Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d2f3c34eaa952f81789554aedc8cb1bd83027a1.cer
File:                     0d2f3c34eaa952f81789554aedc8cb1bd83027a1.cer (raw, json)
Hash identifier:          Aza7KJysw3kSn624btI/W/Hn4udy9Tc7aAXZrI/Ke6M=
Subject key identifier:   6F:FF:DC:0B:ED:27:CE:65:F5:0F:D3:5D:74:63:FC:A3:6F:17:CD:80
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103E00D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/0d2f3c34eaa952f81789554aedc8cb1bd83027a1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Dec 2023 20:58:43 +0000
Certificate not after:    Sun 03 Nov 2024 20:42:57 +0000
Subordinate resources:    IP: 181.224.16.0/22
                          IP: 2806:3d4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17031181 (0x103e00d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 13 20:58:43 2023 GMT
            Not After : Nov  3 20:42:57 2024 GMT
        Subject: CN=0d2f3c34eaa952f81789554aedc8cb1bd83027a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:10:df:76:7f:d6:3a:93:69:00:07:1b:98:3b:
                    de:91:0a:7e:e8:1f:59:81:2f:b9:bb:34:a6:e8:ca:
                    83:7b:2e:ab:65:47:7f:6a:8b:bd:72:94:1d:98:d2:
                    5e:6e:6c:a3:f8:dd:12:b6:2e:7b:51:06:65:72:b9:
                    0c:38:dd:e2:8d:35:f2:ea:8b:d8:71:3f:55:10:1f:
                    14:a8:9c:62:6d:34:ad:ce:ee:f1:3b:14:f1:0b:ed:
                    7b:37:fc:c9:83:46:05:c0:b4:c7:09:dc:08:fe:15:
                    59:22:1d:2e:33:b3:28:f7:78:b3:44:5d:b9:a1:90:
                    cc:01:e4:fc:c3:70:9e:be:30:12:88:18:9d:86:ba:
                    7d:35:f4:49:1a:55:a1:17:48:c1:2c:c8:08:57:a1:
                    6f:65:1a:de:6e:c1:c1:98:65:e9:9c:07:0b:6d:ac:
                    40:f4:4f:af:9b:cf:ad:2e:3c:ca:7c:e4:3f:6d:b8:
                    67:bf:4d:5d:b1:5c:8f:24:0b:ae:0b:59:4a:9f:38:
                    73:48:c0:ae:53:d2:46:3d:99:f5:64:8c:f5:9d:36:
                    34:4e:c7:a6:b4:2a:38:65:9a:44:2a:32:c3:0e:11:
                    f0:ca:2f:d7:41:2b:7c:85:56:7c:f6:53:99:46:2d:
                    7e:70:66:47:0f:ce:2e:ad:c6:38:19:20:9e:06:61:
                    df:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:FF:DC:0B:ED:27:CE:65:F5:0F:D3:5D:74:63:FC:A3:6F:17:CD:80
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/22b564bb-be7c-443e-bc51-1f361b5cacad/0d2f3c34eaa952f81789554aedc8cb1bd83027a1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.16.0/22
                IPv6:
                  2806:3d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:63:09:07:a8:50:df:74:62:ff:03:18:5c:4d:b4:5f:4a:1d:
         63:39:d8:99:45:e7:b1:92:73:84:ee:b8:93:64:93:aa:cc:fc:
         eb:2b:24:a3:6d:64:1e:7d:3d:aa:48:68:a9:79:8d:a6:1c:7b:
         25:1a:1a:f4:19:a7:7b:f6:10:49:2c:e3:51:16:27:6d:0a:3b:
         0e:fc:86:00:e7:4f:4b:22:76:22:64:a7:68:2a:70:62:49:c1:
         7c:7f:27:ba:31:74:b5:64:a2:bc:79:eb:74:48:d4:97:38:25:
         8d:fc:ce:51:89:b8:b2:01:3d:30:d8:7c:c8:6c:8f:d9:a5:45:
         b6:4f:28:c9:3c:96:2d:ab:31:15:52:be:27:fb:ba:25:f7:1c:
         75:73:9f:ba:3c:b7:9a:bd:f3:c8:39:74:1f:73:f1:1a:89:af:
         35:65:65:6f:48:1f:fd:ab:25:5e:ac:76:cb:a5:7c:16:c9:41:
         83:91:79:8e:73:3a:b6:ad:a2:b0:2a:77:20:f0:29:ff:2b:e2:
         12:54:74:f8:d4:b5:88:88:99:b6:e1:7b:0f:11:87:5d:d5:7c:
         de:12:e4:e0:ce:cc:f2:67:bf:9b:fa:3a:9e:48:b2:00:f1:e6:
         c8:49:49:0c:71:f7:1e:2f:10:44:e8:94:a4:14:dc:36:b2:f3:
         ae:e1:f1:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----