Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/47ebae47f2886f495e15653836c3a5aa754a4331.cer
File:                     47ebae47f2886f495e15653836c3a5aa754a4331.cer (raw, json)
Hash identifier:          gmK0CnDz/ciJ4JqBWswvPqgA81jeeDNAFRYMCODeNDc=
Subject key identifier:   1C:48:07:14:7B:8F:B2:EF:4E:60:A4:D2:91:FF:CE:3A:D0:0B:3A:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2D9FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/70a4a9b8-7017-40b6-a22d-a5223c70d930/47ebae47f2886f495e15653836c3a5aa754a4331.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/70a4a9b8-7017-40b6-a22d-a5223c70d930/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Mar 2023 12:45:24 +0000
Certificate not after:    Wed 05 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 15125
                          IP: 200.89.0.0/19
                          IP: 2001:1300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14866942 (0xe2d9fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 12:45:24 2023 GMT
            Not After : Jun  5 15:00:00 2024 GMT
        Subject: CN=47ebae47f2886f495e15653836c3a5aa754a4331
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ab:d3:b0:cc:00:f2:6b:18:85:90:1b:bc:f2:
                    cb:22:80:1f:92:d6:6d:67:99:17:9a:98:02:f4:14:
                    b8:15:6c:2a:17:e0:02:a7:62:33:9a:dd:05:15:d5:
                    70:4d:94:6c:6e:b0:e8:85:6a:c7:e3:9e:27:a1:46:
                    a5:da:38:39:f9:e0:32:5d:2a:06:43:2e:b3:5f:6f:
                    37:57:49:fb:2b:e2:f0:8b:6f:cc:a3:15:57:32:49:
                    9e:59:bf:08:2c:c2:50:44:97:c5:d1:73:58:d4:1e:
                    1b:99:35:ee:b0:b4:43:7a:31:be:78:2e:8a:27:78:
                    86:24:55:3a:f3:d5:a7:ac:e9:b2:18:29:7a:94:1d:
                    18:b5:db:88:e4:2d:c9:1f:0b:29:62:4c:90:7c:8f:
                    3e:05:d9:cf:32:ca:a4:49:27:fc:0c:22:96:63:c0:
                    66:7e:46:06:13:b0:da:d7:87:49:bf:79:08:a3:92:
                    7e:2b:64:47:3c:be:bd:ea:75:a6:75:c2:79:70:76:
                    4d:52:63:da:6a:21:03:09:02:86:f1:ac:48:89:fe:
                    71:83:3d:ee:ca:4b:b5:f6:10:89:4f:93:5a:31:a5:
                    62:75:bb:67:b3:d8:e5:10:f1:10:05:43:7a:c9:f4:
                    d5:a6:3f:29:58:e7:51:bc:9f:cd:d5:b2:93:97:2f:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:48:07:14:7B:8F:B2:EF:4E:60:A4:D2:91:FF:CE:3A:D0:0B:3A:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/70a4a9b8-7017-40b6-a22d-a5223c70d930/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/70a4a9b8-7017-40b6-a22d-a5223c70d930/47ebae47f2886f495e15653836c3a5aa754a4331.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.89.0.0/19
                IPv6:
                  2001:1300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15125

    Signature Algorithm: sha256WithRSAEncryption
         16:be:60:3b:fa:e8:8f:1a:ab:45:58:84:54:a8:b3:48:0b:91:
         cb:69:27:4b:46:82:fb:a4:de:fc:b2:23:8e:9a:ad:73:dc:e7:
         2b:1c:62:8d:e7:dd:c1:be:6f:5c:c3:3e:18:5d:59:62:03:4b:
         9a:3b:d5:0a:ef:e3:bc:72:c4:66:21:f4:b2:fb:b1:41:96:bc:
         6d:4f:65:5f:da:d7:b8:43:ed:2a:52:07:02:1f:26:ed:d8:d0:
         a1:24:bc:2d:9d:21:43:f1:54:49:7f:74:a7:f8:1d:8b:d0:ff:
         67:ab:d9:91:c7:01:53:32:f7:da:dc:0b:7e:eb:2f:09:58:4d:
         18:32:b4:d3:c5:92:da:a3:20:66:0d:90:47:27:0f:2a:4b:6e:
         ad:01:77:e2:d7:90:f7:04:1f:6e:f2:0a:33:47:91:41:17:c8:
         76:62:4a:96:59:87:48:49:88:77:10:b7:53:81:8b:f8:a2:ad:
         ee:88:08:bd:bf:ac:34:88:1a:fa:82:b1:48:ac:b1:c6:58:9b:
         6c:76:a2:8f:bb:e9:6c:8b:06:30:b4:36:e0:21:02:46:f1:c2:
         5b:2a:61:3d:d2:cf:c4:b6:6b:6d:f2:7d:8c:37:b2:c7:8b:51:
         77:fb:81:b3:75:72:3c:d7:fc:a3:b8:38:9d:a9:7b:0f:a8:56:
         e0:82:36:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----