Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29013bda1598b1b37ae3a6f98ab08ccb44b4041f.cer
File:                     29013bda1598b1b37ae3a6f98ab08ccb44b4041f.cer (raw, json)
Hash identifier:          dS4CGHW8zqKB1ck8dhnIu771v0QTwnXMZ+vL61OWPoM=
Subject key identifier:   43:0D:2E:26:3E:4C:04:33:E3:D2:7F:47:30:B5:CA:9D:31:1C:1A:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8F681
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b3194818-85ab-4eb5-b731-0d60f093ec43/29013bda1598b1b37ae3a6f98ab08ccb44b4041f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b3194818-85ab-4eb5-b731-0d60f093ec43/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 16:06:41 +0000
Certificate not after:    Thu 04 Jul 2024 15:02:40 +0000
Subordinate resources:    AS: 263608
                          IP: 170.244.28.0/22
                          IP: 177.136.96.0/21
                          IP: 2804:fdc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15267457 (0xe8f681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  8 16:06:41 2023 GMT
            Not After : Jul  4 15:02:40 2024 GMT
        Subject: CN=29013bda1598b1b37ae3a6f98ab08ccb44b4041f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:de:39:cd:01:0b:46:71:80:c7:19:6d:da:bc:
                    d1:74:89:16:5c:f5:8b:a1:e2:f3:5e:85:1e:54:49:
                    15:49:36:fd:36:29:8f:60:c3:e0:8a:36:cd:8a:d2:
                    03:f8:0e:20:1a:82:a8:9a:8c:75:2c:ca:e6:4d:b5:
                    3a:fc:b1:53:29:f8:fc:c8:1e:84:53:e5:1a:08:51:
                    4b:25:20:ed:e9:fc:59:78:f9:f3:19:a2:cd:9a:f6:
                    89:ef:ba:d5:bc:88:11:c1:b0:b7:ee:53:85:06:84:
                    00:05:e8:25:4a:c9:96:92:32:41:b3:47:cd:68:47:
                    51:c3:c3:1b:fa:69:80:96:fb:3c:66:3f:26:c4:2c:
                    14:15:ad:69:32:13:e1:70:bb:e6:e7:49:af:91:a3:
                    f6:f0:1a:9b:70:45:6e:46:b2:0f:fa:f2:18:7f:67:
                    0a:be:0e:92:25:7f:cc:a8:00:84:7a:1c:d0:63:47:
                    54:9e:ed:19:cb:ea:e8:9e:a5:e5:4c:be:04:c8:4d:
                    62:e6:ce:49:7c:83:fb:65:ec:05:be:60:0d:02:f2:
                    91:04:86:e6:7e:a9:d7:1d:3d:f1:95:04:b2:12:54:
                    6d:a4:60:39:cb:ad:6f:98:43:78:95:8d:69:53:59:
                    4a:85:c6:3a:dd:a3:d2:0e:5b:d5:9b:46:7e:6a:3b:
                    16:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0D:2E:26:3E:4C:04:33:E3:D2:7F:47:30:B5:CA:9D:31:1C:1A:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b3194818-85ab-4eb5-b731-0d60f093ec43/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b3194818-85ab-4eb5-b731-0d60f093ec43/29013bda1598b1b37ae3a6f98ab08ccb44b4041f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.28.0/22
                  177.136.96.0/21
                IPv6:
                  2804:fdc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263608

    Signature Algorithm: sha256WithRSAEncryption
         37:bd:0f:95:01:6c:4c:cc:c6:21:2b:08:1f:29:ea:fd:36:3e:
         e9:3c:db:9e:f6:d6:4d:f0:29:45:b7:bc:32:de:56:8a:cb:75:
         f6:04:27:4e:01:11:a2:61:2c:bc:6b:d6:ac:80:be:46:30:5a:
         5c:89:3f:89:26:f7:2a:82:cd:21:1b:44:e9:19:bd:bd:c7:b1:
         3c:ee:bb:92:00:47:e9:d2:3b:50:f4:0d:e3:96:e4:ca:13:1a:
         8d:5b:f1:f7:ab:65:94:50:66:5a:4f:85:08:2e:02:e8:79:72:
         0a:5f:e6:ea:bb:50:de:14:71:8f:b2:fc:fb:0a:bc:ca:ab:fa:
         aa:95:ce:2b:6c:d9:d3:0a:81:64:45:ea:4f:8c:73:ed:0e:43:
         af:91:b6:fd:e7:f8:39:bd:4d:1f:c8:2f:5d:5a:e4:4a:66:e3:
         f0:3d:a9:9d:88:b9:10:1b:d0:c6:85:dc:06:2a:07:c5:4f:18:
         b3:21:61:0b:c3:c5:38:41:af:f2:c4:7f:13:59:4f:c9:d8:be:
         bc:29:f0:b8:17:95:ed:28:5e:f4:bf:4a:8c:fa:e7:f4:bf:f9:
         59:2b:36:2c:05:5b:e8:27:b9:b7:c5:1d:3d:38:e0:d8:14:ee:
         f4:53:b7:72:23:2c:e7:5b:0b:93:d9:73:1c:e8:d0:f2:ba:b6:
         cf:ef:cd:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----