Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29feeb0f6b22e1dc2f8b414d6f5fb88fcf32d417.cer
File:                     29feeb0f6b22e1dc2f8b414d6f5fb88fcf32d417.cer (raw, json)
Hash identifier:          bcO9E+KH1ReGHjK7YTyoSUdYhvTkF1mHrc37swqlbK4=
Subject key identifier:   C7:6C:20:8B:2D:5D:86:58:65:9A:E8:8D:19:B4:BC:AB:24:AE:CC:F1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7AD5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/06d79853-234f-43e4-9197-08480964144e/29feeb0f6b22e1dc2f8b414d6f5fb88fcf32d417.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/06d79853-234f-43e4-9197-08480964144e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 20:05:15 +0000
Certificate not after:    Fri 06 Dec 2024 19:44:33 +0000
Subordinate resources:    AS: 26621
                          IP: 191.97.108.0 -- 191.97.119.255
                          IP: 2803:9280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16231771 (0xf7ad5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 20:05:15 2023 GMT
            Not After : Dec  6 19:44:33 2024 GMT
        Subject: CN=29feeb0f6b22e1dc2f8b414d6f5fb88fcf32d417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:4a:87:30:f1:50:0e:70:18:95:66:7a:69:5a:
                    f6:b3:55:62:81:27:bd:9d:0d:a2:f9:bf:cb:fe:f7:
                    2d:12:3e:83:30:e4:d2:cd:75:2c:e6:1b:e6:e6:f0:
                    13:af:f6:2f:79:e9:60:85:b9:df:01:16:f2:70:f7:
                    b9:60:78:63:77:b7:01:16:18:9f:73:99:c0:16:cb:
                    dd:b0:95:ff:0f:b9:80:cf:b7:0e:05:bc:d1:5c:76:
                    5b:74:38:cf:d2:9f:f0:b6:32:ef:26:be:7a:6e:f7:
                    e4:2b:47:ef:64:3b:64:ad:65:bb:67:ba:6b:b5:5f:
                    5a:45:87:b9:44:7b:5a:33:4d:d3:4f:60:ab:03:cb:
                    66:6c:47:e7:6b:ff:a0:3a:b3:ab:5d:2b:5b:3b:f7:
                    27:b5:d0:1d:fc:cc:56:15:3e:61:7a:94:61:cd:17:
                    4d:62:ec:3f:03:47:1c:c2:b0:42:a4:3f:31:a5:a5:
                    9f:bf:5b:29:df:7a:7d:8b:b4:0d:1d:17:35:f0:56:
                    99:ed:0b:bb:58:0e:f1:15:85:12:76:0b:1b:32:e4:
                    2e:47:a8:4e:5a:dc:8f:17:b4:d2:4a:f6:90:3f:1e:
                    e2:75:e0:9f:ae:98:0a:b4:99:d7:d5:9e:9a:db:80:
                    70:73:50:58:73:a0:53:53:cb:cc:c7:3c:91:39:c4:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:6C:20:8B:2D:5D:86:58:65:9A:E8:8D:19:B4:BC:AB:24:AE:CC:F1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/06d79853-234f-43e4-9197-08480964144e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/06d79853-234f-43e4-9197-08480964144e/29feeb0f6b22e1dc2f8b414d6f5fb88fcf32d417.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.108.0-191.97.119.255
                IPv6:
                  2803:9280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26621

    Signature Algorithm: sha256WithRSAEncryption
         a9:8f:ae:99:5a:68:26:8e:d7:e7:f5:d4:14:e0:2d:16:93:b9:
         66:62:b2:6f:40:0d:27:dd:0b:31:7e:2d:f4:44:7d:14:54:57:
         af:dc:5d:63:6f:a1:f0:b3:1b:b0:9a:6b:a5:ef:a5:0d:3d:8f:
         5f:c4:0c:52:1b:52:b2:f1:74:d7:1e:93:47:c3:8d:29:e6:49:
         de:c6:9f:99:5f:37:81:60:14:0f:ea:09:2e:7e:6a:8d:a8:e9:
         4c:71:32:64:90:e8:c1:40:98:f3:02:d8:ec:a2:02:7c:02:c2:
         9f:9b:4b:70:95:7e:d7:66:38:29:78:5b:d0:8a:6a:fb:bb:3f:
         16:76:21:b6:3d:1f:b1:2d:db:7f:c7:d4:a1:49:aa:3b:3c:fc:
         b9:d7:50:c6:3a:a2:b7:eb:df:e0:62:44:db:03:ce:41:7a:82:
         59:ad:d9:f7:37:40:06:3c:a0:62:8c:04:52:af:e3:ea:b8:7d:
         9e:84:a4:8d:79:ac:3e:6c:6c:7e:59:bc:bb:c5:59:bd:f6:ae:
         17:69:98:b6:40:83:78:64:d0:3e:0e:c3:af:5d:5e:96:fa:91:
         fd:cb:33:d0:c4:55:1d:90:f6:f3:dd:b9:b9:99:49:ab:aa:78:
         f3:25:3f:0f:3d:0b:c7:82:6c:41:25:ce:4a:7e:42:a4:9e:f8:
         6f:63:dd:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----