Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f0bf3ea9553076388a1e00fe7090f84a209a5af.cer
File:                     2f0bf3ea9553076388a1e00fe7090f84a209a5af.cer (raw, json)
Hash identifier:          BqiUeSSxxhF3C22HOvprxgd1JNIhYN3GuHVn34Pn1Ps=
Subject key identifier:   8D:59:89:9F:C8:E5:1A:29:EB:AF:55:5E:14:4F:E2:96:F7:0E:86:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E53202
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1d591d59-9fe2-4024-88aa-8ecefc176188/2f0bf3ea9553076388a1e00fe7090f84a209a5af.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1d591d59-9fe2-4024-88aa-8ecefc176188/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 16:00:42 +0000
Certificate not after:    Thu 05 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 272915
                          IP: 190.8.8.0/22
                          IP: 2803:6e90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15020546 (0xe53202)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 16:00:42 2023 GMT
            Not After : Dec  5 14:00:00 2024 GMT
        Subject: CN=2f0bf3ea9553076388a1e00fe7090f84a209a5af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:0f:14:5a:72:b9:1e:34:3e:e1:6a:57:ef:
                    31:1b:56:ed:00:3f:66:53:d8:2c:23:62:3b:f7:8a:
                    ec:a1:b5:86:a9:e4:d2:4e:1d:f2:95:cb:00:6c:08:
                    a0:c2:75:6f:6b:78:eb:23:fa:0e:b0:b7:94:4e:b2:
                    8b:b9:fc:6f:78:19:e7:fd:62:c1:c8:a5:73:30:a3:
                    65:aa:54:ba:33:4c:07:f3:8f:36:71:59:7b:7e:e1:
                    5e:24:54:f4:b6:33:60:15:3a:ca:26:7d:56:e9:9b:
                    a6:0a:0a:43:c2:d9:57:cf:ac:1a:1e:c3:da:90:70:
                    a4:80:b4:c0:fb:a5:1c:26:11:1f:f0:2a:f4:a8:45:
                    bf:08:ac:d8:01:d3:cb:64:d9:f2:f1:5d:09:cd:57:
                    4f:ff:c6:14:9d:ab:a2:b7:8d:35:f9:d1:51:8f:8d:
                    f8:31:bd:3a:b0:6c:ba:2c:31:62:ff:f5:7b:d7:c1:
                    7e:26:77:7d:83:1f:bd:38:d4:f6:a7:35:57:6b:65:
                    50:ec:0f:16:cb:6d:15:25:48:c9:c8:a2:7c:6b:e1:
                    47:b9:59:29:da:11:6e:93:ba:95:c1:56:e7:78:0f:
                    ef:11:c3:3b:6c:51:e7:6e:51:2c:79:de:43:56:d9:
                    33:5d:16:f0:0b:c0:a2:f4:e6:23:f6:3f:16:f1:96:
                    36:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:59:89:9F:C8:E5:1A:29:EB:AF:55:5E:14:4F:E2:96:F7:0E:86:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1d591d59-9fe2-4024-88aa-8ecefc176188/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1d591d59-9fe2-4024-88aa-8ecefc176188/2f0bf3ea9553076388a1e00fe7090f84a209a5af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.8.8.0/22
                IPv6:
                  2803:6e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272915

    Signature Algorithm: sha256WithRSAEncryption
         10:c0:53:1c:da:a1:31:53:21:d8:e8:36:b3:e9:61:d0:30:ba:
         bf:af:d0:f1:72:e2:b5:88:0a:28:00:56:3c:24:f7:09:8a:67:
         8e:7a:b2:d4:3c:a3:53:98:70:46:6a:f4:c9:1c:06:7a:fa:06:
         00:49:f6:a8:7c:c9:53:e2:50:3a:95:05:16:f0:f6:de:65:56:
         8a:04:d1:81:7b:a2:da:2c:2b:b5:d0:32:b7:9a:90:ac:8d:72:
         9e:1d:b1:17:49:8c:a3:34:df:d7:e9:8c:f8:46:17:4f:98:4a:
         96:bf:df:c2:3e:5b:00:85:db:ce:43:16:a4:bf:f4:aa:ef:9f:
         ac:a7:69:ed:54:07:3d:2b:3c:39:50:5c:31:15:51:ae:73:8a:
         38:63:f3:44:f7:b1:02:f7:c2:82:9c:4a:82:47:3a:47:19:af:
         f3:0c:74:c4:45:17:4e:95:fc:64:db:1f:2f:23:40:a1:7a:e2:
         14:04:0b:bc:5c:c5:53:65:17:97:d1:2c:77:e5:62:f0:c2:e6:
         a5:44:52:68:2a:c6:fb:ef:c9:b8:8f:23:0a:a3:8a:b5:63:12:
         ab:d1:99:c6:ce:32:3e:13:9b:69:81:b6:0e:f0:d5:97:91:59:
         af:54:4a:6a:ab:db:70:64:9f:5c:0a:ce:30:0c:31:77:21:38:
         62:f9:ba:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----