Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3b5677baef1e639d20f615fda4d5651986c5052d.cer
File:                     3b5677baef1e639d20f615fda4d5651986c5052d.cer (raw, json)
Hash identifier:          Zf9rLHEvcj8hB87lgRTumrmfNkXqw9M5+VygBdCYjqM=
Subject key identifier:   4C:A1:B8:31:16:A5:1B:EB:61:95:61:CF:E6:32:5F:B0:93:82:AE:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3C35C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4e330df-d2ac-410b-b9e0-ef4236552d50/3b5677baef1e639d20f615fda4d5651986c5052d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4e330df-d2ac-410b-b9e0-ef4236552d50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 10:11:32 +0000
Certificate not after:    Fri 06 Dec 2024 17:40:17 +0000
Subordinate resources:    AS: 269930
                          IP: 190.83.112.0/22
                          IP: 2803:ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14926684 (0xe3c35c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 10:11:32 2023 GMT
            Not After : Dec  6 17:40:17 2024 GMT
        Subject: CN=3b5677baef1e639d20f615fda4d5651986c5052d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:21:53:1b:88:67:cd:1a:e9:06:97:b1:3f:d4:
                    0d:f8:58:59:28:26:f6:4d:67:b1:62:85:7a:6e:45:
                    ae:21:9d:b5:ad:f5:81:7d:d3:23:79:52:c4:d0:b0:
                    8f:7b:30:d1:a0:71:62:cf:2a:f5:f1:c9:de:83:27:
                    00:a0:e4:62:fb:45:54:11:e7:31:6c:c4:a8:91:f2:
                    8a:45:a0:5a:dd:05:93:ac:5c:24:aa:2a:5a:3a:22:
                    60:a7:b0:da:42:c5:c8:09:33:0d:16:31:16:db:07:
                    9c:aa:0d:eb:a5:6b:c7:4b:8a:00:8b:ee:9f:a1:9f:
                    c5:08:a8:5b:8c:14:4e:cd:0f:e9:90:8e:31:a0:7e:
                    ff:2c:8b:7d:18:a4:62:80:69:ce:f1:7c:13:34:3a:
                    e6:ef:b2:95:da:fd:c2:70:29:8f:1f:97:7f:f1:7e:
                    58:53:80:b1:39:35:95:29:89:2f:3b:ec:cd:fe:1d:
                    e1:aa:33:cc:f8:44:71:4b:7a:60:fb:c6:36:a7:17:
                    06:27:39:1a:f1:37:b0:f1:58:80:07:28:34:96:ff:
                    b4:2c:a9:e7:2b:3f:96:22:10:90:4f:f2:77:b3:3e:
                    ee:2c:67:e8:fb:b9:bf:55:eb:18:b3:7e:72:d5:ee:
                    85:a1:a0:f9:1c:3c:46:d8:ea:77:09:a3:be:53:fc:
                    1c:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A1:B8:31:16:A5:1B:EB:61:95:61:CF:E6:32:5F:B0:93:82:AE:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e330df-d2ac-410b-b9e0-ef4236552d50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4e330df-d2ac-410b-b9e0-ef4236552d50/3b5677baef1e639d20f615fda4d5651986c5052d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.112.0/22
                IPv6:
                  2803:ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269930

    Signature Algorithm: sha256WithRSAEncryption
         08:83:45:fe:9d:3e:b6:ff:3b:6b:c3:7b:88:ea:48:e0:8e:cf:
         05:92:ec:3d:17:f9:f6:c4:32:40:00:fc:73:f0:f9:d9:e6:5b:
         f9:e1:e0:00:0b:17:83:6c:89:8d:55:0d:58:61:53:bc:6d:6a:
         91:ba:08:a1:e7:4a:1f:6f:e2:cc:bc:85:a3:39:f4:be:67:b8:
         e0:e1:1c:38:19:2f:4a:22:b8:16:2a:b7:95:50:04:45:1c:17:
         d1:35:7c:e7:01:f7:ee:49:1f:d4:f8:3d:0b:79:3f:e4:4e:96:
         6b:73:35:75:ea:82:aa:a9:66:d4:58:53:cc:fe:61:8c:e1:63:
         6b:23:30:1b:27:c7:47:cf:7a:ef:b2:59:47:17:a1:95:25:a6:
         3e:26:9d:8e:52:bf:f7:aa:e0:1a:18:59:64:44:47:c7:ed:d7:
         95:8f:d2:49:f5:6a:fc:dd:64:17:ec:64:90:16:37:39:89:bc:
         82:9c:fe:35:62:43:2e:fd:7f:23:36:8f:5d:2d:59:ab:eb:48:
         4c:09:22:d0:d9:b9:78:eb:c8:4a:e9:90:73:ec:f5:09:76:e4:
         7f:fb:99:c0:74:b0:01:c1:44:30:c4:dd:50:3e:a1:2a:08:9f:
         d3:00:9a:bf:e5:c6:58:30:91:28:e5:db:40:da:99:86:81:df:
         ba:d6:28:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----