Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f570bdd464715a5f6d61bbec0d37dd793653be5.cer
File:                     2f570bdd464715a5f6d61bbec0d37dd793653be5.cer (raw, json)
Hash identifier:          QAIWl1vcEBJim0/NCVtucT/z053JgO2eUEovbFEn4xk=
Subject key identifier:   61:0B:D6:86:48:88:55:53:87:49:97:96:A5:36:AB:49:2B:BE:78:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF8F7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4f72974-0ca7-4f3a-a5cd-a3df7fa4731a/2f570bdd464715a5f6d61bbec0d37dd793653be5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4f72974-0ca7-4f3a-a5cd-a3df7fa4731a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 18:16:49 +0000
Certificate not after:    Wed 26 Mar 2025 15:45:39 +0000
Subordinate resources:    AS: 52351
                          IP: 190.13.88.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15699839 (0xef8f7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 18:16:49 2023 GMT
            Not After : Mar 26 15:45:39 2025 GMT
        Subject: CN=2f570bdd464715a5f6d61bbec0d37dd793653be5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:df:a1:a8:75:97:22:54:77:ed:3a:7b:e7:7d:
                    fa:8b:6a:d3:66:e8:70:e4:a3:27:23:23:60:df:e4:
                    74:54:fb:d2:35:b2:5f:5f:4f:ca:82:f6:1c:a5:71:
                    dd:3d:38:f7:c5:17:03:59:c4:be:29:59:82:e9:c3:
                    3e:a3:53:37:ce:65:a3:f4:46:16:a1:1e:c4:82:4b:
                    3c:4c:24:cf:ce:28:4b:f2:40:39:b8:07:e9:19:7e:
                    07:63:a1:53:c3:43:73:62:b4:b7:ae:5d:42:22:6a:
                    bd:85:70:cb:e3:e1:83:d2:5c:db:9c:08:75:ed:f9:
                    81:b8:5d:c0:b7:ac:99:36:b7:e5:1b:42:e8:0c:7d:
                    86:02:d4:25:46:6c:a2:cd:8d:b0:c7:9c:bc:32:68:
                    4e:84:90:0f:14:40:f4:f7:17:1f:34:8a:bf:d2:6d:
                    e5:59:7e:ee:cd:6f:a0:f0:8c:02:84:6d:2f:92:4e:
                    33:94:2c:0c:b7:7d:91:9b:86:3d:dc:a1:d6:06:aa:
                    55:64:97:8a:47:8d:a5:56:3f:00:ef:68:e5:5c:f1:
                    80:9f:9f:c1:e8:b1:e6:eb:c5:7a:e6:f4:7a:63:33:
                    fd:5e:d4:e5:bd:29:34:04:37:8e:eb:c4:54:5b:70:
                    3e:db:35:53:69:41:a1:15:08:b5:43:df:43:34:44:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:0B:D6:86:48:88:55:53:87:49:97:96:A5:36:AB:49:2B:BE:78:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4f72974-0ca7-4f3a-a5cd-a3df7fa4731a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4f72974-0ca7-4f3a-a5cd-a3df7fa4731a/2f570bdd464715a5f6d61bbec0d37dd793653be5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.88.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52351

    Signature Algorithm: sha256WithRSAEncryption
         13:60:e7:46:ee:5b:a1:d8:37:fd:bd:2d:de:65:2b:4b:68:76:
         1a:19:2c:48:41:dd:cc:13:81:b7:fb:9f:8c:e7:79:64:a9:10:
         b9:c6:de:8e:8d:80:d9:dc:9c:c1:92:c2:4c:8c:dc:0c:19:d6:
         37:15:3e:04:05:2d:42:84:56:b3:8d:c3:73:62:9c:59:cc:07:
         a9:36:5c:28:bc:9a:b8:01:a9:4e:d0:0d:91:f0:98:5f:76:07:
         c7:e0:47:f5:89:a0:c9:e6:f0:47:76:5e:8d:c4:79:c0:19:59:
         2a:34:be:64:dc:c2:05:47:6b:ea:66:9f:be:8e:41:b8:86:44:
         04:01:1a:12:b2:1b:0e:44:30:2c:32:95:6c:cd:fa:ef:77:e8:
         40:68:01:88:46:f2:7e:e1:ab:84:46:b3:b3:6a:75:a5:2d:14:
         11:c9:03:97:e7:50:59:c9:12:0e:4c:6b:35:85:68:8d:9a:8f:
         cb:ff:7a:dc:0b:55:90:ca:49:34:39:22:88:f1:96:0a:d9:6f:
         cf:a0:c4:f2:1e:f2:60:3c:db:49:49:5f:1f:75:94:ef:4a:87:
         84:48:47:1c:ac:fd:29:8b:8e:cb:a3:82:33:62:75:62:37:4f:
         95:4e:af:ed:18:50:96:b9:c3:50:8e:6d:2b:be:87:c1:ce:0a:
         34:39:ce:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----