Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20912fde84f93edf6fa69d2d46e367672c91f0f2.cer
File:                     20912fde84f93edf6fa69d2d46e367672c91f0f2.cer (raw, json)
Hash identifier:          ZgN4+KUhIk+Jilj/FLEJhYYALTH5v3LtBzNhYfafeu8=
Subject key identifier:   86:0D:29:04:6C:98:66:04:26:6B:FD:69:7E:B3:18:8F:3D:D1:15:F1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEC374
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/92d391e2-d1d7-43cc-a146-01284bfd3360/20912fde84f93edf6fa69d2d46e367672c91f0f2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/92d391e2-d1d7-43cc-a146-01284bfd3360/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:12:01 +0000
Certificate not after:    Wed 09 Jul 2025 14:18:52 +0000
Subordinate resources:    AS: 264352
                          IP: 131.108.228.0/22
                          IP: 2804:1d2c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16696180 (0xfec374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:12:01 2023 GMT
            Not After : Jul  9 14:18:52 2025 GMT
        Subject: CN=20912fde84f93edf6fa69d2d46e367672c91f0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:56:c8:ec:ec:d8:67:b1:5d:26:4d:e9:3e:c0:
                    33:03:65:0b:04:73:2f:9f:37:f6:67:ef:b9:8b:b0:
                    cb:81:91:81:ac:b7:60:7b:a1:e4:54:cd:97:28:0c:
                    32:5f:98:5f:55:bd:75:d3:ae:52:de:06:71:88:ba:
                    0e:31:e1:17:0b:74:64:0b:86:2f:ec:a1:12:6d:11:
                    48:02:97:f1:cc:80:ec:f2:d6:7a:1c:9d:38:21:68:
                    a5:26:48:62:56:6c:84:ab:23:44:83:d2:39:02:b0:
                    c7:8c:c6:17:bf:f3:76:86:0a:e7:47:af:96:c5:6e:
                    98:d5:5a:79:69:26:5e:c7:0d:9e:d0:d2:28:0a:8c:
                    d5:33:db:99:58:a7:5a:83:f3:2f:a3:72:5c:db:f6:
                    9c:67:ed:90:c4:5e:f4:e7:bb:48:dd:64:bf:10:2a:
                    ea:8b:e7:1e:e0:72:e5:ba:df:89:51:3f:7b:0c:b9:
                    7d:cf:c5:a0:ce:34:d7:03:1a:b6:93:2a:8e:aa:ee:
                    30:21:b5:5c:25:f7:b0:e6:0d:27:83:8b:9d:04:e4:
                    80:79:20:31:70:ee:4f:c9:c9:5d:8c:9d:6b:d1:3b:
                    f4:66:2a:cb:92:24:cc:f8:c8:f3:04:ac:59:9e:e0:
                    71:ad:6e:28:68:80:dd:e1:8c:d6:35:44:ed:08:fd:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:0D:29:04:6C:98:66:04:26:6B:FD:69:7E:B3:18:8F:3D:D1:15:F1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/92d391e2-d1d7-43cc-a146-01284bfd3360/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/92d391e2-d1d7-43cc-a146-01284bfd3360/20912fde84f93edf6fa69d2d46e367672c91f0f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.228.0/22
                IPv6:
                  2804:1d2c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264352

    Signature Algorithm: sha256WithRSAEncryption
         6d:9f:5c:70:d0:74:f0:51:6b:ce:e4:88:ae:39:7e:61:af:ed:
         b9:2b:bc:8d:91:67:bc:15:18:99:18:90:be:f8:7d:d1:fc:23:
         86:3c:38:ce:18:8b:7f:16:e9:84:f8:30:98:03:cf:56:e2:30:
         a9:c1:16:19:72:f0:15:b1:7d:76:7c:30:af:8f:60:0a:5b:a0:
         5a:18:8f:37:4d:7b:af:f5:f6:21:ec:05:ab:d8:f6:d7:74:b4:
         7b:57:65:45:0b:2b:0e:49:18:29:3a:68:85:56:c3:9b:0f:f7:
         8f:d3:3f:f9:67:96:b9:69:af:e6:f0:21:85:6d:27:13:b3:10:
         4f:bd:27:ce:07:19:0d:14:bf:03:3e:f8:79:ae:65:66:84:b2:
         65:0a:9c:7b:d5:a7:b1:51:02:9d:14:c5:bb:21:ea:bb:53:78:
         b7:3d:44:d8:f7:83:f6:a7:26:1c:5c:72:98:75:ac:96:be:c1:
         ff:a8:00:4a:51:71:2f:0d:3c:41:d2:33:77:52:c8:03:76:5e:
         f5:28:4c:27:6a:8f:da:6b:06:49:0d:f2:6a:49:96:e3:64:62:
         5b:b4:88:b6:bd:04:b8:42:e9:7e:79:c0:92:79:5a:95:75:f2:
         38:b0:fa:a7:20:b8:1f:a3:f6:de:c7:57:99:30:6d:24:ca:78:
         f4:63:aa:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----