Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37761f0bb4db84d08d2411c7c84818849e648ac2.cer
File:                     37761f0bb4db84d08d2411c7c84818849e648ac2.cer (raw, json)
Hash identifier:          EAXpkMt/Nf2kx9d8YAomF6/O/ga0lyaPXR7lTR5JHUI=
Subject key identifier:   66:A8:71:67:12:D4:63:81:4C:33:E7:E9:7C:5D:D7:ED:6F:68:3F:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD10E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d21c2cba-c2e2-48b2-9ccc-073a7a2e1215/37761f0bb4db84d08d2411c7c84818849e648ac2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d21c2cba-c2e2-48b2-9ccc-073a7a2e1215/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 13:48:55 +0000
Certificate not after:    Mon 28 Oct 2024 04:00:00 +0000
Subordinate resources:    AS: 28091
                          IP: 190.2.88.0/21
                          IP: 2803:fda0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16584935 (0xfd10e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 17 13:48:55 2023 GMT
            Not After : Oct 28 04:00:00 2024 GMT
        Subject: CN=37761f0bb4db84d08d2411c7c84818849e648ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:78:99:ce:4d:fc:07:ae:c1:7a:54:f1:33:d2:
                    47:17:46:da:c0:83:7c:ee:5d:38:fe:77:7c:b7:48:
                    b1:cc:3a:ec:b9:da:b0:ad:26:3a:86:e1:3f:1c:c3:
                    eb:66:85:94:44:04:fa:35:88:9f:01:e2:28:bb:19:
                    aa:4a:12:6a:c2:79:f0:c5:b8:3e:8c:0f:c5:ff:92:
                    9c:c5:3e:bb:d8:13:97:fb:b8:88:7f:31:ac:7a:1d:
                    40:25:ce:12:07:ec:9d:fb:a4:ee:73:80:b7:a9:e0:
                    17:68:e8:a7:ae:70:04:1c:6f:78:69:03:28:c2:db:
                    95:45:0b:d5:8f:23:4f:af:c0:95:7c:7d:70:22:78:
                    48:48:6c:45:84:e4:90:a7:dc:83:8e:b8:c2:4e:06:
                    de:8e:07:05:5d:08:ac:e7:fe:e8:d0:eb:54:c8:94:
                    48:22:12:91:80:07:6a:d0:a2:e7:09:5c:f7:93:0b:
                    64:04:4d:98:f3:55:66:7b:c3:5c:d2:18:2c:d0:e4:
                    20:c4:45:ae:f5:d9:eb:b3:18:c8:a1:a3:33:b9:76:
                    3e:2d:75:bc:f1:9a:ab:76:ac:6f:21:ae:31:0c:e6:
                    97:55:7a:29:96:61:79:5c:e3:a7:51:46:c8:7b:54:
                    3d:d9:6c:b2:e7:0a:94:18:76:15:64:3e:1d:83:b0:
                    03:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A8:71:67:12:D4:63:81:4C:33:E7:E9:7C:5D:D7:ED:6F:68:3F:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d21c2cba-c2e2-48b2-9ccc-073a7a2e1215/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d21c2cba-c2e2-48b2-9ccc-073a7a2e1215/37761f0bb4db84d08d2411c7c84818849e648ac2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.2.88.0/21
                IPv6:
                  2803:fda0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28091

    Signature Algorithm: sha256WithRSAEncryption
         28:04:12:0f:01:c7:54:bc:3d:dc:0d:0e:76:95:bd:41:57:8b:
         da:a6:14:54:9c:b0:56:49:7d:75:5a:95:75:f5:9d:a5:2d:00:
         b4:a6:59:4b:b3:b2:23:e6:91:dd:3b:86:29:06:7d:4d:56:09:
         dc:3e:b3:c4:ae:c5:1c:10:ce:5c:ea:f6:0f:19:1c:87:53:27:
         fa:ba:13:ea:33:4e:c4:21:f5:8a:00:b3:e9:2f:a5:77:d4:c5:
         c3:1f:3e:23:12:d4:74:95:1c:11:3c:1e:a9:46:9c:aa:82:bc:
         31:7b:d2:83:00:3b:75:35:77:2e:0c:45:f7:12:92:8b:cb:73:
         9a:fa:84:6f:9c:85:b6:9c:23:8e:f2:fa:c4:a4:6c:78:d9:11:
         80:bd:3f:01:0b:17:87:6d:3b:e2:55:54:cd:de:8d:46:df:03:
         7c:e8:99:2e:40:b8:30:65:22:33:d7:c2:b9:49:30:96:8a:a4:
         ff:ee:03:b2:bd:dd:fa:81:20:f0:0c:22:41:b3:e2:2e:07:29:
         37:79:6c:09:ff:af:16:7f:4f:ea:26:0d:4b:ed:a0:66:0d:f3:
         03:68:08:c8:98:e7:99:50:b0:f6:ba:aa:d3:23:c5:e8:c9:b2:
         6b:8a:c4:07:d5:59:06:dd:2d:3c:94:95:e4:9f:1a:19:e1:11:
         6f:7a:8a:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----