Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34a1fb6103b6301bcfb3fde17f555c7846906db9.cer
File:                     34a1fb6103b6301bcfb3fde17f555c7846906db9.cer (raw, json)
Hash identifier:          AFljwm8M9iDpe1pPkLhDfozEdawX2sgLM1KNHYG+So0=
Subject key identifier:   C6:2B:37:40:A4:75:0A:14:EA:7D:7F:13:3C:B8:FA:E0:95:F7:8F:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E62034
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a42adeb2-bc7e-46fc-b563-b957e03a1067/34a1fb6103b6301bcfb3fde17f555c7846906db9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a42adeb2-bc7e-46fc-b563-b957e03a1067/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Apr 2023 01:41:59 +0000
Certificate not after:    Fri 27 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 27648
                          IP: 201.222.0.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15081524 (0xe62034)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 19 01:41:59 2023 GMT
            Not After : Sep 27 15:00:00 2024 GMT
        Subject: CN=34a1fb6103b6301bcfb3fde17f555c7846906db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:ef:2a:02:a7:30:47:15:8c:cf:cd:35:e9:f5:
                    50:36:2d:7d:42:49:13:b3:c5:a2:be:7f:53:7b:c0:
                    a0:a5:4e:43:01:51:95:d6:1c:5e:3a:69:29:dc:f9:
                    81:fa:e8:20:04:63:1f:1d:04:fb:66:9e:37:65:ca:
                    5b:fa:40:5f:10:c3:07:b1:7e:4e:70:e3:2a:77:db:
                    97:96:25:92:ea:77:e7:4a:bb:8a:c4:25:7a:b2:0c:
                    41:a7:f4:62:aa:7c:e4:9c:4e:e5:14:4e:1a:d6:aa:
                    83:45:25:05:9b:2b:f7:1e:88:16:0a:8e:4b:cd:e6:
                    7f:66:6b:a6:39:1a:87:25:04:5a:2a:f1:cb:3e:1f:
                    61:8b:34:5e:c4:36:7a:d9:74:91:22:36:de:c5:ec:
                    be:76:bf:e7:ba:a0:10:f8:2e:43:8f:4e:b5:1a:d0:
                    8e:85:cf:4d:f3:a3:31:70:4d:8b:6c:95:b2:dd:87:
                    a2:3f:3f:7f:25:5a:9d:89:2e:ee:13:a2:f5:d5:e0:
                    c1:77:24:33:ee:e9:9a:61:75:fb:7d:92:3e:e5:08:
                    17:19:1a:3c:77:df:47:16:cd:b5:ae:a4:ae:a4:18:
                    d2:cf:7f:1b:84:60:83:71:d1:56:01:18:13:cf:08:
                    a1:9d:00:37:44:68:b9:fd:f6:7f:0c:12:42:b6:dd:
                    08:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:2B:37:40:A4:75:0A:14:EA:7D:7F:13:3C:B8:FA:E0:95:F7:8F:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a42adeb2-bc7e-46fc-b563-b957e03a1067/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a42adeb2-bc7e-46fc-b563-b957e03a1067/34a1fb6103b6301bcfb3fde17f555c7846906db9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.222.0.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27648

    Signature Algorithm: sha256WithRSAEncryption
         6b:32:e1:41:1e:6c:82:b7:b5:aa:4b:25:e8:0a:19:bb:a0:22:
         d1:57:05:09:97:de:b3:e4:99:d5:a1:e7:d8:f2:c8:94:13:32:
         99:2b:ac:28:5f:fe:97:28:a8:b0:81:03:9a:68:e0:80:ee:fc:
         aa:a7:9e:be:bb:9a:1e:0c:4b:df:84:bc:60:cc:06:1f:18:66:
         8e:83:7c:49:a6:c1:f7:f9:77:b3:5b:71:b8:fc:8b:44:7a:4e:
         7c:67:e6:e2:52:a3:92:59:0c:40:9a:83:92:2f:e0:0f:df:c3:
         c3:da:06:6c:4b:56:14:b2:ef:39:97:20:29:0c:3e:b4:72:bb:
         94:0d:93:bf:b4:f8:9e:ee:5c:ff:b1:45:da:52:25:c1:cc:f2:
         fb:eb:41:95:26:2f:ee:c7:c7:a5:3e:ab:06:fb:81:07:f1:bc:
         99:50:e4:86:f8:ce:9f:22:2d:8c:04:25:67:19:30:32:ed:1e:
         e8:ca:f7:96:c9:ed:6d:ac:35:a3:c6:6f:d6:8e:26:80:ba:e7:
         7c:6a:50:99:12:8a:21:64:ea:e5:97:04:0d:80:00:a6:2b:1c:
         63:0d:1b:10:59:a5:04:23:e9:5c:6a:09:ee:a0:67:6c:6c:d5:
         e3:2d:96:ca:c4:55:89:55:7a:06:6e:4e:cf:80:ef:ea:87:99:
         ff:2e:56:66
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----