Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34a8062b68c1c4a96253ac457a26076c1bbfbea3.cer
File:                     34a8062b68c1c4a96253ac457a26076c1bbfbea3.cer (raw, json)
Hash identifier:          FecHceWxx5XkMU8sLbWpAz50ynCCFkjtDc+bAiquiw8=
Subject key identifier:   BA:DE:0E:14:03:8E:AB:4F:57:12:6B:88:67:1A:03:C0:4A:00:4A:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F957CF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/26d6a60f-5a65-4fbb-99da-949144c5e39e/34a8062b68c1c4a96253ac457a26076c1bbfbea3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/26d6a60f-5a65-4fbb-99da-949144c5e39e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Sep 2023 20:23:20 +0000
Certificate not after:    Sun 06 Apr 2025 21:45:53 +0000
Subordinate resources:    AS: 263247
                          IP: 207.248.101.0/24
                          IP: 2801:1d:2000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16340943 (0xf957cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 20:23:20 2023 GMT
            Not After : Apr  6 21:45:53 2025 GMT
        Subject: CN=34a8062b68c1c4a96253ac457a26076c1bbfbea3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:44:8b:c8:2a:07:f4:22:10:99:27:0e:dd:b2:
                    ce:49:b2:db:e9:52:fc:44:fb:9a:3d:91:17:f2:dc:
                    64:f6:45:70:61:97:1f:f2:0e:a4:67:b9:12:1e:58:
                    3a:e1:89:e7:c5:68:f3:e2:63:a7:fc:c5:90:3f:a1:
                    87:9c:00:fa:68:2c:61:d4:f1:88:a4:0c:26:50:a3:
                    b4:78:88:c6:df:2c:a8:6f:40:52:5b:ab:7b:ed:31:
                    48:28:a4:ac:65:3d:4d:ab:82:12:58:8c:53:76:d1:
                    14:bd:c9:04:1d:fc:dc:30:6e:ca:17:6a:fc:5d:84:
                    a5:79:83:89:8e:a3:f0:95:62:3d:47:74:00:c4:9a:
                    c6:f1:f1:8a:17:3a:b3:4f:fe:ce:12:24:83:c2:cb:
                    46:34:34:83:30:c6:45:d1:42:8a:3d:9c:9a:8d:ab:
                    cc:5d:48:7b:9d:ff:71:de:67:fb:d4:df:82:1d:10:
                    8d:84:92:a5:13:3f:15:97:70:d3:98:1e:93:a9:6d:
                    54:6d:a5:f2:9d:ae:c8:00:71:e4:b0:cf:a6:ef:18:
                    81:be:6b:4d:8d:7c:2d:6c:c0:d8:64:52:d6:b2:fd:
                    62:73:61:9a:7b:f8:17:72:28:89:82:92:6a:b6:ff:
                    5e:ee:4b:3d:77:2b:35:28:6f:4d:71:a0:34:db:ac:
                    2c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:DE:0E:14:03:8E:AB:4F:57:12:6B:88:67:1A:03:C0:4A:00:4A:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/26d6a60f-5a65-4fbb-99da-949144c5e39e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/26d6a60f-5a65-4fbb-99da-949144c5e39e/34a8062b68c1c4a96253ac457a26076c1bbfbea3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.248.101.0/24
                IPv6:
                  2801:1d:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263247

    Signature Algorithm: sha256WithRSAEncryption
         5a:60:78:bf:09:7a:49:4b:52:9a:94:39:53:e7:89:4b:c2:55:
         b3:cc:17:89:a5:03:dc:3b:d3:a9:3d:e3:40:69:e4:19:e2:77:
         1d:29:5e:0d:0a:f4:f2:c2:b3:20:4b:54:54:d8:c0:89:05:c6:
         96:1f:8c:75:73:29:37:a2:f5:0a:9f:7e:cc:0a:02:aa:10:0d:
         a5:64:75:fa:25:ff:6f:9f:e2:30:0f:15:94:66:ad:97:96:a9:
         16:5b:6a:2b:db:68:1c:da:e9:59:45:58:ca:6f:b3:27:c4:fa:
         a4:ea:59:1b:96:de:97:15:dc:a9:e2:0d:ba:eb:48:91:7c:f1:
         8b:d6:bc:68:85:9d:8f:24:6b:71:ec:88:0e:b3:b9:1c:2c:78:
         63:4b:4c:43:53:22:19:2a:46:75:a5:46:1d:57:64:32:52:c7:
         34:b6:50:49:6b:31:85:38:c4:49:14:43:b3:8a:cf:4f:ae:e1:
         71:87:c2:59:7e:8f:d0:20:ac:c0:13:f8:c3:da:ba:39:a9:5d:
         91:0d:98:ad:31:5b:e6:08:1a:63:6e:61:3b:5d:4c:dc:04:f5:
         f8:e7:e0:38:55:15:51:47:af:30:ab:53:03:3f:c6:bc:e5:c5:
         12:ab:be:ad:92:47:7c:b0:68:1a:1f:59:1b:87:b2:00:21:a1:
         36:3d:df:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----