Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/077715b2159878dcd1d27f3088813661085e2c49.cer
File:                     077715b2159878dcd1d27f3088813661085e2c49.cer (raw, json)
Hash identifier:          EONp2cXlf0LLH/ebwqL6gShvWucdokLTtNRBcS6zcaQ=
Subject key identifier:   E4:89:24:98:3F:47:B0:DB:FD:9E:4C:8C:31:53:A2:CA:80:78:FA:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100964C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2d4fcc8c-0b1d-4b89-b091-853a3d5b1c01/077715b2159878dcd1d27f3088813661085e2c49.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2d4fcc8c-0b1d-4b89-b091-853a3d5b1c01/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:07:39 +0000
Certificate not after:    Wed 30 Oct 2024 18:04:27 +0000
Subordinate resources:    AS: 52950
                          IP: 189.8.128.0/17
                          IP: 2804:1f12::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16815692 (0x100964c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:07:39 2023 GMT
            Not After : Oct 30 18:04:27 2024 GMT
        Subject: CN=077715b2159878dcd1d27f3088813661085e2c49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:04:83:72:6a:e6:2b:e1:ee:8e:33:9f:80:ac:
                    e6:03:49:26:52:af:13:29:70:42:4a:e6:97:e5:94:
                    2d:02:e2:42:d3:df:a2:5b:8f:30:15:92:aa:12:bf:
                    33:6f:26:92:4b:b0:03:67:6a:e7:f4:5f:0e:8a:ca:
                    52:e9:dc:fc:bd:d6:1b:db:43:9c:c6:dc:d1:22:d8:
                    0c:b4:4a:7a:92:07:bd:16:83:fe:4d:3f:1d:a1:73:
                    a2:da:f8:67:59:fb:8a:40:ca:9d:10:91:6e:a4:49:
                    81:e7:a7:6d:fa:e0:c8:04:86:fe:e9:fb:9b:83:4e:
                    90:de:98:b5:89:be:8f:66:35:8d:c6:6c:70:67:51:
                    bb:52:ad:d4:2b:bd:a0:ad:90:49:8a:47:db:a4:55:
                    8e:a1:52:47:c6:99:e4:23:21:c2:31:b6:30:34:92:
                    e5:d4:91:a1:a0:df:eb:fd:ee:d5:89:01:c0:39:2c:
                    92:7a:ff:29:cb:85:84:8b:f8:91:9b:6a:ae:aa:a8:
                    66:47:a0:0e:0e:6f:4c:43:7c:2c:b6:45:8b:84:1a:
                    94:39:7b:d7:b5:fb:d6:ac:17:52:da:07:80:e6:ba:
                    b1:3e:97:3d:17:95:26:c6:06:7c:5c:e5:5b:f2:86:
                    e3:02:2c:3e:d9:f7:81:e4:1c:1d:79:2e:55:e8:bc:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:89:24:98:3F:47:B0:DB:FD:9E:4C:8C:31:53:A2:CA:80:78:FA:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4fcc8c-0b1d-4b89-b091-853a3d5b1c01/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2d4fcc8c-0b1d-4b89-b091-853a3d5b1c01/077715b2159878dcd1d27f3088813661085e2c49.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.8.128.0/17
                IPv6:
                  2804:1f12::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52950

    Signature Algorithm: sha256WithRSAEncryption
         7c:bc:93:d4:09:86:02:e7:1a:e7:59:f9:5d:c5:02:12:01:be:
         b8:29:6f:bf:26:d3:99:a3:bb:7a:ec:c3:07:68:60:e6:e9:f0:
         18:d9:9d:17:7c:6f:17:28:bb:ef:ad:b3:c9:4c:24:3a:2c:1c:
         af:97:f4:1a:8c:07:61:7b:75:75:77:38:27:88:35:5b:51:4b:
         ef:fa:67:9a:90:b8:c5:5b:a3:99:c1:5d:54:82:ac:d7:85:d6:
         35:6b:c6:87:0d:54:22:73:d9:76:fb:88:67:df:ea:87:b2:64:
         d2:6f:e3:b2:47:6b:f3:19:a7:26:e1:df:67:75:49:7c:86:a9:
         14:90:87:df:01:8e:2f:9c:58:7a:f1:4b:c6:bb:56:6b:1f:56:
         f2:5d:67:28:8a:07:b5:b8:6a:00:7c:89:02:bd:46:c4:92:14:
         17:d6:e3:be:3c:2f:ad:b4:e8:b7:10:2b:8a:de:61:eb:9d:93:
         a0:ee:1d:d2:2d:b0:06:ba:d6:7d:ea:a3:95:2a:8c:2c:b6:96:
         09:43:94:83:7c:db:a9:3f:a1:6d:be:17:4c:6f:6f:b4:b9:4f:
         68:8f:b3:4e:e2:12:6f:81:85:3c:c8:9a:8c:9f:34:d5:82:dd:
         e8:d0:2f:b2:c8:3c:a5:d8:a4:7a:ac:2f:e1:14:aa:1f:c0:41:
         00:a5:a3:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----