Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34a130181ab5304cb2d82c4090c13bc5bdda993d.cer
File:                     34a130181ab5304cb2d82c4090c13bc5bdda993d.cer (raw, json)
Hash identifier:          7BUzw1mG8GONpnzA+/q5d35hzsxQWBTGphYxIpP7XyM=
Subject key identifier:   DE:BD:02:41:71:DA:D3:69:A8:18:C9:31:E9:8D:7D:DA:C9:82:62:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFA1DA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/22a1a8d7-e622-4922-9fc8-04476fee98bc/34a130181ab5304cb2d82c4090c13bc5bdda993d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/22a1a8d7-e622-4922-9fc8-04476fee98bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 30 Oct 2023 13:20:29 +0000
Certificate not after:    Wed 16 Oct 2024 20:12:04 +0000
Subordinate resources:    AS: 264650
                          IP: 200.10.191.0/24
                          IP: 2801:1d:1000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16753114 (0xffa1da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 30 13:20:29 2023 GMT
            Not After : Oct 16 20:12:04 2024 GMT
        Subject: CN=34a130181ab5304cb2d82c4090c13bc5bdda993d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:b2:c0:52:e4:db:50:d6:b4:7c:47:a0:b6:fd:
                    1c:a5:15:f1:ff:38:2e:49:f0:cd:29:21:b2:2a:d8:
                    16:c4:4e:63:76:e8:99:c3:a0:ad:33:b7:4f:eb:a8:
                    e3:e2:89:a5:d7:b7:14:e0:58:e5:7c:d1:1f:d3:20:
                    be:05:f2:a7:bd:57:96:06:e9:5e:d9:db:e9:6c:ff:
                    05:1d:f6:da:b7:8f:5a:b5:92:3d:0e:b8:43:96:e0:
                    41:7e:11:20:3c:9e:c2:f6:d2:aa:10:ce:b2:7e:d4:
                    5e:9a:21:01:8f:15:81:ce:40:f0:0b:5d:8c:eb:55:
                    e6:e3:62:1d:07:18:88:d4:d7:e6:b3:af:d8:27:b1:
                    9a:0e:d5:44:0b:93:05:cb:44:f9:91:7b:e3:c7:16:
                    0a:13:8d:b1:2e:92:e8:08:41:e7:5e:71:c4:96:8d:
                    b1:f7:80:0f:11:20:41:e6:f2:44:f3:12:00:9c:64:
                    98:2a:6d:20:47:89:0d:00:5c:57:fc:c4:e4:61:3b:
                    5b:e0:5f:e3:cc:e5:6c:a9:76:62:39:0e:41:11:78:
                    ef:61:78:a4:e5:09:98:ae:f2:87:12:6e:c4:1e:4a:
                    78:ce:bf:ec:90:a1:ef:51:d8:51:49:a3:06:ab:a5:
                    c3:16:da:61:bb:69:e1:45:a5:49:d5:69:a7:c9:51:
                    a0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:BD:02:41:71:DA:D3:69:A8:18:C9:31:E9:8D:7D:DA:C9:82:62:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/22a1a8d7-e622-4922-9fc8-04476fee98bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/22a1a8d7-e622-4922-9fc8-04476fee98bc/34a130181ab5304cb2d82c4090c13bc5bdda993d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.191.0/24
                IPv6:
                  2801:1d:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264650

    Signature Algorithm: sha256WithRSAEncryption
         68:eb:41:48:6f:8a:cc:b2:1c:41:9e:16:87:df:0b:71:e1:1e:
         ad:57:98:cf:78:df:ba:3f:5f:59:b3:da:ec:b8:af:a4:c6:82:
         dc:39:12:b8:05:71:aa:07:a1:37:f4:b6:f8:ab:ce:37:77:e8:
         9d:8e:dd:bf:ee:ba:ee:0d:51:cf:d6:11:3a:7c:a1:2e:d8:68:
         95:6e:8f:f9:5f:1a:91:8b:ea:26:38:60:4e:a3:92:fa:74:7e:
         48:2e:a1:5d:22:3d:f8:6c:4b:a1:5e:b9:15:66:e0:c4:c1:34:
         4f:8f:11:de:6a:58:74:3b:34:da:56:be:6b:7a:fb:0e:f2:7b:
         7e:1a:44:ad:ca:76:2a:ef:89:6a:e3:3c:b3:f9:7d:44:4b:16:
         24:6c:0a:e9:40:c5:60:b6:cc:36:2b:90:fd:50:08:f4:95:51:
         f1:df:41:11:b7:4a:c5:57:52:4c:ae:88:8a:fa:72:0d:02:c9:
         17:8d:db:69:0f:83:4c:7b:13:c8:44:43:37:a3:85:4d:a7:e6:
         1c:a1:ef:e8:30:ea:41:81:bc:10:b2:ad:d3:37:c4:30:c9:01:
         44:58:6b:c9:13:8f:cd:ba:af:63:0b:92:35:45:2e:7b:83:8e:
         c0:29:95:3b:50:c4:ba:32:a1:38:2b:06:af:b7:9d:7f:a0:37:
         bc:85:e1:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----