Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5071c75041995824de8b44f5080ce681503e73a6.cer
File:                     5071c75041995824de8b44f5080ce681503e73a6.cer (raw, json)
Hash identifier:          s858xIbXQctVeD4OwcG1y8YI98xyqyvbLFNBseoFZkE=
Subject key identifier:   AB:67:B7:47:AC:11:79:D7:36:C0:BD:C7:2C:37:72:6F:28:35:D3:76
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF1D27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c6ed3474-b2f8-4b6f-a406-5fd0ac42c588/5071c75041995824de8b44f5080ce681503e73a6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c6ed3474-b2f8-4b6f-a406-5fd0ac42c588/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 21:25:11 +0000
Certificate not after:    Sat 17 May 2025 14:55:14 +0000
Subordinate resources:    AS: 61696
                          IP: 138.36.232.0/22
                          IP: 201.140.248.0/22
                          IP: 2804:1ae0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16719143 (0xff1d27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 21:25:11 2023 GMT
            Not After : May 17 14:55:14 2025 GMT
        Subject: CN=5071c75041995824de8b44f5080ce681503e73a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ce:94:e5:0e:e6:3b:df:30:fc:13:f4:2e:d9:
                    0e:47:6d:3a:f1:a6:4b:97:6e:ba:d6:5d:73:f1:85:
                    7a:76:50:c6:7b:78:38:bb:dc:c1:65:d8:a3:df:83:
                    63:65:d2:08:e3:62:aa:30:82:55:9e:0d:85:d9:86:
                    c2:95:07:a6:ef:41:b3:d2:1c:8b:8a:7c:fd:c3:14:
                    42:f2:29:38:76:2f:28:22:c3:85:3e:56:e0:5a:68:
                    69:f5:98:67:d6:aa:0e:f5:14:d9:d3:bb:93:d3:c2:
                    2a:0a:82:6e:ed:18:27:48:75:10:21:a3:0c:a5:f1:
                    45:71:1f:51:1f:c2:2e:c4:ff:9a:a7:dd:27:03:d2:
                    78:a3:3e:8e:0e:66:01:57:0b:82:1d:24:3b:17:3b:
                    3b:5a:21:de:ec:32:c7:d8:a0:da:46:9d:74:24:ed:
                    26:fb:bc:0b:8d:58:08:21:01:d4:29:69:3b:17:f3:
                    d4:59:bc:92:f2:5e:25:88:f8:d2:b5:69:98:3f:07:
                    ee:64:ce:aa:a9:dd:4a:92:b4:1a:d1:8a:a9:f0:b2:
                    f3:f2:fa:9a:0f:7d:72:02:41:bb:3f:85:1c:63:ee:
                    02:69:c0:ba:c3:46:2d:59:be:cf:3f:91:15:e1:50:
                    53:90:bb:82:20:86:4d:a5:0b:a1:35:12:96:7f:7c:
                    7d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:67:B7:47:AC:11:79:D7:36:C0:BD:C7:2C:37:72:6F:28:35:D3:76
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed3474-b2f8-4b6f-a406-5fd0ac42c588/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c6ed3474-b2f8-4b6f-a406-5fd0ac42c588/5071c75041995824de8b44f5080ce681503e73a6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.232.0/22
                  201.140.248.0/22
                IPv6:
                  2804:1ae0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61696

    Signature Algorithm: sha256WithRSAEncryption
         b5:0e:90:cd:bd:f4:07:34:85:86:2c:71:88:97:8e:41:13:01:
         0a:d2:72:0f:2f:19:a3:19:ce:10:16:b9:7f:3a:71:d1:92:03:
         e4:79:42:35:89:6e:70:53:30:dd:1a:3a:56:64:71:04:b1:d1:
         8e:d9:c1:d5:f8:a4:27:ec:45:de:51:4f:81:71:31:b8:cc:66:
         bd:60:7d:92:72:ad:f7:7c:ae:3f:9a:b2:66:c3:ed:64:13:c3:
         e3:f8:e6:8a:e5:b6:4e:2b:8c:81:07:16:5c:64:13:c1:e9:77:
         c7:50:99:f1:0b:9b:ef:36:98:ce:d8:da:31:b0:35:29:16:0e:
         df:ae:35:72:de:f8:98:f6:99:b8:84:18:e9:4c:89:07:70:b9:
         38:15:29:9a:5a:0f:df:ee:eb:d4:f5:22:4f:6e:9e:a6:5b:80:
         d8:63:90:28:5d:28:37:09:d9:35:43:35:cf:58:43:93:07:7e:
         c1:37:d5:e7:f0:af:c7:9a:80:88:23:74:04:ba:13:7b:de:a7:
         dd:f5:4d:e9:d3:e4:f6:f1:ad:02:1a:8f:06:b3:2e:56:7f:e7:
         5f:ed:ee:a5:aa:9b:ed:62:46:06:7e:27:cb:b9:dd:5a:81:83:
         b0:52:f0:8b:10:c0:3d:fe:c0:31:ee:18:f1:ce:4c:dd:30:24:
         bf:3d:3b:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----