Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/539d497bc349590c70368e76de50ab5d2dc27a9c.cer
File:                     539d497bc349590c70368e76de50ab5d2dc27a9c.cer (raw, json)
Hash identifier:          MI6EXImAj3r2N2GTVo2jdR9RWicgaA1ls7xzgXiyFdw=
Subject key identifier:   A9:07:19:DA:1B:3F:14:BD:9C:21:62:72:1A:89:B4:A8:2B:17:8F:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F51162
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9f966f73-6cfd-4046-8032-61cb9f5318a4/539d497bc349590c70368e76de50ab5d2dc27a9c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9f966f73-6cfd-4046-8032-61cb9f5318a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 14 Aug 2023 13:48:12 +0000
Certificate not after:    Sun 08 Sep 2024 13:23:05 +0000
Subordinate resources:    AS: 266349
                          IP: 170.238.232.0/22
                          IP: 2804:3674::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16060770 (0xf51162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 14 13:48:12 2023 GMT
            Not After : Sep  8 13:23:05 2024 GMT
        Subject: CN=539d497bc349590c70368e76de50ab5d2dc27a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:5b:1a:9f:c2:4d:21:f3:df:ea:2e:e1:11:44:
                    ff:c1:dc:fb:80:48:db:4f:aa:25:d3:80:65:9a:0c:
                    b5:df:99:2d:a5:8e:12:bb:d0:bd:00:19:ba:cb:a4:
                    e2:8e:2d:a8:7f:cb:ec:8f:fc:66:b7:c7:a6:b7:bb:
                    f2:27:5d:3a:81:4f:bb:21:20:7f:59:1f:f4:dc:24:
                    96:79:6f:d3:91:52:f7:89:d2:17:17:80:61:a2:66:
                    5a:99:ec:27:40:22:43:3f:f8:5c:4b:90:fc:25:7b:
                    66:9b:01:b3:69:a1:8a:2e:c5:53:41:3a:93:4c:00:
                    99:d6:11:5d:e7:ae:b2:9f:4e:39:98:5b:e0:78:7d:
                    c6:0d:01:36:ee:e3:f2:5b:ed:be:45:92:6c:8f:40:
                    c6:9e:a7:57:ce:b1:47:0f:f6:ed:e9:47:63:c2:4f:
                    85:5f:ec:4a:2c:6c:3b:45:8c:ce:24:9a:10:93:60:
                    73:91:80:fe:de:4a:b9:14:bd:98:02:1a:79:3d:17:
                    44:ca:6c:03:bf:47:3a:f3:eb:7a:ed:7d:2d:2d:5b:
                    10:fe:64:af:a3:c4:96:d3:36:a5:6b:25:11:4e:97:
                    9b:e4:5c:03:06:86:f1:be:5f:2c:da:fd:01:d4:6c:
                    28:82:e2:69:ae:a4:f1:be:64:ae:7f:53:72:5a:7e:
                    43:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:07:19:DA:1B:3F:14:BD:9C:21:62:72:1A:89:B4:A8:2B:17:8F:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9f966f73-6cfd-4046-8032-61cb9f5318a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9f966f73-6cfd-4046-8032-61cb9f5318a4/539d497bc349590c70368e76de50ab5d2dc27a9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.232.0/22
                IPv6:
                  2804:3674::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266349

    Signature Algorithm: sha256WithRSAEncryption
         16:4b:f5:44:7c:70:77:ee:8d:80:3f:77:e0:53:0b:9b:ec:3a:
         20:76:a7:f0:fe:9e:55:3b:b2:6f:7e:0a:97:13:7b:50:82:74:
         90:3c:35:4e:de:f2:3f:a4:ea:a1:01:ed:8c:97:c4:c4:72:d7:
         b0:9e:b0:7e:10:ea:1f:57:89:f0:f6:0c:d4:9e:8a:2f:2e:3d:
         4d:b0:8f:4f:b1:e6:e1:d4:5f:c8:b0:95:27:7a:28:a3:54:4b:
         8c:a0:23:67:79:e8:65:6f:e9:4e:1b:fa:cc:0f:5c:e4:83:10:
         86:8c:03:1a:70:b5:83:e8:90:60:7b:99:da:04:6b:95:70:e5:
         d8:95:36:88:39:90:10:d6:95:f2:c9:83:f7:0b:87:33:8f:c2:
         4a:d6:65:e1:56:a3:b8:5c:c3:8b:26:61:a8:22:be:27:43:85:
         c1:58:71:40:a6:c2:e9:0e:ef:28:90:d4:51:93:13:a2:b0:9b:
         51:45:2b:c4:40:f9:77:8c:cb:16:74:f4:7c:06:96:29:39:a2:
         cd:c5:4f:57:6f:d5:dc:24:b8:46:d8:7e:26:31:02:f6:0f:04:
         85:a9:3e:52:0c:09:49:53:37:e1:08:01:37:83:a7:49:f5:5a:
         bd:f5:3c:70:9c:f6:c7:2c:91:84:f4:cf:15:63:76:c1:22:20:
         80:3c:71:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----