Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/519ed548392e54bdcbc81e0077e2af89b18e8acb.cer
File:                     519ed548392e54bdcbc81e0077e2af89b18e8acb.cer (raw, json)
Hash identifier:          It4mEvtntmH6ZIgDu2hRpqlGIUxAu4j6y1Gcs/DgpdE=
Subject key identifier:   A3:2B:DF:57:46:7A:FA:71:16:5B:77:8F:AC:6E:47:2E:D8:65:5A:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3C201
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b6bf2dd7-1796-4c52-b5b3-2b0fb868ba03/519ed548392e54bdcbc81e0077e2af89b18e8acb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b6bf2dd7-1796-4c52-b5b3-2b0fb868ba03/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 02 Aug 2023 20:19:44 +0000
Certificate not after:    Sun 23 Jun 2024 19:17:45 +0000
Subordinate resources:    AS: 265802
                          IP: 181.191.156.0/22
                          IP: 2803:4820::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15974913 (0xf3c201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  2 20:19:44 2023 GMT
            Not After : Jun 23 19:17:45 2024 GMT
        Subject: CN=519ed548392e54bdcbc81e0077e2af89b18e8acb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:f8:5e:82:c1:59:07:f4:6a:d7:7a:70:88:
                    70:8b:21:a7:1b:73:c0:56:0d:6d:df:3f:01:c4:d3:
                    2e:fc:a9:ee:d5:f7:8c:bc:99:9f:5b:20:0b:0b:64:
                    15:6d:e5:39:6c:4e:4f:91:c6:64:c1:ce:31:39:33:
                    51:64:4a:fc:76:88:22:9f:01:3a:41:9f:85:50:21:
                    f5:25:f9:31:5a:8e:a4:59:0a:0e:02:53:2e:86:01:
                    98:2a:3f:ae:bf:3c:94:e2:a6:5b:1d:c1:cb:14:a8:
                    9e:cf:13:d4:46:5b:54:f5:12:92:24:78:30:0d:bc:
                    e4:fb:7c:ac:d9:b0:6b:f0:14:de:95:8b:ff:0f:48:
                    68:b0:77:ca:0f:59:8a:e9:c8:20:91:53:17:8d:f9:
                    1d:0c:8b:f0:c7:2d:40:ee:47:6a:8e:06:89:49:29:
                    32:9e:cf:22:1d:c5:78:78:fb:a8:4f:22:fb:60:98:
                    3f:2e:94:ea:64:3d:9f:cc:86:04:20:55:26:85:b0:
                    17:2d:15:46:61:2d:79:f8:c4:71:64:3b:72:b4:d8:
                    11:64:38:7d:94:1e:53:9e:71:2b:09:54:23:a9:c8:
                    97:eb:eb:d4:f3:91:f4:c3:79:d9:28:22:30:9e:56:
                    28:9e:51:e4:4b:a3:41:81:1b:1e:22:c0:bd:8c:ca:
                    c1:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2B:DF:57:46:7A:FA:71:16:5B:77:8F:AC:6E:47:2E:D8:65:5A:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b6bf2dd7-1796-4c52-b5b3-2b0fb868ba03/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b6bf2dd7-1796-4c52-b5b3-2b0fb868ba03/519ed548392e54bdcbc81e0077e2af89b18e8acb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.156.0/22
                IPv6:
                  2803:4820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265802

    Signature Algorithm: sha256WithRSAEncryption
         b0:3f:3c:39:fe:91:f9:a5:8e:b6:91:0a:9b:16:a6:6c:97:1e:
         6a:09:5a:a9:ea:a4:e5:f3:de:65:71:7e:59:64:7b:d0:bc:85:
         bf:d4:b8:90:92:ba:8c:43:c5:2c:12:c0:54:e8:38:e7:48:bd:
         8f:2d:1d:fb:93:18:02:94:57:eb:2d:bb:ad:8e:6a:f2:71:94:
         f1:6f:53:a1:4e:cc:84:36:01:5a:df:e5:26:7e:19:d0:7f:33:
         a2:f3:47:0d:b5:a4:ed:2c:a3:cb:54:2d:fc:45:f8:ba:6d:0f:
         77:f0:29:91:60:4f:43:aa:3d:7e:a3:51:25:bf:5f:f2:16:77:
         8e:7b:a0:62:2c:21:c8:5b:27:2e:8e:ab:ae:de:58:10:81:1d:
         3b:ab:18:dd:7a:2c:1f:76:82:2f:f5:ab:69:cf:0f:95:fa:c3:
         fe:06:2c:c1:18:db:f8:72:3a:e6:e0:94:24:f7:61:80:48:0d:
         0f:dd:69:8a:d7:ee:dc:a2:5a:4b:2a:61:c2:a0:2c:50:e4:12:
         44:f7:cb:56:73:38:99:f6:3e:0f:03:30:71:b4:ae:b5:a4:01:
         ab:29:a4:ad:25:bf:72:de:39:b5:af:dd:ac:8c:96:80:22:68:
         a4:1d:b7:37:f0:21:72:a5:76:ba:b5:39:5c:6f:02:17:8c:01:
         8a:a4:28:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----