Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23e6b47caf00c16218d730db4db550ca6fcb92ad.cer
File:                     23e6b47caf00c16218d730db4db550ca6fcb92ad.cer (raw, json)
Hash identifier:          DOzfNfJ43Ch2YZ6mFa3o9A87RJQD+Io47GH++9/7RS0=
Subject key identifier:   F4:74:C7:30:BE:A0:94:F6:A8:BB:71:30:62:7C:D7:60:DF:A0:56:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA2BD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/23e6b47caf00c16218d730db4db550ca6fcb92ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Apr 2022 14:35:04 +0000
Certificate not after:    Tue 16 Apr 2024 22:39:39 +0000
Subordinate resources:    AS: 271922
                          IP: 179.63.52.0/22
                          IP: 2803:df10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14298071 (0xda2bd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 14:35:04 2022 GMT
            Not After : Apr 16 22:39:39 2024 GMT
        Subject: CN=23e6b47caf00c16218d730db4db550ca6fcb92ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:be:5b:eb:f6:36:26:33:c9:51:7b:2d:04:52:
                    14:10:ed:d2:97:6b:d4:8b:bb:1c:29:5f:b6:a6:b0:
                    da:67:50:7b:34:49:0a:84:ce:1d:70:2c:43:93:63:
                    c0:18:97:b7:ff:3b:2d:ef:d0:b5:f6:4d:6a:f2:c6:
                    6f:56:fa:24:e9:b9:e4:74:82:78:80:1e:0b:33:9a:
                    67:9d:24:df:96:d6:36:93:33:00:d1:1e:f1:77:36:
                    1f:75:43:ce:32:70:01:2e:60:03:5b:24:3f:4f:1d:
                    ef:4e:c4:4b:10:67:19:da:6c:41:fd:9e:48:9c:1f:
                    7b:fe:7f:af:8d:81:a6:47:00:e7:f1:10:85:de:72:
                    f4:91:25:8b:a3:dd:8e:2d:39:74:82:05:75:fc:f1:
                    60:b3:b0:4e:aa:d0:60:bf:10:8e:e8:50:69:9e:7a:
                    d3:79:6f:b8:6d:88:3f:9e:25:f5:c3:f1:96:c8:bf:
                    78:72:cc:5d:23:db:21:68:54:24:2a:fd:9c:61:bb:
                    c7:d7:f5:42:07:76:24:9f:a2:85:6b:06:7b:e1:01:
                    44:3c:6d:c4:fd:5d:46:58:22:a3:ed:98:1a:ef:13:
                    99:a9:61:9c:56:e4:f4:2b:5e:aa:eb:3f:fa:d1:e0:
                    e2:18:6c:43:60:45:cc:ef:f7:d3:81:b1:a6:57:23:
                    d0:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:74:C7:30:BE:A0:94:F6:A8:BB:71:30:62:7C:D7:60:DF:A0:56:49
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3ea73ddc-369f-4fa4-b694-368ce73afa00/23e6b47caf00c16218d730db4db550ca6fcb92ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.63.52.0/22
                IPv6:
                  2803:df10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271922

    Signature Algorithm: sha256WithRSAEncryption
         2b:1a:7f:57:80:86:4b:80:75:02:d6:4b:11:97:20:5a:e2:7b:
         81:9a:6d:a4:bc:8a:88:ae:5c:64:78:39:0d:6b:80:2d:75:56:
         bb:ba:04:e2:17:01:aa:a7:fd:1a:ae:df:c7:db:c7:19:6d:f3:
         c6:f2:b5:95:e8:2f:22:90:51:13:a2:f9:0e:7e:2f:bf:2f:c6:
         1b:f2:f4:8d:3e:e8:81:07:20:e8:d2:c2:0c:9c:d0:d0:b7:ea:
         32:0e:7d:7e:9c:29:38:0c:69:93:5a:2d:c5:b7:85:94:9e:7f:
         dc:5e:4e:9f:78:82:44:35:26:ca:31:54:99:35:a4:82:6b:bf:
         d5:39:93:56:74:31:cb:74:49:0e:7d:96:bb:39:c3:36:b6:de:
         4f:c1:20:c2:2c:c8:f4:2f:00:71:ca:14:0a:c4:9f:e1:c7:39:
         57:59:f7:77:c3:b0:6a:59:7a:9e:42:6b:16:b7:65:8b:bf:66:
         ab:0b:46:0b:0f:88:ed:34:11:90:4d:56:29:f4:eb:e8:ec:e6:
         78:28:6a:09:30:2d:f7:e9:19:e2:89:ab:6b:bf:b4:e5:34:63:
         26:29:7b:3b:a1:a8:d2:97:ed:55:7b:5c:1a:e9:13:6a:d6:2d:
         04:1b:89:93:d5:96:f9:96:98:de:44:d5:49:a6:96:86:fe:f5:
         71:bd:41:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----