Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3b9cc04641aa2c4159474adaba3cbc235bbfd43b.cer
File:                     3b9cc04641aa2c4159474adaba3cbc235bbfd43b.cer (raw, json)
Hash identifier:          y6aSSa8In6DY5EHS4raJNq3sz8BxN9/tc9yy5biqyY8=
Subject key identifier:   A6:2F:E5:B0:F5:ED:BC:F0:61:7B:6D:CC:63:E0:33:0F:9C:D7:1F:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9D504
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2eb1074a-40ec-4f14-b369-f257d0758c7e/3b9cc04641aa2c4159474adaba3cbc235bbfd43b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2eb1074a-40ec-4f14-b369-f257d0758c7e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 07:43:21 +0000
Certificate not after:    Wed 04 Dec 2024 04:00:00 +0000
Subordinate resources:    IP: 191.97.100.0/22
                          IP: 2803:1280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15324420 (0xe9d504)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 07:43:21 2023 GMT
            Not After : Dec  4 04:00:00 2024 GMT
        Subject: CN=3b9cc04641aa2c4159474adaba3cbc235bbfd43b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:9c:06:09:6f:d6:d3:d6:85:50:a7:36:20:37:
                    3f:27:5a:ec:34:9f:d9:bd:04:a4:7f:98:ee:a9:44:
                    e1:94:da:2e:28:62:94:c1:71:81:38:a6:43:b9:21:
                    45:86:5d:8b:83:d2:f7:58:f1:d8:fc:ce:e7:c3:dd:
                    64:c5:4a:98:79:49:aa:b7:65:36:fd:a9:6b:38:af:
                    df:a4:4d:58:9b:4f:73:62:ae:51:b7:0f:12:21:24:
                    a9:61:63:ae:87:82:8a:04:33:21:f2:88:8c:32:98:
                    4a:25:63:8c:d3:1a:29:c2:ce:a4:fa:d1:d1:b7:34:
                    24:27:d0:23:91:8a:53:94:9f:e0:4f:ed:ad:e3:48:
                    d7:47:a2:9f:1b:88:7f:97:99:39:4f:05:9e:d3:69:
                    79:b2:dd:f9:1d:e4:69:c3:a6:6a:07:aa:99:59:50:
                    d0:a2:21:be:f4:ef:83:0f:41:89:64:16:3d:21:fa:
                    be:5d:7a:52:30:fc:17:72:da:04:f4:cb:78:c3:50:
                    c5:44:ca:d6:7c:c6:b5:c9:04:8d:8e:2c:24:0c:3d:
                    85:4c:7c:a1:a2:86:19:44:60:95:cc:35:91:a3:76:
                    cb:52:2c:49:77:a8:e5:4b:4a:26:cb:9c:64:27:93:
                    06:f6:62:4b:ab:3a:ad:0c:bf:99:a7:1c:a4:6c:74:
                    3f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:2F:E5:B0:F5:ED:BC:F0:61:7B:6D:CC:63:E0:33:0F:9C:D7:1F:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2eb1074a-40ec-4f14-b369-f257d0758c7e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2eb1074a-40ec-4f14-b369-f257d0758c7e/3b9cc04641aa2c4159474adaba3cbc235bbfd43b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.100.0/22
                IPv6:
                  2803:1280::/32

    Signature Algorithm: sha256WithRSAEncryption
         93:e5:eb:f5:fd:85:ea:9a:76:74:17:ef:d0:3c:f0:80:6d:90:
         52:85:1e:5b:8d:4b:1c:8e:8a:f5:0e:1c:fd:4f:0f:d2:fb:39:
         99:9a:95:b5:46:20:eb:49:d7:d8:5f:8c:63:85:1c:4d:f8:7a:
         19:64:61:ae:bc:ec:2e:4a:ff:e5:55:20:8f:02:e8:02:50:8b:
         a7:cc:e2:a2:fe:a5:19:73:de:78:07:84:03:1f:c6:7c:38:fc:
         c1:73:06:1a:ab:53:de:0d:f5:e0:d9:f5:3e:61:24:25:57:f1:
         e6:b6:f1:92:34:e1:3f:9a:7c:b4:12:5e:78:2c:23:bf:14:d8:
         95:89:88:4a:af:7b:93:0e:c9:67:62:da:a4:d6:2a:21:59:20:
         35:36:84:a1:ac:6f:a1:2e:e6:85:a4:cf:92:ff:0a:cd:07:32:
         1c:2b:68:13:2d:8d:06:c6:7f:12:50:ca:d8:b9:dd:2c:a4:18:
         5a:3a:1e:24:1f:87:e1:fc:31:bb:17:4b:7a:29:c5:32:e9:3f:
         a1:2c:c0:1c:de:4c:94:32:bf:26:d9:a0:66:3a:25:cb:1b:3a:
         8f:01:86:d3:52:09:12:33:4e:10:b1:0e:06:ef:84:a7:22:41:
         ed:da:cf:b0:ed:d6:37:1e:73:81:9b:31:3c:26:f2:18:93:28:
         2d:ec:91:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----