Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fe18fb06df19b1dff40daebcb4dc0ef7aa21d8ab.cer
File:                     fe18fb06df19b1dff40daebcb4dc0ef7aa21d8ab.cer (raw, json)
Hash identifier:          lI75crH24Ef+1UQ96j2UVulhEAeiDk9YPzTGBWQKC0U=
Subject key identifier:   03:7E:BE:3F:32:43:73:77:BA:F8:4F:BD:2F:B0:3A:02:9D:DB:F1:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE7FB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1026b2bf-6f5e-45b8-9f6e-2b7b6fced893/fe18fb06df19b1dff40daebcb4dc0ef7aa21d8ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1026b2bf-6f5e-45b8-9f6e-2b7b6fced893/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 16:25:49 +0000
Certificate not after:    Sun 06 Oct 2024 12:55:45 +0000
Subordinate resources:    AS: 266406
                          IP: 170.81.120.0/22
                          IP: 2804:375c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16678833 (0xfe7fb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 16:25:49 2023 GMT
            Not After : Oct  6 12:55:45 2024 GMT
        Subject: CN=fe18fb06df19b1dff40daebcb4dc0ef7aa21d8ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8b:2c:83:2d:da:be:c6:c7:75:39:0b:a6:ce:
                    cc:e0:35:e7:b0:28:07:87:8f:03:92:9b:99:d9:62:
                    a6:59:a2:a1:db:6c:78:12:59:87:b2:8c:83:6b:9c:
                    06:33:31:f9:0a:6a:10:0b:87:4a:9c:93:5c:90:4e:
                    2d:65:3c:53:5d:4c:65:30:d0:28:6f:4a:1c:b7:de:
                    78:e2:b9:87:4b:4b:d2:c2:de:39:27:5f:fd:67:62:
                    8b:26:99:5f:23:e3:27:ef:79:7e:47:52:fd:1c:49:
                    d9:5b:9b:04:06:b6:2c:3e:25:4e:e6:c9:01:15:c4:
                    fd:62:e3:e8:56:13:81:76:d8:2f:1c:50:23:b6:7f:
                    da:6a:e2:94:18:3d:f8:c2:4e:2e:02:a7:1f:75:ea:
                    f0:22:4d:27:14:5a:be:0e:68:c6:14:f6:10:09:68:
                    e7:48:69:d7:8f:e7:b8:da:9c:8a:14:70:83:1e:e5:
                    a8:35:29:11:d2:b1:7f:ee:f7:90:5e:45:0e:37:14:
                    19:68:4d:47:8f:6e:21:82:03:92:cf:8b:dd:7c:77:
                    49:78:81:c7:50:c6:50:4b:0f:e0:a2:17:ee:3d:32:
                    4f:a7:86:cc:f4:31:5f:ce:23:13:0b:71:8c:f5:b4:
                    1e:24:2f:50:fb:dd:6a:d9:4a:39:00:db:ca:40:49:
                    61:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7E:BE:3F:32:43:73:77:BA:F8:4F:BD:2F:B0:3A:02:9D:DB:F1:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1026b2bf-6f5e-45b8-9f6e-2b7b6fced893/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1026b2bf-6f5e-45b8-9f6e-2b7b6fced893/fe18fb06df19b1dff40daebcb4dc0ef7aa21d8ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.120.0/22
                IPv6:
                  2804:375c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266406

    Signature Algorithm: sha256WithRSAEncryption
         5b:02:4d:5e:e8:79:fd:35:e1:25:4b:f4:3c:f5:5a:7e:21:95:
         bf:8b:b7:b3:d8:cd:6b:cb:19:75:32:c1:1c:df:e4:13:9b:1b:
         33:21:a3:fb:77:d6:02:1b:6b:65:32:cd:c0:3e:fe:e6:e7:d0:
         23:1e:4c:64:5b:aa:fd:cb:b6:c7:7c:26:39:4a:5e:d1:cf:58:
         2d:52:3f:f1:cf:63:5c:f3:ea:ea:a9:68:bc:3d:c7:f4:d5:be:
         91:38:05:42:b3:ee:5c:62:ae:34:6a:86:a3:56:30:f6:f5:c4:
         48:ea:bd:b4:95:45:7e:73:6a:04:60:d7:66:7c:a2:55:b1:66:
         14:98:73:56:29:98:4b:cd:f1:21:b2:66:1a:a7:f3:f5:3a:ac:
         30:75:83:22:16:f0:94:bb:96:86:fb:bf:cd:72:8f:4f:95:d6:
         a3:b3:6f:33:a1:7d:8e:da:a1:60:42:f2:95:eb:50:26:7f:0e:
         65:9e:fb:32:6d:27:f8:36:47:8f:13:1f:fd:e7:08:93:69:a4:
         a1:51:d6:2f:09:1f:e1:55:f2:06:58:9e:60:84:30:9e:6c:10:
         8b:cc:f2:e3:28:8c:97:84:39:ea:d4:f7:7f:2a:44:2d:a7:51:
         51:c3:9a:e0:ee:a4:69:96:43:2b:6d:84:cf:82:fb:02:0c:04:
         d4:6a:84:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----