Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/274bfaeeb9759ca97ef98ac1da071a21f5838008.cer
File:                     274bfaeeb9759ca97ef98ac1da071a21f5838008.cer (raw, json)
Hash identifier:          r/kwF8ksxb2gaKozoDJPkonGMQdp5hqf+Gu1ndnJzIo=
Subject key identifier:   DC:91:FE:FE:0B:61:E0:44:E8:2C:8D:05:3C:0C:53:CD:0A:4E:C0:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01037CE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9cb5bb3e-0737-4e5a-8961-78954e1fa10c/274bfaeeb9759ca97ef98ac1da071a21f5838008.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9cb5bb3e-0737-4e5a-8961-78954e1fa10c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 15:54:30 +0000
Certificate not after:    Sat 09 Nov 2024 21:07:09 +0000
Subordinate resources:    AS: 264854
                          IP: 170.81.28.0/22
                          IP: 2803:ac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17005799 (0x1037ce7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 11 15:54:30 2023 GMT
            Not After : Nov  9 21:07:09 2024 GMT
        Subject: CN=274bfaeeb9759ca97ef98ac1da071a21f5838008
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:25:a6:25:ed:3e:23:ba:ea:c3:ee:42:37:a5:
                    12:e7:e7:9b:8a:5e:1c:a7:5e:16:02:c8:7e:66:97:
                    99:b7:12:67:83:ad:7a:b4:ed:cf:35:14:97:ff:13:
                    70:cc:0d:a4:91:58:5f:a3:c6:c7:36:a4:22:58:2d:
                    38:de:b7:89:28:a1:9a:3e:a2:d6:a0:ef:6e:4e:46:
                    a9:bf:e9:2d:e5:1b:6a:34:ad:1d:a6:76:08:65:e8:
                    1d:e7:e6:23:a8:99:62:21:69:95:dd:ec:3e:f0:e4:
                    9b:51:27:7b:d9:f0:8c:6a:e3:ee:d5:fa:4b:6b:8c:
                    39:a0:eb:83:54:d4:1c:3f:cc:3e:5a:38:cc:1c:c2:
                    4a:fa:49:ce:38:64:cd:66:2b:ef:20:18:33:0c:cc:
                    44:53:ab:3a:7e:e2:28:37:bd:0f:2e:55:1a:ee:4f:
                    58:37:db:be:2e:b4:cc:db:16:32:0f:02:5c:30:10:
                    b2:6b:0b:65:47:bf:91:31:11:d2:79:f2:f8:0e:50:
                    6c:e2:cf:f9:c4:4c:fb:6d:6c:fc:a7:37:1a:8f:34:
                    a4:7b:71:fe:75:96:61:6b:ad:70:a4:7c:b4:d4:99:
                    4f:d0:6f:0f:8d:27:9b:ed:f1:5e:0a:95:c5:01:bb:
                    21:08:5b:bf:b6:86:c5:7d:4d:ff:53:7b:b0:e4:90:
                    03:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:91:FE:FE:0B:61:E0:44:E8:2C:8D:05:3C:0C:53:CD:0A:4E:C0:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9cb5bb3e-0737-4e5a-8961-78954e1fa10c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9cb5bb3e-0737-4e5a-8961-78954e1fa10c/274bfaeeb9759ca97ef98ac1da071a21f5838008.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.28.0/22
                IPv6:
                  2803:ac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264854

    Signature Algorithm: sha256WithRSAEncryption
         99:cb:ff:ea:48:d2:53:bc:15:aa:c9:85:94:7c:69:2b:67:24:
         42:96:00:23:1b:20:99:c4:68:35:3f:5b:2c:8e:c1:51:fa:89:
         76:26:dd:56:32:2f:be:c9:af:9a:67:68:e0:d9:26:00:16:b0:
         77:a3:92:29:df:aa:99:32:af:4b:47:a3:9f:e0:5f:03:67:07:
         f4:f3:40:2d:b7:08:2b:1c:7f:33:da:33:13:58:4f:ef:59:46:
         ca:39:2c:a8:aa:dc:7c:66:3d:6d:5d:da:58:73:a7:18:e2:44:
         f2:58:90:35:9c:26:ca:3b:5b:ed:d2:54:b2:d3:88:35:f5:4a:
         42:3f:da:d9:63:41:cb:13:7d:58:e9:6e:d4:87:41:f9:90:cb:
         45:7b:23:3f:eb:59:0c:fd:47:05:6a:e8:7f:87:6f:90:e0:c4:
         45:18:19:a9:3c:fb:d6:b6:e1:54:f5:d5:48:32:1f:ce:d5:fb:
         00:d0:a0:e1:e9:9a:02:1b:69:3d:10:99:2a:b9:6a:45:53:eb:
         b1:9a:e6:e0:c7:1a:f0:19:9a:6b:5d:f9:c3:3c:7a:ba:c4:2f:
         e9:91:fc:7c:8d:d8:7d:85:92:c2:1c:97:96:ec:f8:68:17:c9:
         c4:55:75:21:b7:28:8a:a2:6f:dd:24:2a:a2:a5:20:b2:09:74:
         3f:19:23:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----