Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3982e8e383a06550342d69c8ac4b1720a8e86f43.cer
File:                     3982e8e383a06550342d69c8ac4b1720a8e86f43.cer (raw, json)
Hash identifier:          FfyBr/GhqWGCUcrn+P81cACYnszYKbyLNQVWXJg6Xw0=
Subject key identifier:   8D:6D:0D:AB:21:C9:FC:28:28:E8:46:F0:87:91:A3:3B:51:8A:F9:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF0E1C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83a8d66e-adbf-49a4-9345-7a788639553b/3982e8e383a06550342d69c8ac4b1720a8e86f43.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83a8d66e-adbf-49a4-9345-7a788639553b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:51:09 +0000
Certificate not after:    Sat 14 Sep 2024 13:37:01 +0000
Subordinate resources:    AS: 264472
                          IP: 132.255.88.0/22
                          IP: 2804:2024::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16715292 (0xff0e1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:51:09 2023 GMT
            Not After : Sep 14 13:37:01 2024 GMT
        Subject: CN=3982e8e383a06550342d69c8ac4b1720a8e86f43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a0:f4:7c:a3:b7:69:02:ed:6c:b3:c5:ae:89:
                    8e:a8:0b:77:a1:5c:ee:de:e7:94:3d:e8:e0:35:85:
                    0c:a7:6f:ba:84:9e:c5:d4:b9:ed:69:f2:83:d2:01:
                    f7:34:3c:2c:b1:5d:d5:56:8e:45:5c:c5:8e:a5:9e:
                    7b:08:b3:19:61:ae:53:ec:d2:ce:c2:a0:25:08:af:
                    b5:25:4c:e0:02:1f:6c:e1:0a:55:20:2c:aa:cd:d6:
                    7f:54:27:c8:95:30:9c:c1:3b:03:cf:b3:d9:a2:63:
                    51:70:93:a0:bd:54:1d:84:41:ed:59:00:ef:dd:e5:
                    fc:71:e0:23:47:60:38:88:c8:2a:75:da:dd:15:ae:
                    8d:f8:ff:d9:6f:ef:19:f1:84:5b:c7:0c:e8:e4:42:
                    91:5a:21:5e:00:3c:87:0f:99:a1:af:1f:0b:7b:12:
                    2e:ed:a4:91:7e:3e:12:45:15:2d:30:ba:d2:99:a5:
                    ea:e3:8b:ce:8f:62:34:5f:1d:95:ce:cb:7b:d1:81:
                    f6:de:38:95:60:a6:82:d8:48:fb:22:e1:08:dd:10:
                    12:34:5f:1f:e1:89:e3:8f:be:d5:fe:16:98:b1:e7:
                    f0:a9:2a:a7:e3:9a:3c:db:c4:6b:b6:6a:da:03:9f:
                    61:ae:94:06:e8:dd:2f:47:c1:f2:c3:be:46:0c:de:
                    77:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6D:0D:AB:21:C9:FC:28:28:E8:46:F0:87:91:A3:3B:51:8A:F9:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83a8d66e-adbf-49a4-9345-7a788639553b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83a8d66e-adbf-49a4-9345-7a788639553b/3982e8e383a06550342d69c8ac4b1720a8e86f43.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.88.0/22
                IPv6:
                  2804:2024::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264472

    Signature Algorithm: sha256WithRSAEncryption
         4e:35:d5:89:1e:65:1e:10:a6:db:e5:26:13:ad:6b:d7:78:34:
         85:51:44:13:e1:fb:fd:78:da:62:79:49:c3:ab:3b:b9:a9:a6:
         99:f0:49:fa:d4:34:4b:b1:7b:4f:19:79:b7:97:cf:69:05:60:
         31:db:ff:90:63:14:38:a3:6d:a8:03:38:c6:46:10:32:1a:54:
         a9:65:36:62:3c:d2:42:8e:e5:e4:15:25:ef:fc:29:fe:a3:a2:
         71:f0:1e:52:e5:1a:98:60:e4:d0:7e:a7:4a:3d:b9:8a:19:04:
         49:43:2a:8f:29:60:6b:7c:ed:f9:19:02:6f:c0:f5:0e:61:b8:
         23:7b:3e:84:a0:cd:e7:2d:1d:04:b6:cf:71:c7:07:cd:04:84:
         f4:3c:a0:03:53:dd:1a:89:65:66:27:8c:0a:c6:69:5e:2b:6c:
         c0:9c:da:64:c9:cf:9e:3d:b6:55:5d:93:50:ea:43:c3:1d:26:
         28:25:48:aa:ab:dc:99:d3:99:fe:16:d7:9e:a3:9b:1e:a2:c0:
         44:f8:23:41:96:2b:02:8e:10:9b:af:15:bb:d3:6f:83:dd:e5:
         58:ef:46:e2:6e:55:ab:57:25:ac:e2:9b:d0:94:1c:99:37:5a:
         7d:e5:9b:bd:95:64:ca:0b:7b:fd:ff:f3:b0:7e:50:4f:d6:26:
         c2:ed:fd:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----