Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7.cer
File:                     1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7.cer (raw, json)
Hash identifier:          6iuTQIG6TXJ0MIo9XzOAu21f0zKfuDRAlUDnTiEqE4w=
Subject key identifier:   6A:E1:AD:F9:2A:56:B4:A4:E6:6A:4D:1C:F4:F2:F0:50:8D:72:EB:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7721E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cca5f695-fecd-407f-b078-c217a0316e38/1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cca5f695-fecd-407f-b078-c217a0316e38/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 01:57:13 +0000
Certificate not after:    Wed 12 Jun 2024 21:16:37 +0000
Subordinate resources:    AS: 265765
                          IP: 138.204.156.0/22
                          IP: 2803:ca40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15168030 (0xe7721e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 27 01:57:13 2023 GMT
            Not After : Jun 12 21:16:37 2024 GMT
        Subject: CN=1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:6d:51:9b:6c:0e:bf:19:20:37:3f:ce:d2:
                    b8:93:8a:6c:ed:b0:5a:42:d7:1d:4d:cc:93:27:bc:
                    37:06:00:fb:1d:2d:3c:7f:11:b3:48:59:e2:52:23:
                    e3:ab:d1:99:b2:85:4f:97:04:d2:90:5c:9d:9c:29:
                    c3:84:4a:7e:aa:0a:9e:af:d9:cd:df:57:b9:52:56:
                    e2:8e:77:d1:44:15:74:b7:98:ce:06:d0:25:15:b1:
                    ec:98:d9:f6:06:b6:b2:38:49:88:a0:7e:7f:88:2f:
                    d5:2e:0a:e1:d0:27:f3:fc:61:01:f4:9f:33:12:5c:
                    e9:77:47:2d:9f:57:16:cb:28:49:24:d4:ef:fc:79:
                    1d:bf:e2:58:32:16:fb:96:f1:fb:2a:d6:fc:41:ed:
                    db:7d:8b:66:2a:98:51:92:a0:7c:bf:fe:e9:6d:f3:
                    26:f7:f6:97:d0:00:0a:49:8f:1a:c8:f4:40:c9:87:
                    e7:78:b5:d9:d3:21:52:ed:7a:c5:e6:8b:19:c0:ef:
                    a6:7d:96:5c:fc:93:7b:42:35:30:0d:a9:21:1d:85:
                    34:d0:75:64:85:1b:30:18:a5:d3:5a:18:2f:bc:23:
                    b2:e9:d5:26:43:d6:52:fb:10:da:cd:30:57:9a:57:
                    13:63:f5:93:9a:2e:b1:18:9f:54:d1:93:1f:2b:3f:
                    d8:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E1:AD:F9:2A:56:B4:A4:E6:6A:4D:1C:F4:F2:F0:50:8D:72:EB:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cca5f695-fecd-407f-b078-c217a0316e38/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cca5f695-fecd-407f-b078-c217a0316e38/1669ca96bfe8f1b5fa34f63e50283fba6bc06ef7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.156.0/22
                IPv6:
                  2803:ca40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265765

    Signature Algorithm: sha256WithRSAEncryption
         52:68:9d:0b:2c:f2:f3:ad:5a:9a:e9:9b:8e:2f:8d:72:13:7d:
         dc:24:bb:fc:3b:d9:8c:b2:74:3a:05:74:46:d6:4a:3b:fd:5b:
         13:dc:2b:39:dd:a9:ba:c4:66:00:2b:74:36:aa:bd:ab:2e:d6:
         2e:10:e7:c4:6f:b1:7f:92:35:94:03:56:25:92:e9:e7:ca:ef:
         6e:30:7a:7e:b6:c5:60:bd:84:d1:f8:d0:d4:80:11:a2:13:da:
         1e:0a:ad:a4:b9:4a:ff:69:e0:a6:6c:fa:ed:34:47:08:b8:99:
         71:9c:d0:e1:5b:12:d5:a7:c8:35:a4:86:76:25:7b:c7:46:48:
         39:9e:e7:59:4b:a8:87:2f:83:14:72:0b:38:8a:fd:9c:56:98:
         a6:4c:d3:39:5a:ae:97:fe:81:a8:62:9c:f8:3d:26:f7:96:d5:
         06:04:7b:82:89:39:21:7f:9e:98:36:a4:12:10:f0:c6:7d:83:
         67:0c:84:21:67:43:b7:2a:46:10:4c:15:a1:cd:d8:4b:0f:4e:
         d5:bb:5a:81:6e:31:f9:99:95:a2:86:e6:50:e1:f3:e2:22:48:
         ca:83:1d:bf:e0:ab:59:84:93:30:79:d2:6d:d1:3c:39:55:b8:
         2a:29:89:9f:29:80:62:14:57:2a:5b:d5:26:27:eb:8a:08:a1:
         8a:56:fd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----