac:65:54:64:
                    cd:35:a3:b4:aa:0f:90:2f:01:ae:a8:63:ca:a2:ff:
                    1f:48:41:b6:d8:ea:65:24:57:5b:5f:d5:6c:96:26:
                    b3:66:a3:7e:d4:27:b2:ec:9c:e6:b5:e0:0e:07:86:
                    b3:a9:b3:51:a0:7a:db:4b:a2:f1:af:f5:3d:92:72:
                    1a:bb:b1:ca:07:19:af:c9:e1:00:47:d9:42:b8:93:
                    a7:5b:95:4b:d2:e6:02:29:27:32:2a:72:9d:3b:67:
                    5c:e5:d8:59:0a:66:3b:e5:fe:67:ac:d4:c4:f1:04:
                    a5:21:1a:64:e0:da:12:43:72:c1:07:fd:00:56:93:
                    98:44:45:9b:82:a8:9f:26:44:42:bd:67:fb:3f:85:
                    46:35:03:34:3e:53:65:0d:a5:3c:72:cc:fc:ac:ff:
                    5d:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:3C:39:5E:C8:2F:18:C7:2C:AD:60:4C:7A:8B:EC:AD:7A:51:80:55
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/359445f8-39f4-48c3-96a9-b033dea3f6e7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/359445f8-39f4-48c3-96a9-b033dea3f6e7/f3471c07cd0623ebca2d4a4743ee97b55aa59871.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.216.152.0/21
                  201.150.20.0/22
                IPv6:
                  2804:e70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262955

    Signature Algorithm: sha256WithRSAEncryption
         ab:ca:a7:20:24:b8:38:31:5f:a1:46:94:c8:69:18:78:cb:9f:
         cb:dd:3f:c4:5d:7d:d0:17:3b:3c:e8:17:c4:8c:43:aa:ae:a1:
         b3:08:9b:f7:b6:c6:2b:b1:7b:f4:68:ae:91:20:22:d1:fc:53:
         a8:b3:b0:86:d9:28:b7:d8:50:d3:f7:f3:0a:11:6f:6e:13:59:
         1f:96:75:3d:3f:49:2a:77:49:f2:ed:68:3a:74:99:a4:c9:3f:
         fa:eb:e6:07:86:51:6c:52:b1:36:d4:e5:86:eb:66:2e:0c:01:
         da:e5:c6:3f:77:4e:fe:24:8c:48:63:6f:0b:d1:6e:bc:67:2c:
         36:39:0e:c3:d3:f9:05:97:56:8c:cf:33:7f:74:a0:ed:db:a9:
         e9:a2:54:5a:76:f7:d2:2e:dc:58:ef:a5:47:82:44:78:4d:1c:
         3f:88:5e:c6:b0:cf:70:d2:0c:95:b7:16:ad:e6:27:4b:c6:43:
         ef:77:c8:8a:a8:8f:eb:87:58:eb:e1:9a:ec:c4:36:42:f8:0e:
         03:99:0c:29:2b:17:5f:98:3b:31:6e:b4:1e:20:88:f7:45:f4:
         b2:05:8f:6d:ec:32:18:c5:d9:17:f2:7d:6d:7f:74:38:4e:75:
         d1:4d:55:13:92:20:3a:5c:ea:b3:15:95:ac:2f:c0:dd:cc:c6:
         e6:94:6f:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----