Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b5507a2da69234c30b02629718454898f157cbd.cer
File:                     0b5507a2da69234c30b02629718454898f157cbd.cer (raw, json)
Hash identifier:          vmzfuJ5EwW3M72zmuVCpK60yPKeYEp5axZavZ0Y3+CQ=
Subject key identifier:   E3:3C:48:5A:00:C6:BB:F7:97:9B:B1:E8:51:E9:8A:48:F9:44:F5:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC37B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ab9758c7-9a1c-495f-be46-0aeb2d77066b/0b5507a2da69234c30b02629718454898f157cbd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ab9758c7-9a1c-495f-be46-0aeb2d77066b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 02 Jun 2023 13:49:02 +0000
Certificate not after:    Mon 01 Jul 2024 17:19:52 +0000
Subordinate resources:    AS: 271886
                          IP: 200.106.220.0/23
                          IP: 2803:afe0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15480758 (0xec37b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  2 13:49:02 2023 GMT
            Not After : Jul  1 17:19:52 2024 GMT
        Subject: CN=0b5507a2da69234c30b02629718454898f157cbd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b7:ad:63:ef:f9:ac:83:02:b5:f1:ce:8a:5a:
                    7e:48:f5:7c:0f:0d:61:b7:4e:2a:4b:e5:3d:89:b5:
                    ba:11:99:02:f6:26:16:87:9e:6b:d9:16:f0:b6:c3:
                    0e:8c:bc:4f:6c:6e:34:20:60:71:e0:f9:e5:35:c3:
                    85:8d:da:a7:92:36:14:32:ac:c6:9b:9e:e8:66:a6:
                    14:15:98:3c:07:24:cb:53:13:7e:53:e6:b4:c0:72:
                    ca:52:d4:46:7a:ec:21:30:73:16:44:ae:29:4b:6a:
                    84:f3:2f:a9:d5:96:ef:73:37:95:b3:a9:f3:f8:37:
                    bd:72:39:1c:e6:af:25:d7:1e:14:01:50:64:23:c6:
                    45:70:a9:70:bd:df:81:4d:48:42:75:38:a3:d9:19:
                    74:6b:c5:63:57:f4:9b:87:d7:ee:86:ad:8e:ed:6e:
                    eb:a2:2e:e9:a2:e7:ca:cd:8f:b8:ef:9a:d3:7c:93:
                    51:07:0f:77:86:9d:94:21:9e:33:2a:5a:de:cb:c7:
                    4d:d0:5c:6e:5e:da:d4:aa:ae:fa:f7:c1:f4:06:9d:
                    a7:94:c5:4d:f7:b4:d0:80:e7:7e:77:d2:ba:e9:0d:
                    08:0c:86:df:15:fb:2e:93:a0:74:de:f6:24:c2:d3:
                    43:53:c2:71:3a:7a:52:00:03:62:4b:c3:40:fa:db:
                    c3:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:3C:48:5A:00:C6:BB:F7:97:9B:B1:E8:51:E9:8A:48:F9:44:F5:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ab9758c7-9a1c-495f-be46-0aeb2d77066b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ab9758c7-9a1c-495f-be46-0aeb2d77066b/0b5507a2da69234c30b02629718454898f157cbd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.106.220.0/23
                IPv6:
                  2803:afe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271886

    Signature Algorithm: sha256WithRSAEncryption
         a7:85:1b:2d:b5:a9:6b:06:08:9c:8f:1f:f4:0e:9a:22:72:c2:
         2d:d7:a4:d8:4f:83:de:15:07:74:05:07:b3:33:6a:e5:31:fb:
         f9:7d:0f:af:3a:00:e2:96:51:92:cf:c3:95:48:19:c3:4e:5b:
         cc:2b:de:66:05:e0:97:c0:77:36:5d:c3:dc:d0:e7:89:d7:3b:
         22:00:d9:0e:51:46:67:dc:aa:f7:ad:af:39:0d:d3:98:c9:38:
         f6:7d:76:db:68:2a:cb:7e:85:74:8c:b0:e3:1a:7c:a1:4f:04:
         10:82:92:a9:d0:ee:66:bf:43:cc:bd:cb:93:c7:9f:33:07:b0:
         c7:ae:26:c0:f6:5a:e9:6f:63:bd:56:44:25:67:aa:42:cc:92:
         05:63:4d:83:7b:b7:e8:d3:ac:6a:b6:03:c4:2b:37:b3:5e:1c:
         db:53:ff:fb:6c:ee:bc:8c:94:a1:1e:dd:3a:af:f6:7f:2a:da:
         f2:92:71:42:49:69:81:f7:53:a0:ed:da:3c:d2:73:6a:5a:1a:
         a1:53:a1:5a:43:2b:71:a9:94:59:66:6e:71:b4:94:e8:05:e3:
         40:f6:c0:f0:c3:51:97:08:5b:b1:6f:39:2b:ee:5f:4f:43:74:
         24:b4:65:96:6d:22:2f:79:64:32:aa:04:d0:50:a2:f7:d0:43:
         9d:ec:f2:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----