Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3b1248c1f99f9a2e51774e4101e6ab8d44a255ab.cer
File:                     3b1248c1f99f9a2e51774e4101e6ab8d44a255ab.cer (raw, json)
Hash identifier:          l3M4IZkFcjz6ME0fHxbBEevYs5lZdoLJ0M5xi5J2+Ww=
Subject key identifier:   F4:20:44:DD:41:B0:A1:2B:07:EF:49:AF:53:1D:BB:AF:E7:B1:C5:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC0212
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e8a11e11-12e0-4234-9f1b-4d13220c59c0/3b1248c1f99f9a2e51774e4101e6ab8d44a255ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e8a11e11-12e0-4234-9f1b-4d13220c59c0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Oct 2023 18:39:57 +0000
Certificate not after:    Thu 22 May 2025 15:23:03 +0000
Subordinate resources:    AS: 270062
                          IP: 131.100.48.0/22
                          IP: 2803:3e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16515602 (0xfc0212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  5 18:39:57 2023 GMT
            Not After : May 22 15:23:03 2025 GMT
        Subject: CN=3b1248c1f99f9a2e51774e4101e6ab8d44a255ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:12:dc:34:9a:45:18:fd:21:21:ce:52:02:a1:
                    b1:7b:77:d1:e7:b3:b5:1e:1d:ea:87:a8:f1:f1:82:
                    0e:00:b1:93:c0:72:a6:9c:fc:a7:e1:c9:85:39:6b:
                    11:f9:71:b0:db:21:0a:cf:a7:d8:97:46:07:1c:b4:
                    02:07:a0:84:73:ab:22:37:50:a9:15:3a:ed:2a:df:
                    6c:64:cf:ff:f1:c0:f0:77:f0:31:3a:50:7e:ee:c1:
                    d2:ad:3e:bc:77:10:66:5a:ff:53:0a:77:9a:59:82:
                    d0:41:f5:29:53:bd:37:b4:ac:91:f9:c9:ef:92:d1:
                    62:a7:c2:71:e2:08:a1:cd:01:fb:3d:e1:68:6e:d4:
                    db:dd:2b:e4:f1:f6:07:69:cb:5d:f0:eb:30:a7:2a:
                    99:2c:f6:19:5c:84:a5:c4:6a:06:38:34:4f:c6:a6:
                    0b:04:e4:28:eb:e5:5f:3b:42:a5:be:a1:8c:29:d6:
                    93:d7:51:1d:3b:0b:1f:df:3d:c2:31:90:1e:ab:b3:
                    bd:06:82:f3:d1:f6:13:fb:53:62:6b:26:69:84:32:
                    1d:2c:b0:0e:75:76:57:87:6f:b9:c6:de:4f:21:70:
                    58:bf:28:f5:f0:5f:55:20:84:38:b6:97:2b:a1:35:
                    06:7f:98:c0:27:69:b2:a8:01:f9:65:f3:25:0c:56:
                    1e:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:20:44:DD:41:B0:A1:2B:07:EF:49:AF:53:1D:BB:AF:E7:B1:C5:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e8a11e11-12e0-4234-9f1b-4d13220c59c0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e8a11e11-12e0-4234-9f1b-4d13220c59c0/3b1248c1f99f9a2e51774e4101e6ab8d44a255ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.48.0/22
                IPv6:
                  2803:3e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270062

    Signature Algorithm: sha256WithRSAEncryption
         88:e1:ff:33:05:70:b6:58:be:ae:59:53:54:92:58:84:a5:2d:
         24:19:e3:aa:a2:4b:5e:22:d2:d9:33:8c:55:a8:58:2d:86:59:
         02:fb:ef:ef:5d:6e:b6:70:59:6a:ab:64:8d:3f:c5:4b:b3:f4:
         7a:e0:6f:8d:2f:da:34:d7:5f:39:a0:00:e8:a2:78:43:35:75:
         30:1e:d7:e8:b4:07:f3:e7:53:da:b1:cb:fb:69:62:77:37:c5:
         91:0f:ce:7a:fc:7b:30:42:b4:32:3f:87:fb:18:af:42:ca:44:
         0a:1c:e0:8a:0d:24:cf:c6:35:41:1c:b3:bd:df:cd:10:1c:1b:
         50:58:7e:17:16:b8:e4:cd:dd:a4:85:5b:1f:86:09:57:cd:0d:
         4d:19:12:17:05:cb:80:68:79:1d:cc:45:a4:7b:dd:70:de:11:
         af:78:0b:f9:1c:ab:76:31:7b:93:61:2d:03:d2:c3:75:3d:7b:
         f2:e2:11:10:0b:15:94:0e:c8:9b:c2:f0:9c:f8:8e:01:6a:ff:
         a2:72:15:2e:c9:d7:5b:6e:0c:60:18:1b:85:be:83:48:4a:9b:
         56:72:26:a3:74:15:f6:fd:eb:39:06:c8:3d:a0:ed:e6:e9:b7:
         0c:2e:ca:4b:80:0d:27:5b:8a:ab:d5:5b:0d:1f:80:71:9f:9f:
         76:69:29:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----