Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32d27cacfd3c6cffa3bd5a2e91bfb01ef2141c96.cer
File:                     32d27cacfd3c6cffa3bd5a2e91bfb01ef2141c96.cer (raw, json)
Hash identifier:          +CHohb18ykhJTfAiIDecUV+5t1rq1k1YfRtSHFhz6zQ=
Subject key identifier:   88:72:03:9A:64:3B:70:C7:83:A9:C9:A4:C9:4C:DB:DD:97:FE:A7:22
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECBCD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4a4a6587-0a6a-4ade-ab0c-388d771d3279/32d27cacfd3c6cffa3bd5a2e91bfb01ef2141c96.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4a4a6587-0a6a-4ade-ab0c-388d771d3279/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 12:47:56 +0000
Certificate not after:    Sun 06 Oct 2024 18:00:48 +0000
Subordinate resources:    AS: 263183
                          IP: 179.61.0.0/21
                          IP: 2803:6c80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15514833 (0xecbcd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 12:47:56 2023 GMT
            Not After : Oct  6 18:00:48 2024 GMT
        Subject: CN=32d27cacfd3c6cffa3bd5a2e91bfb01ef2141c96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:cc:8b:ea:17:dd:fd:43:46:03:1a:af:0e:
                    e5:8e:45:7f:f9:51:9e:c6:49:eb:5b:1d:45:4f:fe:
                    a2:28:ae:0f:70:85:e2:fd:75:59:ae:1f:00:f7:ac:
                    49:cc:56:4c:7d:9e:5c:fa:cb:16:14:ee:99:8e:a4:
                    bc:a5:c1:ea:1c:31:0f:e6:43:a1:12:cd:05:2c:28:
                    83:c5:1c:09:78:e1:56:14:e7:23:1f:73:53:ff:df:
                    38:58:a9:ce:a7:27:36:ad:8c:2a:38:3b:ba:59:90:
                    96:bf:5d:cc:85:d5:51:06:a7:b5:24:46:15:c2:b5:
                    8b:0e:3a:12:71:31:c7:32:e7:2a:c7:52:a3:06:df:
                    1c:de:44:5c:22:10:5e:df:6f:7f:0b:7e:98:9e:d6:
                    8f:98:d7:1d:d3:38:4d:59:a3:34:8f:a2:3b:a3:04:
                    2b:a4:15:7c:c3:98:11:a9:39:d7:6b:41:dd:5f:f1:
                    b4:8e:ac:af:24:8d:ca:b3:92:57:19:fc:da:d4:1e:
                    b5:d5:ea:ef:c9:1f:ad:44:2a:21:53:df:b7:f5:9b:
                    d0:21:9f:59:df:b3:d3:29:55:ad:77:40:0b:48:39:
                    b2:81:1b:a1:99:88:53:62:60:cb:c2:26:a7:f5:67:
                    7c:71:83:10:ef:a2:0c:94:86:30:05:f1:1f:28:77:
                    be:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:72:03:9A:64:3B:70:C7:83:A9:C9:A4:C9:4C:DB:DD:97:FE:A7:22
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4a4a6587-0a6a-4ade-ab0c-388d771d3279/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4a4a6587-0a6a-4ade-ab0c-388d771d3279/32d27cacfd3c6cffa3bd5a2e91bfb01ef2141c96.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.0.0/21
                IPv6:
                  2803:6c80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263183

    Signature Algorithm: sha256WithRSAEncryption
         31:45:81:d1:08:86:3e:1b:f4:49:f6:42:cf:8f:f7:71:8e:f8:
         01:02:99:69:13:da:00:2e:b4:24:13:07:b5:2d:73:bf:eb:6d:
         26:ad:b4:df:8c:b7:df:9b:16:5b:20:6c:04:91:79:0f:48:3a:
         87:d2:8e:20:37:33:0a:db:cf:a5:ff:41:f9:87:ca:7b:45:73:
         27:92:c9:14:c1:70:6a:0f:6d:cc:45:ba:2a:bf:ec:60:1d:ff:
         7f:80:15:df:36:92:43:d3:bc:1d:ce:d5:de:c6:ff:11:2e:1b:
         89:94:8f:ef:b3:82:87:b5:2a:fb:2f:f9:6f:8c:14:b1:da:57:
         a2:dd:a1:16:22:57:57:07:c5:85:47:0e:87:8f:ab:57:53:c2:
         45:40:68:f5:83:50:d4:33:74:72:2a:71:92:06:d2:32:d6:82:
         6d:7c:3c:ac:d1:e2:b6:0b:33:a0:8f:36:aa:c1:2d:5d:fa:80:
         c8:95:5d:16:bf:90:7f:f1:ae:89:81:16:25:31:51:ed:64:29:
         45:ba:5f:00:70:8a:6f:f9:3d:65:ca:30:4c:28:c4:5a:cb:5a:
         38:7a:cd:b5:d8:ad:9d:6b:41:d6:b5:c4:9c:ab:97:94:fb:78:
         f4:51:15:01:d2:0d:72:f4:da:a4:4e:6b:de:6a:13:6b:e7:b8:
         c9:ad:7e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----