Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ab51c9e88de45540fbf3e397a8ff9fd99592487.cer
File:                     1ab51c9e88de45540fbf3e397a8ff9fd99592487.cer (raw, json)
Hash identifier:          fdlUhLbDplqx7W8Ry2sQj+Ynctva7KwlHuZxZ0cWlyo=
Subject key identifier:   AE:DB:92:5D:6B:FA:A0:E2:2F:61:00:04:8C:24:7E:31:C2:41:B6:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA0E80
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3b75da1-0a00-4b18-a356-d057d37acbff/1ab51c9e88de45540fbf3e397a8ff9fd99592487.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3b75da1-0a00-4b18-a356-d057d37acbff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 22:15:18 +0000
Certificate not after:    Thu 21 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 262920
                          IP: 200.12.166.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15339136 (0xea0e80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 16 22:15:18 2023 GMT
            Not After : Nov 21 04:00:00 2024 GMT
        Subject: CN=1ab51c9e88de45540fbf3e397a8ff9fd99592487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:86:f6:7b:71:b2:e2:32:0b:ad:3c:a9:8f:90:
                    3c:d0:b6:27:2c:10:bd:8b:60:71:ae:02:f8:01:bc:
                    03:a1:03:d0:0a:c8:de:91:d4:dd:50:96:8c:dc:64:
                    fd:1d:81:ce:2f:24:af:62:1c:59:a2:59:fe:bc:7d:
                    df:e4:fd:b3:57:c6:2c:43:a4:9f:a1:2b:ac:df:d6:
                    1a:9a:09:d9:83:d1:29:c7:86:47:41:9a:43:c4:8d:
                    c0:63:87:ac:d5:a0:5f:ef:55:c1:cf:22:e1:83:6a:
                    50:97:75:56:e0:70:f4:c9:c9:19:a2:73:05:e4:20:
                    c5:b0:98:f9:66:6d:bb:30:14:c9:60:07:26:a1:7a:
                    b1:b4:14:a7:76:4d:29:a9:30:a6:c3:a1:9d:e5:d7:
                    5c:83:ed:60:f5:f3:87:52:d8:cf:7b:46:d4:84:35:
                    f9:b4:b9:1b:f4:8b:cf:2a:73:ff:e4:bf:dd:1a:67:
                    d5:b6:47:dc:0b:43:d7:eb:31:3e:c8:ca:35:64:73:
                    d3:c3:4b:60:0a:60:52:74:6f:44:2d:19:76:a4:ef:
                    b2:84:68:7b:e3:e5:80:0d:2d:a8:3e:88:27:64:ff:
                    a9:e3:2c:90:49:54:20:cf:56:d3:25:b3:ea:1c:d1:
                    0d:5e:4a:71:40:88:e0:b3:c6:1c:b1:b5:1c:39:2c:
                    ba:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:DB:92:5D:6B:FA:A0:E2:2F:61:00:04:8C:24:7E:31:C2:41:B6:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b75da1-0a00-4b18-a356-d057d37acbff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3b75da1-0a00-4b18-a356-d057d37acbff/1ab51c9e88de45540fbf3e397a8ff9fd99592487.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.12.166.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262920

    Signature Algorithm: sha256WithRSAEncryption
         3c:2d:31:8f:51:f8:da:59:02:15:f8:80:8d:e3:bc:d8:b2:5f:
         cd:60:26:6b:65:a7:f8:19:ca:17:4b:94:8e:ac:06:94:c0:ce:
         58:1b:c5:f6:2e:47:2d:d4:76:f4:77:a0:98:6d:3a:69:3f:81:
         91:fc:0c:1e:e7:08:7f:38:c2:52:27:fc:5f:34:82:da:06:9e:
         0d:74:08:d0:18:c1:29:7f:53:04:61:3a:d6:3c:31:de:e4:a6:
         fa:41:f3:24:91:86:27:3c:0e:83:0d:00:d1:75:cb:b5:44:50:
         5f:cd:b4:98:b6:4c:bf:47:a1:dd:b4:f5:41:f2:ab:51:e9:17:
         5e:95:48:25:b4:ba:46:16:08:32:08:19:a2:b1:f8:fa:85:cd:
         03:58:ad:e1:d5:09:ca:9e:49:d7:7c:48:e5:8a:5b:9a:9e:e1:
         49:1e:ce:a9:80:5a:a0:42:76:ef:61:40:69:6c:31:3d:86:24:
         a6:93:03:9f:5b:4d:3a:28:73:8f:ea:a9:b4:81:2e:34:c1:9d:
         b4:c0:4b:52:25:83:9d:ff:44:df:36:aa:45:66:69:f0:43:24:
         a7:a3:c0:e7:fd:f5:b7:83:96:6a:3c:fd:57:ae:87:8a:f6:fe:
         85:4a:e1:b8:e8:1a:e3:c0:5a:e7:3f:25:26:79:dc:50:6c:92:
         b4:1d:f7:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----