Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bf98aa831d2b9b7fe9049989c3161de15bd9ac0.cer
File:                     0bf98aa831d2b9b7fe9049989c3161de15bd9ac0.cer (raw, json)
Hash identifier:          Pr9yOfXKqVQAvoMh17lOTEhwG1wK3l6lteaMX4br9XQ=
Subject key identifier:   4D:CE:A0:80:A0:51:73:DC:72:23:75:7A:80:BB:01:CC:0C:9C:73:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF39B8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10d63190-be23-40e6-8818-de9a4dfc2cbf/0bf98aa831d2b9b7fe9049989c3161de15bd9ac0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10d63190-be23-40e6-8818-de9a4dfc2cbf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:11:33 +0000
Certificate not after:    Tue 24 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 28351
                          AS: 28573
                          IP: 177.32.0.0/14
                          IP: 177.64.0.0/15
                          IP: 177.80.0.0/14
                          IP: 177.100.0.0/16
                          IP: 177.127.0.0/16
                          IP: 177.140.0.0/14
                          IP: 177.180.0.0/14
                          IP: 177.192.0.0/14
                          IP: 177.235.0.0/16
                          IP: 179.105.0.0/16
                          IP: 179.152.0.0/13
                          IP: 179.208.0.0/12
                          IP: 179.232.0.0/14
                          IP: 181.213.0.0/16
                          IP: 181.216.0.0/13
                          IP: 186.204.0.0/14
                          IP: 186.218.0.0/16
                          IP: 186.220.0.0/14
                          IP: 187.2.0.0/15
                          IP: 187.20.0.0/14
                          IP: 187.36.0.0/14
                          IP: 187.64.0.0/14
                          IP: 187.104.0.0/14
                          IP: 187.122.0.0/15
                          IP: 187.180.0.0/14
                          IP: 187.255.0.0/16
                          IP: 189.4.0.0/14
                          IP: 189.14.128.0/18
                          IP: 189.29.0.0/16
                          IP: 189.32.0.0/14
                          IP: 189.39.144.0/20
                          IP: 189.51.176.0/20
                          IP: 189.54.0.0/15
                          IP: 189.60.0.0/14
                          IP: 189.100.0.0/14
                          IP: 189.120.0.0/14
                          IP: 189.126.16.0/20
                          IP: 191.176.0.0/12
                          IP: 200.155.192.0/18
                          IP: 200.160.96.0/20
                          IP: 200.170.0.0/18
                          IP: 200.189.80.0/20
                          IP: 200.218.32.0/19
                          IP: 201.6.0.0/16
                          IP: 201.17.0.0/16
                          IP: 201.21.0.0/16
                          IP: 201.37.0.0/16
                          IP: 201.46.240.0/20
                          IP: 201.52.0.0/15
                          IP: 201.55.224.0/20
                          IP: 201.62.96.0/19
                          IP: 201.74.0.0/15
                          IP: 201.76.16.0/20
                          IP: 201.76.64.0/19
                          IP: 201.77.64.0/20
                          IP: 201.80.0.0/14
                          IP: 201.94.160.0/19
                          IP: 2804:14c::/31
                          IP: 2804:698::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16726456 (0xff39b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:11:33 2023 GMT
            Not After : Sep 24 15:00:00 2024 GMT
        Subject: CN=0bf98aa831d2b9b7fe9049989c3161de15bd9ac0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:6b:5c:68:25:82:1b:83:b0:cf:a9:38:3b:
                    b9:67:ce:09:c7:9e:06:75:73:a5:bb:a4:20:67:f7:
                    fa:ce:59:19:57:e7:76:53:4a:62:de:d7:d1:62:b8:
                    7e:6f:0b:c7:88:06:63:4e:9e:d0:c6:75:5c:3b:8b:
                    1c:4a:df:7c:cb:f1:b8:b9:6f:7b:af:9d:69:c6:0a:
                    eb:1a:19:08:a5:af:ce:7d:48:d2:41:e0:86:5a:3c:
                    d7:33:86:a0:83:60:39:7c:a7:02:37:8a:dd:31:e6:
                    3e:04:be:9b:9c:1a:66:85:8d:0b:e4:e1:ce:16:c3:
                    7f:d7:fc:d9:55:07:ea:ce:f1:e0:58:9f:c5:78:6e:
                    cd:bc:79:f2:3a:59:79:02:3b:2a:fe:8e:91:c7:18:
                    54:45:c6:c3:99:8d:cc:75:9d:ad:fe:b2:5d:94:48:
                    23:dc:23:24:e9:55:1e:33:b9:be:00:a9:41:55:e7:
                    e5:10:96:8f:5a:4c:9d:3b:fe:5b:bd:2d:7a:0d:8c:
                    e3:1a:31:02:b4:5e:9a:f5:9d:cf:7c:2a:d9:a2:a6:
                    d7:eb:b6:cc:1f:ac:bd:28:16:21:8f:db:84:bc:ef:
                    66:bd:e1:11:c2:4e:82:95:d1:0e:c3:95:5c:a4:bb:
                    21:b9:2f:03:5c:0b:d7:37:b8:b3:a2:7e:82:ba:0f:
                    c3:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CE:A0:80:A0:51:73:DC:72:23:75:7A:80:BB:01:CC:0C:9C:73:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10d63190-be23-40e6-8818-de9a4dfc2cbf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10d63190-be23-40e6-8818-de9a4dfc2cbf/0bf98aa831d2b9b7fe9049989c3161de15bd9ac0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.32.0.0/14
                  177.64.0.0/15
                  177.80.0.0/14
                  177.100.0.0/16
                  177.127.0.0/16
                  177.140.0.0/14
                  177.180.0.0/14
                  177.192.0.0/14
                  177.235.0.0/16
                  179.105.0.0/16
                  179.152.0.0/13
                  179.208.0.0/12
                  179.232.0.0/14
                  181.213.0.0/16
                  181.216.0.0/13
                  186.204.0.0/14
                  186.218.0.0/16
                  186.220.0.0/14
                  187.2.0.0/15
                  187.20.0.0/14
                  187.36.0.0/14
                  187.64.0.0/14
                  187.104.0.0/14
                  187.122.0.0/15
                  187.180.0.0/14
                  187.255.0.0/16
                  189.4.0.0/14
                  189.14.128.0/18
                  189.29.0.0/16
                  189.32.0.0/14
                  189.39.144.0/20
                  189.51.176.0/20
                  189.54.0.0/15
                  189.60.0.0/14
                  189.100.0.0/14
                  189.120.0.0/14
                  189.126.16.0/20
                  191.176.0.0/12
                  200.155.192.0/18
                  200.160.96.0/20
                  200.170.0.0/18
                  200.189.80.0/20
                  200.218.32.0/19
                  201.6.0.0/16
                  201.17.0.0/16
                  201.21.0.0/16
                  201.37.0.0/16
                  201.46.240.0/20
                  201.52.0.0/15
                  201.55.224.0/20
                  201.62.96.0/19
                  201.74.0.0/15
                  201.76.16.0/20
                  201.76.64.0/19
                  201.77.64.0/20
                  201.80.0.0/14
                  201.94.160.0/19
                IPv6:
                  2804:14c::/31
                  2804:698::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28351
                  28573

    Signature Algorithm: sha256WithRSAEncryption
         6f:1a:32:0a:e1:f1:11:ea:69:e2:03:66:7f:47:32:40:4b:49:
         98:75:8f:d3:fd:4f:0b:8b:d0:11:03:5c:78:8d:f0:c5:fa:c5:
         89:22:e9:ec:b2:d1:8a:57:8e:f3:cc:7c:9c:17:01:a9:fc:94:
         6c:3a:a8:2b:4c:fb:e4:2d:c3:71:89:12:7e:c0:3f:f5:85:04:
         79:39:22:51:6b:b2:7e:e7:e8:37:c9:8a:27:e5:5e:7c:dc:c6:
         40:bf:00:0f:9d:61:b0:d2:f3:1a:ae:d2:c5:50:ef:b1:5d:13:
         dc:41:19:04:b9:78:d3:04:33:cd:61:a9:4a:70:3e:b3:b3:c2:
         86:60:0a:aa:ee:42:e1:23:9b:b6:9d:b5:4e:2e:17:cc:74:ee:
         9a:f4:09:9a:e9:67:0d:7f:6f:44:90:15:9c:14:fe:a5:7c:4d:
         59:22:8a:a0:dd:e6:6f:2b:82:01:f5:fa:f6:0a:e2:6d:b8:8a:
         3a:d6:88:e3:44:b6:5a:84:d9:56:9c:87:23:66:53:47:4f:d5:
         74:b9:ea:7e:7d:50:18:c8:d2:b6:78:d4:1e:be:a7:9e:5b:c3:
         fd:62:89:21:a4:01:ae:41:24:a2:65:a7:58:0b:8b:fa:7d:05:
         0b:8c:a3:9d:7c:fe:4e:f3:01:2b:e3:85:4c:5f:d1:c0:33:74:
         06:f4:aa:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----