Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f62f44895d5ab3d4644227881ff702fbe7a4b248.cer
File:                     f62f44895d5ab3d4644227881ff702fbe7a4b248.cer (raw, json)
Hash identifier:          jd1r1laKElVySWYDZuvDQSD6fXvyqhKgZD60K5wyBpc=
Subject key identifier:   68:BD:A1:BB:51:A1:AA:C9:52:12:36:14:1A:D4:72:E3:64:F0:0A:50
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBD10E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c55dcf7-e531-4860-a3c4-32a1cad3bd17/f62f44895d5ab3d4644227881ff702fbe7a4b248.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c55dcf7-e531-4860-a3c4-32a1cad3bd17/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 19:34:55 +0000
Certificate not after:    Sun 24 Nov 2024 16:58:41 +0000
Subordinate resources:    AS: 267760
                          IP: 45.169.244.0/22
                          IP: 2801:1a:800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16503054 (0xfbd10e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  3 19:34:55 2023 GMT
            Not After : Nov 24 16:58:41 2024 GMT
        Subject: CN=f62f44895d5ab3d4644227881ff702fbe7a4b248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:0e:a1:c4:a0:75:ad:fa:e6:53:5c:7a:5b:72:
                    13:e6:15:f5:c9:97:51:25:d9:e7:78:ba:b5:39:d9:
                    e7:47:8f:9e:13:5a:0b:84:2f:2c:75:85:d6:1d:9f:
                    c8:25:81:a0:dd:53:55:8c:88:3d:c3:e6:9f:72:30:
                    81:bc:36:4f:fe:7f:50:47:c0:2f:c0:0b:e1:2c:07:
                    26:29:a7:27:b7:65:33:dc:83:ec:73:ff:95:cb:b0:
                    85:ac:42:56:88:b8:69:98:bf:eb:30:af:b8:a3:b9:
                    cb:b8:70:e8:8b:c3:f8:65:b3:9c:64:31:e8:7c:ac:
                    7d:d6:00:b4:5c:9b:1e:d2:f6:46:90:d8:94:cb:b9:
                    94:ea:20:97:d0:ab:01:ed:e6:3f:5a:6f:ca:e4:b0:
                    0f:88:ab:e5:e2:a2:61:19:6a:8f:d8:34:d1:f9:97:
                    30:63:f5:9c:de:91:f5:88:30:5f:45:f8:da:fa:14:
                    64:44:e4:60:eb:5b:a9:b2:55:54:3a:e0:e7:a1:00:
                    78:57:ce:2e:7d:5a:bd:05:ba:5f:33:40:36:72:fc:
                    8e:59:29:67:ae:9b:79:e0:ff:72:44:ad:81:e2:6f:
                    c8:4b:ed:65:0d:e6:e4:5e:a0:34:7a:e1:3b:17:1a:
                    2d:62:ec:b7:02:62:3c:18:7b:dd:f9:fb:5b:9f:14:
                    98:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:BD:A1:BB:51:A1:AA:C9:52:12:36:14:1A:D4:72:E3:64:F0:0A:50
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c55dcf7-e531-4860-a3c4-32a1cad3bd17/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c55dcf7-e531-4860-a3c4-32a1cad3bd17/f62f44895d5ab3d4644227881ff702fbe7a4b248.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.244.0/22
                IPv6:
                  2801:1a:800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267760

    Signature Algorithm: sha256WithRSAEncryption
         37:0f:12:7f:46:89:74:73:be:40:72:f1:c0:f3:5c:bf:75:49:
         bb:eb:19:f2:e1:eb:b8:a6:85:e2:e8:68:07:42:6f:7e:8b:3f:
         8f:3e:4c:bf:f2:7c:ec:03:14:91:9e:d9:a9:b9:8e:ec:ac:9c:
         0b:29:dc:46:4d:97:5e:ea:40:ec:03:7f:fb:c1:34:e7:95:03:
         e7:7b:bf:7d:85:22:7b:2e:cc:64:3c:2e:a6:4a:6d:59:6c:ce:
         67:d3:33:12:ba:ed:99:dd:57:a7:b0:69:1e:9e:41:1b:30:44:
         a8:ab:51:e0:19:dc:8c:3e:0e:e0:ec:cb:26:05:c6:d7:84:47:
         7a:75:6f:88:2d:c1:50:43:0b:6b:79:e9:54:5f:23:e8:b6:90:
         b1:6e:09:25:dd:b6:7f:0b:98:ce:61:85:08:46:6f:58:4a:46:
         8c:68:96:0e:e6:77:5c:9d:52:f8:7a:c3:b7:1d:5d:67:05:2e:
         04:3f:1b:35:95:55:f1:2c:b6:02:cb:c2:c0:c2:aa:7f:99:e8:
         d5:77:c8:af:6f:f1:fe:64:42:75:51:75:27:a7:97:23:51:ba:
         d2:56:6a:0f:de:0e:be:45:85:42:66:e8:0e:0e:aa:c1:95:89:
         1b:cf:99:eb:bd:ed:ec:d7:ff:df:1e:e5:3e:12:84:19:53:d7:
         30:8f:9c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----