Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f08c650c624b07b23ac0d2ea8fa5697434763be.cer
File:                     3f08c650c624b07b23ac0d2ea8fa5697434763be.cer (raw, json)
Hash identifier:          gikDI5gRWQQHvagfuyLWuvY2B6uvj97KKFkPClwiSLo=
Subject key identifier:   20:B6:43:9A:E4:C1:A2:3B:96:E4:1C:E9:86:84:B3:4C:6E:31:9D:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3AD5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/39a193fc-e723-44db-be63-54df459a7cd9/3f08c650c624b07b23ac0d2ea8fa5697434763be.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/39a193fc-e723-44db-be63-54df459a7cd9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 20:31:41 +0000
Certificate not after:    Tue 20 Aug 2024 15:38:22 +0000
Subordinate resources:    AS: 61514
                          IP: 143.202.200.0/22
                          IP: 2803:4140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14921054 (0xe3ad5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 20:31:41 2023 GMT
            Not After : Aug 20 15:38:22 2024 GMT
        Subject: CN=3f08c650c624b07b23ac0d2ea8fa5697434763be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:2e:c5:e6:82:13:8d:4b:ef:38:04:cc:98:4d:
                    03:db:f4:a3:56:8f:75:17:ac:01:98:d6:95:64:ea:
                    13:ed:ea:e2:08:6a:5a:ff:02:d8:7b:ee:21:2a:59:
                    1c:f8:8b:41:5e:ea:9a:0a:f1:58:38:08:69:ed:19:
                    58:09:90:ff:9d:34:d9:4b:f0:f2:f2:f4:84:3c:3a:
                    d8:72:59:be:d5:bd:b9:64:26:96:b1:cb:0d:16:33:
                    97:6a:c9:ff:92:dc:16:41:35:4b:0b:50:07:00:e7:
                    6d:a6:58:a0:a0:13:16:c2:ac:a1:26:7a:84:55:08:
                    f6:6e:c6:f5:ac:55:d4:65:4e:98:93:00:df:40:c5:
                    b1:92:97:12:90:1c:3a:aa:dd:ca:24:bf:11:63:09:
                    a9:2d:b5:23:0b:27:52:90:73:ff:c6:88:80:24:79:
                    c7:e9:6c:70:d0:00:e4:1f:f2:1a:ca:6d:af:4e:40:
                    ae:4e:b1:52:12:a2:bb:34:43:a5:1a:09:9d:8b:50:
                    42:62:2b:5c:71:fe:29:bd:47:8f:ed:1e:81:b0:69:
                    21:e2:a7:20:4a:5c:10:85:51:7e:04:9d:ed:31:68:
                    bf:17:44:99:ec:a6:0f:f1:7f:3c:4c:64:f1:bb:e8:
                    a5:53:62:82:3f:86:83:00:a7:90:9e:7d:e2:07:4a:
                    53:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:B6:43:9A:E4:C1:A2:3B:96:E4:1C:E9:86:84:B3:4C:6E:31:9D:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/39a193fc-e723-44db-be63-54df459a7cd9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/39a193fc-e723-44db-be63-54df459a7cd9/3f08c650c624b07b23ac0d2ea8fa5697434763be.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.200.0/22
                IPv6:
                  2803:4140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61514

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:79:77:90:c5:f9:84:2d:0e:6c:ed:db:dc:2f:a5:9e:a8:
         18:a2:27:2d:b1:10:9d:9e:84:d6:e5:bb:7d:4a:e7:cd:e6:e7:
         5b:7b:e1:d9:e0:9c:3c:b8:1c:e9:0e:98:41:e0:b0:9c:03:cb:
         14:74:c7:b0:d7:e8:27:59:98:bc:d9:e9:2a:42:30:b9:d1:72:
         97:19:eb:38:54:14:a6:27:cf:e3:f7:d7:91:83:a7:a9:ed:09:
         b4:6a:d8:2a:ed:80:fe:2a:6e:9d:5a:1a:f4:0c:47:88:bf:64:
         4c:39:23:19:2a:fc:bc:b1:ea:0d:0e:b0:78:f2:87:2b:e0:d4:
         47:08:37:a2:f8:f3:a3:b3:b4:2f:10:f7:c0:fe:68:63:25:1e:
         7f:5e:22:3d:1b:ba:65:fa:13:15:81:a6:81:b0:81:2c:2b:cb:
         96:cd:18:7f:d8:d1:8e:76:c2:da:6f:69:69:f6:76:80:c0:c8:
         e1:ca:7a:b4:55:2b:a1:58:e0:cb:0c:5e:b3:7e:00:44:17:51:
         b9:79:b1:9a:a9:1a:98:48:32:5d:97:86:87:a8:59:99:17:81:
         fc:51:c3:3e:a8:74:1b:29:09:00:0f:29:b4:b7:00:2b:e6:66:
         52:15:d1:6a:8a:76:55:3e:30:8d:ac:b4:b9:05:af:55:b7:cd:
         e9:f2:9b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----