Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/12bbe2687ec1b581c13ef41b3c34d8f6072ead26.cer
File:                     12bbe2687ec1b581c13ef41b3c34d8f6072ead26.cer (raw, json)
Hash identifier:          8KOZZ7Ohfi3vKnOj/zXYYmAokmKcZEsGdU554+fynSM=
Subject key identifier:   60:4D:FD:F8:37:76:55:E7:21:FD:44:A5:12:07:80:B2:11:BC:5C:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4CBB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cfb636a7-dade-44c5-a982-f650dd350911/12bbe2687ec1b581c13ef41b3c34d8f6072ead26.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cfb636a7-dade-44c5-a982-f650dd350911/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 15:27:56 +0000
Certificate not after:    Thu 15 Aug 2024 19:33:14 +0000
Subordinate resources:    AS: 271997
                          IP: 168.196.2.0/24
                          IP: 181.232.148.0/22
                          IP: 2803:b110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16042931 (0xf4cbb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 15:27:56 2023 GMT
            Not After : Aug 15 19:33:14 2024 GMT
        Subject: CN=12bbe2687ec1b581c13ef41b3c34d8f6072ead26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:32:c3:5b:94:5c:fb:2c:8c:71:9c:25:cf:3e:
                    b5:87:ca:59:55:0c:4a:65:59:37:c5:ca:7d:a6:5e:
                    38:4a:f5:1a:66:4b:e3:09:14:28:37:6b:cf:eb:1f:
                    01:e2:d8:55:6b:00:25:12:fc:f9:1b:2a:78:4d:99:
                    0f:61:5a:6b:4d:20:4c:ab:a3:b3:da:7a:3e:97:b4:
                    16:cd:f0:63:f0:cc:9d:60:1f:23:e3:65:5a:f9:af:
                    6c:ef:ba:91:07:0f:b8:3e:62:cc:53:50:e6:52:59:
                    1d:5a:2c:1a:60:26:e0:a1:04:22:85:b4:55:c6:7f:
                    e4:d6:46:24:54:10:c5:ec:cf:0a:55:cc:ad:19:36:
                    23:a0:00:b7:21:be:40:57:bb:bb:b6:73:a2:af:51:
                    5c:cf:e4:a1:da:b7:29:0b:75:65:05:88:eb:82:9b:
                    10:ac:3e:60:84:ad:7e:d6:48:e9:23:c9:3c:d1:8a:
                    2d:55:a2:fa:25:e0:cf:5d:0b:df:3e:db:78:37:5e:
                    09:c5:05:15:59:55:1a:86:04:86:e8:cb:5d:5e:ce:
                    50:f7:92:d5:a4:35:2b:a8:22:35:72:9a:6e:87:f4:
                    05:41:48:c2:a8:9e:c6:69:f2:3e:6d:a6:2e:c3:4b:
                    bd:4a:65:59:10:b2:70:65:07:3d:61:9d:80:54:37:
                    9d:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:FD:F8:37:76:55:E7:21:FD:44:A5:12:07:80:B2:11:BC:5C:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cfb636a7-dade-44c5-a982-f650dd350911/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cfb636a7-dade-44c5-a982-f650dd350911/12bbe2687ec1b581c13ef41b3c34d8f6072ead26.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.2.0/24
                  181.232.148.0/22
                IPv6:
                  2803:b110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271997

    Signature Algorithm: sha256WithRSAEncryption
         09:47:c9:00:2c:1d:2c:82:d4:92:12:42:21:f0:fb:35:01:e6:
         3c:a2:ac:23:40:7c:57:b8:bc:e8:5e:e3:2b:b4:e0:27:1d:b8:
         46:1c:2a:58:c1:bf:b4:2c:11:ae:b5:20:94:5a:fc:ae:f2:09:
         8c:8d:6d:1f:23:e7:24:09:14:20:02:b6:7e:22:f0:8f:25:a8:
         4c:3e:cb:b2:ed:18:f0:06:36:3f:1a:6c:0c:b6:1b:6f:fd:bf:
         99:fe:2d:d2:7b:74:69:59:95:94:7f:56:40:56:75:7e:e0:df:
         49:96:b9:4c:7e:13:e4:7a:7f:a2:c4:28:57:62:8c:0c:80:90:
         d7:65:a2:8e:19:6c:ea:f9:b4:99:af:5e:23:d6:73:51:e5:7f:
         a3:01:cc:6e:da:33:4b:f4:70:5b:48:b4:44:01:88:da:01:fb:
         83:12:2e:cf:13:d7:89:83:51:44:4d:ae:60:18:dc:79:c8:ac:
         e5:73:72:e2:a0:a6:2e:98:3f:fe:8b:9b:c5:16:9f:e2:61:ba:
         5b:69:43:6e:78:ee:5a:23:0e:23:06:c9:db:25:d1:60:6f:93:
         e3:ad:34:35:09:48:ec:82:d7:2e:df:99:06:64:fd:3f:f1:71:
         ac:40:80:aa:de:43:5d:9d:60:31:41:b2:67:c6:a3:ec:d8:a7:
         84:f7:59:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----