Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/393f16bb8f1c1016816e89bd464215d123f2ccd0.cer
File:                     393f16bb8f1c1016816e89bd464215d123f2ccd0.cer (raw, json)
Hash identifier:          Zh00luCGJfgGk9eNYxZL7Pxokg1ZmRD7iKgxcdIau1Q=
Subject key identifier:   83:43:4B:03:42:95:DA:35:85:59:4A:25:C7:87:D9:0A:E8:8A:86:55
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE6D1F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7f249fa3-1ab0-4ece-92b0-f58a7ba29a2b/393f16bb8f1c1016816e89bd464215d123f2ccd0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7f249fa3-1ab0-4ece-92b0-f58a7ba29a2b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 13:49:51 +0000
Certificate not after:    Mon 23 Sep 2024 16:13:54 +0000
Subordinate resources:    AS: 264644
                          IP: 143.255.28.0/22
                          IP: 2803:c940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15625503 (0xee6d1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 13:49:51 2023 GMT
            Not After : Sep 23 16:13:54 2024 GMT
        Subject: CN=393f16bb8f1c1016816e89bd464215d123f2ccd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:22:f0:3f:2d:aa:58:0e:42:e8:e7:8c:37:
                    55:b6:d5:ab:e9:f2:34:4e:05:f7:a4:04:24:77:8b:
                    42:b1:b5:90:9b:fd:d9:6d:21:7a:90:0a:c0:c5:75:
                    0e:56:5f:8a:a7:bc:f9:3f:b8:90:99:f4:70:3b:8a:
                    7d:3e:9b:9c:fc:e0:35:d9:c5:cd:e4:10:70:76:b7:
                    77:b6:36:fb:27:8c:97:5d:7f:45:6a:e7:ba:56:19:
                    51:8f:e9:66:c3:74:fc:67:3f:f8:93:ef:4f:f9:62:
                    16:a6:f5:7a:7a:c4:d9:14:96:94:8f:fe:16:83:92:
                    e6:88:1b:43:21:24:e1:d6:fe:1d:93:51:96:1f:15:
                    c0:16:91:01:e8:44:ba:59:f9:44:0b:45:30:61:48:
                    7c:2b:0b:03:a0:50:8c:72:26:6e:22:8b:89:72:34:
                    58:79:92:50:93:73:38:3a:3e:b9:bc:a9:2a:d4:1c:
                    6e:51:5a:55:58:be:9b:f1:fa:6c:f5:49:84:d4:38:
                    7c:5c:28:1b:2d:6d:d2:a1:e1:34:72:e0:07:17:0c:
                    72:3b:c4:5f:c1:c9:51:d5:a5:51:1d:59:ca:11:12:
                    6f:7a:13:db:30:07:3b:e0:1e:bf:59:7e:a1:c8:42:
                    45:99:07:09:9e:63:e8:72:44:62:91:15:fd:b7:fd:
                    c9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:43:4B:03:42:95:DA:35:85:59:4A:25:C7:87:D9:0A:E8:8A:86:55
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7f249fa3-1ab0-4ece-92b0-f58a7ba29a2b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7f249fa3-1ab0-4ece-92b0-f58a7ba29a2b/393f16bb8f1c1016816e89bd464215d123f2ccd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.28.0/22
                IPv6:
                  2803:c940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264644

    Signature Algorithm: sha256WithRSAEncryption
         52:b2:7d:9b:fa:f8:be:0a:eb:2d:d2:47:dd:64:66:bf:83:96:
         19:c4:69:2d:8f:c7:ab:f9:eb:52:53:d3:4f:85:46:aa:3e:54:
         f6:c7:5b:a3:c1:64:fb:68:d3:6b:72:b5:6e:9b:ec:34:65:dc:
         fb:fb:3d:54:1e:ac:96:7c:c0:57:19:6e:ce:cf:3d:e9:84:ee:
         dc:64:ef:bb:e8:f9:1b:e0:f2:55:d9:e3:00:25:5f:56:21:92:
         d7:be:dd:24:4c:18:97:5a:91:9f:17:d8:be:6a:0c:47:ec:0c:
         41:d9:ec:2d:ce:60:c0:4a:24:93:fd:3c:e3:4c:f7:93:72:97:
         e1:0e:b9:2e:e2:b0:07:4a:de:f8:1b:eb:f3:1e:a4:5d:f8:9e:
         a3:e2:62:19:68:d6:47:ef:fa:79:6d:a4:92:a4:d0:7e:30:81:
         7e:71:d4:3e:f7:58:df:f4:8f:60:dc:e1:32:5c:be:7d:d1:f2:
         29:ce:bc:8a:ab:6f:48:31:34:7b:fa:ea:4c:d7:c9:d7:f8:35:
         a9:30:e4:a9:b1:d9:2f:4e:de:2d:03:25:88:f0:e9:9b:fb:be:
         de:3c:79:31:ab:03:72:ac:2c:09:51:9e:0f:eb:63:98:0e:f2:
         03:2d:6e:73:61:e5:62:58:be:f8:94:9c:45:cb:c5:4e:08:b3:
         eb:86:12:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----