Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/185ca6bb80f033ceba341dcaab97097fc3891bcd.cer
File:                     185ca6bb80f033ceba341dcaab97097fc3891bcd.cer (raw, json)
Hash identifier:          gYQEuGVvNSLYYS6Q5ymGG7KVKMgroKYjcC+QifVcfLo=
Subject key identifier:   BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D3DB57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/185ca6bb80f033ceba341dcaab97097fc3891bcd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Oct 2022 02:59:09 +0000
Certificate not after:    Fri 12 Apr 2024 00:20:02 +0000
Subordinate resources:    IP: 200.23.53.0/24
                          IP: 200.23.168.0 -- 200.23.170.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13884247 (0xd3db57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  4 02:59:09 2022 GMT
            Not After : Apr 12 00:20:02 2024 GMT
        Subject: CN=185ca6bb80f033ceba341dcaab97097fc3891bcd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:21:53:87:f9:41:51:d1:52:2c:89:91:b7:99:
                    02:4f:83:a1:69:28:4d:e7:5d:07:c8:3d:e5:34:df:
                    80:42:74:dc:69:e5:55:1a:b4:47:62:52:a9:3a:50:
                    60:54:1e:43:82:63:da:1d:39:67:0e:f0:3c:53:aa:
                    68:de:ed:b6:6c:55:c2:e6:b9:b5:f1:2b:0b:20:58:
                    c3:7c:f6:e1:35:b0:36:ea:12:86:30:e9:73:92:16:
                    7f:7c:e9:79:3c:4b:e9:61:c9:0b:01:b9:9f:a4:54:
                    58:96:52:55:94:38:76:aa:3f:99:df:71:c6:c0:44:
                    cf:b0:5f:19:25:9d:c5:e3:36:e8:da:0a:37:5e:0d:
                    46:23:6e:47:06:9c:8a:ca:bf:fe:da:5a:46:a1:b7:
                    1e:45:43:32:3d:34:82:c9:d4:94:44:35:5e:d4:0f:
                    dc:2c:f3:67:2a:b3:38:ca:86:86:2b:60:6b:2c:05:
                    d5:ec:d7:2f:39:36:dc:41:41:d8:57:ce:8f:be:18:
                    0c:34:bf:dc:25:9d:60:ae:3a:81:e0:3c:37:22:7e:
                    66:a7:46:07:7e:12:a9:a3:26:29:6f:6e:f5:bd:b0:
                    76:c6:6c:0c:c3:5c:76:0e:ad:2e:de:e8:32:d6:45:
                    b8:07:21:22:67:f5:d2:72:c1:69:94:b6:b8:08:97:
                    5b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:72:A9:73:72:8A:BF:4E:93:B7:E0:82:F3:30:CB:6E:16:D3:36:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f618f7d5-eabb-4e6f-9f1a-23901b5f1944/185ca6bb80f033ceba341dcaab97097fc3891bcd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.53.0/24
                  200.23.168.0-200.23.170.255

    Signature Algorithm: sha256WithRSAEncryption
         50:79:fc:1f:6a:83:4e:32:21:ac:ad:1f:4f:a4:a0:aa:15:7a:
         8d:89:89:54:c2:54:34:7a:af:ee:43:05:be:b1:90:a7:b2:fa:
         6f:23:56:3b:dd:8f:66:5b:72:b2:b6:f7:3a:0a:31:9f:2c:5d:
         c1:65:6e:37:4f:f8:00:22:2f:12:ca:5f:0e:43:e8:6c:81:c8:
         fb:aa:ef:78:e0:24:e0:98:b4:29:64:ab:a6:f7:3b:a9:f2:25:
         f9:6a:ea:16:10:a4:d2:c7:ce:1b:eb:2e:9e:9f:19:dc:9c:35:
         a3:ac:fa:1b:c8:86:7a:42:f7:91:d2:e9:ef:af:a9:28:0c:44:
         9b:6b:1f:c1:93:1b:ad:9e:fc:28:92:a2:88:84:d5:7a:0c:aa:
         dd:b1:9c:4a:07:0e:79:6b:37:d7:5e:b9:49:05:3b:80:d7:6b:
         19:80:4c:a4:e2:6a:9e:55:dc:61:02:1c:2d:51:3b:fe:97:35:
         fa:b2:b0:4c:c2:99:3b:2a:d5:c9:fb:84:83:86:12:e8:6d:d9:
         88:82:42:e4:51:03:e2:1c:80:36:74:d6:4a:5b:2b:b2:d9:e7:
         a3:94:c3:10:bf:26:75:bc:70:46:33:e3:91:44:c3:e7:e2:92:
         20:3a:59:9b:b5:70:5a:f2:dc:b5:6e:6e:b2:b3:53:55:a0:21:
         28:80:88:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----