Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/01078bf32188a158723bda5fb6ab5ac48e3b0ff6.cer
File:                     01078bf32188a158723bda5fb6ab5ac48e3b0ff6.cer (raw, json)
Hash identifier:          Wpw3Wbve1puwB5s3cpYWq1HxFyXVut79HR6MQMIvokk=
Subject key identifier:   79:2F:2B:05:3B:D4:D4:FC:46:47:D4:8D:7D:81:25:5F:75:87:96:CD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F58802
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b58fa14-2248-4674-9a04-2689dbd0c934/01078bf32188a158723bda5fb6ab5ac48e3b0ff6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b58fa14-2248-4674-9a04-2689dbd0c934/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 20:17:44 +0000
Certificate not after:    Wed 19 Mar 2025 19:00:29 +0000
Subordinate resources:    AS: 263214
                          IP: 200.126.50.0/23
                          IP: 2801:19:2000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16091138 (0xf58802)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 16 20:17:44 2023 GMT
            Not After : Mar 19 19:00:29 2025 GMT
        Subject: CN=01078bf32188a158723bda5fb6ab5ac48e3b0ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a4:a2:7d:1f:d5:bb:65:2a:39:3b:0e:97:73:
                    6f:6f:e3:00:23:da:18:d5:1b:60:68:43:ea:57:2b:
                    b1:55:c0:a2:dd:5c:eb:81:fd:2f:d2:0e:6c:4f:26:
                    10:05:51:3f:32:c0:83:b5:99:42:75:89:68:6a:37:
                    fc:5f:e8:97:64:ad:cb:20:80:ee:fd:3c:a8:c1:eb:
                    5e:5c:8b:04:a6:2c:51:87:db:95:d6:73:e5:8b:99:
                    e6:85:98:45:19:a2:bb:02:3f:bf:3f:52:02:81:9b:
                    61:64:f7:43:92:1d:36:0a:5b:43:a2:d9:06:2b:e4:
                    14:5a:e3:12:60:f6:60:0d:f7:82:8c:77:bb:f4:8d:
                    b8:a6:d4:c5:6d:6b:49:92:19:8c:a2:bb:7b:3f:44:
                    06:cb:9f:71:6d:f8:f9:36:4c:d4:53:37:83:08:d4:
                    b0:a8:ff:8e:c6:fe:fa:27:4b:a7:d0:54:83:3f:9c:
                    42:42:48:49:7d:75:2f:6b:89:c2:7b:b4:18:58:01:
                    f8:cf:d9:09:ab:70:d0:6a:9d:90:ba:9e:54:96:e9:
                    b0:6f:6c:ce:1c:9c:2b:95:f8:34:87:88:be:de:40:
                    e6:5d:d0:2e:2b:58:9a:43:a9:91:d8:ac:5e:0b:fe:
                    9b:3d:ce:64:ec:04:11:de:30:0d:b0:70:4f:90:73:
                    a5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:2F:2B:05:3B:D4:D4:FC:46:47:D4:8D:7D:81:25:5F:75:87:96:CD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b58fa14-2248-4674-9a04-2689dbd0c934/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b58fa14-2248-4674-9a04-2689dbd0c934/01078bf32188a158723bda5fb6ab5ac48e3b0ff6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.126.50.0/23
                IPv6:
                  2801:19:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263214

    Signature Algorithm: sha256WithRSAEncryption
         95:b2:18:70:6d:d3:87:09:bc:e5:d3:51:aa:b6:12:20:b2:d2:
         88:54:a0:e9:0a:d6:40:35:1f:47:2e:c1:dd:81:5a:18:19:81:
         f6:2d:c9:76:39:44:df:4c:b3:d2:e3:4f:8b:fd:97:b0:cc:3b:
         87:ea:e2:05:64:ad:51:b7:a0:80:9b:e6:e7:97:02:c3:db:6d:
         1a:c4:fb:4a:16:c1:4e:25:8a:db:e1:d1:61:e6:80:9a:3b:28:
         a4:ff:b8:f7:cd:8d:27:2a:72:69:00:1a:4d:e1:51:ea:78:ea:
         d0:27:79:94:d1:64:d4:28:90:0b:fc:14:b6:10:11:4c:a7:4e:
         a2:51:8e:a4:04:c5:3a:7a:dc:d3:2f:d6:5d:7d:be:2f:b1:13:
         a5:d8:73:bb:37:ac:fe:46:91:1c:d6:28:39:8b:78:27:d7:96:
         66:98:ac:37:aa:51:eb:de:91:fd:b7:79:eb:86:ab:06:c2:4c:
         39:9f:7b:28:a3:d3:b1:7c:cd:c5:d4:bc:cc:8c:e4:24:9e:34:
         21:cd:f1:9a:7f:19:0e:a7:eb:51:4b:5d:02:09:01:f9:9e:45:
         dd:db:ab:4d:50:b0:e5:93:f9:88:c1:2d:37:78:ce:b8:90:b9:
         a7:ab:e8:f5:94:10:f7:37:03:3a:82:02:87:02:f9:bb:61:2f:
         22:78:fc:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----