Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f351d19c5f6c0242e6ec509fdc18861ff44829c.cer
File:                     0f351d19c5f6c0242e6ec509fdc18861ff44829c.cer (raw, json)
Hash identifier:          rski8+He426GbLfS+L1RHXQGj04ycGXJJf2mh566zdo=
Subject key identifier:   AD:21:F4:9A:9A:0D:5C:C3:60:A7:58:E5:04:78:E0:59:6D:C2:93:10
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBC58B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ca491cf5-0aa0-4340-b9fa-6b434d9d3ff7/0f351d19c5f6c0242e6ec509fdc18861ff44829c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ca491cf5-0aa0-4340-b9fa-6b434d9d3ff7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 11:44:28 +0000
Certificate not after:    Thu 17 Jul 2025 15:22:21 +0000
Subordinate resources:    AS: 271980
                          IP: 192.141.212.0/22
                          IP: 2803:be10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16500107 (0xfbc58b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  3 11:44:28 2023 GMT
            Not After : Jul 17 15:22:21 2025 GMT
        Subject: CN=0f351d19c5f6c0242e6ec509fdc18861ff44829c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:bf:43:12:89:da:8f:dc:df:21:d5:00:1a:83:
                    7c:4f:00:fe:73:ba:8e:cd:69:73:49:29:e0:94:a2:
                    57:77:bb:7e:95:bb:1f:33:bb:1e:20:6f:29:74:67:
                    fc:01:3f:10:14:cc:50:97:8d:75:44:d3:41:7e:ac:
                    2f:db:5b:f6:32:cf:3b:66:13:32:ec:b4:25:87:42:
                    c4:7a:dd:d0:81:0d:67:61:27:5e:3a:f6:ae:08:2d:
                    e8:0b:a3:f9:52:6d:61:63:99:57:72:6f:46:d4:1e:
                    a6:a6:f3:28:91:bf:af:65:bf:e4:c6:7f:7b:7d:90:
                    02:00:89:bd:ac:d5:e4:34:20:49:e1:cd:a2:22:a8:
                    f9:fa:fa:98:9f:15:c1:e1:30:24:bd:0c:34:d7:7e:
                    03:3e:c0:c0:d4:fe:c3:99:48:b0:a7:28:f0:76:4d:
                    a1:9e:79:16:fd:95:f0:22:98:17:d6:f2:f1:4b:85:
                    14:c4:a9:d0:17:6e:9e:0e:7f:43:43:37:4f:d6:a8:
                    28:93:13:7a:d2:76:de:d7:0c:e6:41:4f:1f:b4:e6:
                    c3:9e:e8:0c:59:8f:60:ce:92:1e:82:cf:26:d1:4c:
                    7f:7d:13:f1:7c:a9:83:b2:44:f1:ce:79:0b:0f:f6:
                    5c:41:4b:4c:29:7d:02:1f:3d:2d:00:b7:b0:ae:e4:
                    25:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:21:F4:9A:9A:0D:5C:C3:60:A7:58:E5:04:78:E0:59:6D:C2:93:10
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ca491cf5-0aa0-4340-b9fa-6b434d9d3ff7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ca491cf5-0aa0-4340-b9fa-6b434d9d3ff7/0f351d19c5f6c0242e6ec509fdc18861ff44829c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.212.0/22
                IPv6:
                  2803:be10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271980

    Signature Algorithm: sha256WithRSAEncryption
         73:fa:dd:77:e6:94:49:bd:34:f5:41:72:f7:8a:fe:19:42:e8:
         50:db:58:c3:02:bd:64:b8:4c:d4:af:a0:ee:3e:2c:0b:d6:b9:
         36:a8:f7:73:0b:a5:47:9d:8f:b9:07:e5:78:d1:ba:97:e0:ec:
         c0:40:61:5e:06:7d:72:a6:24:90:71:ca:c4:84:2b:ad:5a:be:
         fe:6a:88:ef:f1:f2:21:ec:40:73:bc:50:ac:f6:4d:4e:c2:b9:
         c6:7d:b1:5a:a6:fe:90:4e:ae:a2:49:f1:02:0d:02:57:6a:0b:
         ec:2f:59:cd:1b:64:af:aa:5b:b8:49:05:ff:99:3a:6d:44:0e:
         49:3d:1c:7d:7d:8d:99:96:a0:a6:06:e1:0b:47:4f:c6:4e:39:
         cb:45:4c:74:6c:7d:93:73:2d:fe:1a:2a:6e:ca:5d:01:7c:cb:
         aa:40:48:e9:60:43:17:24:c4:63:61:84:e2:b5:0d:50:06:54:
         ef:eb:71:cd:ae:29:a8:bd:0e:47:41:bc:20:ee:04:30:78:73:
         d2:9a:05:c9:7d:b8:ea:d3:2f:33:6c:39:d1:f6:a4:86:2b:9f:
         8c:3b:33:37:7f:10:e4:c4:31:93:c5:78:07:2f:4c:44:d8:98:
         16:72:24:15:09:63:39:87:a1:b5:90:a8:13:19:d5:0e:14:f4:
         7d:56:ac:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----