Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29faf9dda9a05093ff92d48d0018f02866d6716b.cer
File:                     29faf9dda9a05093ff92d48d0018f02866d6716b.cer (raw, json)
Hash identifier:          Zz30vPeoiIQtk49YduZ0GpEqG9vOz29akmaedoo0ldw=
Subject key identifier:   93:2C:62:78:33:D5:C1:86:D7:C3:CF:A4:BB:29:4B:B9:8B:E5:EA:80
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD8939
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/29faf9dda9a05093ff92d48d0018f02866d6716b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 30 Jan 2023 20:17:00 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.161.0/24
                          IP: 200.33.7.0 -- 200.33.8.255

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14518585 (0xdd8939)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 30 20:17:00 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=29faf9dda9a05093ff92d48d0018f02866d6716b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e6:b0:bb:e3:16:9d:20:26:08:99:3e:6b:50:
                    12:42:c4:92:a3:c6:2e:2b:3e:ba:93:d4:61:85:ef:
                    a0:d9:16:d3:20:c3:eb:0b:fa:bd:46:44:13:f2:cd:
                    3e:94:f8:11:a7:e1:92:54:8a:2e:9c:0d:1a:b4:6f:
                    3d:f4:a3:80:02:26:2d:f4:41:37:bf:24:98:3f:09:
                    a7:48:87:b8:ab:4d:18:15:38:f4:18:55:c0:46:94:
                    6a:27:ea:39:7d:87:ff:e8:4d:6a:84:f1:3a:93:27:
                    c5:a2:d6:ad:b4:fb:97:88:a4:1f:1d:d2:54:48:84:
                    95:7f:c7:51:87:4c:38:50:65:60:47:94:32:e6:4e:
                    36:6f:ad:29:d6:bf:57:10:94:44:45:73:4b:75:5b:
                    2b:32:96:79:5e:40:52:3a:ba:b2:23:0a:14:59:78:
                    72:cc:89:f4:0c:fe:80:67:24:5a:23:b0:65:10:ac:
                    ea:60:78:f3:c9:43:89:0a:8c:66:f6:78:d9:e5:23:
                    ed:c9:1c:ad:89:0e:93:b9:02:e1:d7:11:a4:04:cc:
                    0b:79:59:cf:50:0b:38:5e:3e:9c:a2:6c:fb:ce:6a:
                    c7:9e:03:17:66:9b:06:6d:49:a1:a5:e5:24:77:04:
                    d1:d5:6a:34:e0:07:36:05:d9:b1:f1:f5:64:47:1a:
                    e4:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2C:62:78:33:D5:C1:86:D7:C3:CF:A4:BB:29:4B:B9:8B:E5:EA:80
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4de58956-90cd-487f-9e2d-264bed21c8fc/29faf9dda9a05093ff92d48d0018f02866d6716b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.161.0/24
                  200.33.7.0-200.33.8.255

    Signature Algorithm: sha256WithRSAEncryption
         bc:af:e8:18:c1:7c:ea:20:09:5c:b4:5d:e1:98:1e:fc:60:b9:
         83:6b:1d:f7:d1:62:16:cf:65:bc:84:f8:20:cd:e6:6f:c6:fa:
         bd:c1:05:bb:1d:35:9b:65:e0:c0:40:ec:f9:eb:b7:c7:75:b0:
         d5:91:56:74:6f:0d:fa:40:0a:3f:81:2e:ce:ab:09:b6:54:4a:
         6a:cb:06:4f:b3:9a:ab:af:47:4b:9e:ae:d1:b2:d9:68:e8:0a:
         fc:c3:cb:48:59:0f:31:c4:bb:d2:77:72:75:da:ae:b0:f0:a1:
         00:20:dc:20:1a:99:fa:f9:d0:85:b1:28:b1:8b:ac:3c:d1:7a:
         a2:0e:30:28:0d:95:ce:4b:61:d7:d5:3b:31:a4:64:ad:ba:b1:
         88:49:cb:02:af:2b:15:ca:5e:a1:21:6b:56:47:b5:3a:44:7a:
         d3:c8:b6:a3:46:fa:a0:ac:19:32:f7:79:7e:92:5b:92:c1:e3:
         32:3c:59:ff:f3:38:2d:90:2f:a3:a0:af:d4:7c:34:6f:8c:0d:
         c2:54:ea:9b:a1:9c:d5:bd:35:7d:5c:fa:9b:da:39:fe:78:d0:
         d5:50:cc:4e:88:d6:04:65:e9:46:a9:bc:c7:0a:17:3e:e9:e7:
         85:5e:1e:68:95:17:1e:49:ca:6d:65:13:2f:ba:24:79:be:42:
         61:2c:fa:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----