Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer
File:                     54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.cer (raw, json)
Hash identifier:          7e5boOT2T9rkE15VdZSoFlW0E8aJw4zRm9MRebzwGXA=
Subject key identifier:   33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC01CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 14 Jan 2023 19:50:35 +0000
Certificate not after:    Tue 26 Mar 2024 19:32:52 +0000
Subordinate resources:    AS: 28432
                          IP: 201.131.236.0/22
                          IP: 2806:214::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14418381 (0xdc01cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 14 19:50:35 2023 GMT
            Not After : Mar 26 19:32:52 2024 GMT
        Subject: CN=54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:31:ba:3a:06:3c:91:dd:3e:6d:00:b3:70:e0:
                    7a:ca:19:e1:d1:db:65:53:c8:30:93:26:90:70:40:
                    19:3d:2d:5a:68:03:59:50:45:05:f4:6e:e8:14:82:
                    7a:09:7a:2a:b1:b5:be:53:a7:5f:28:be:db:26:c8:
                    21:ca:63:35:9b:e0:ac:ee:37:2b:19:ed:19:54:fd:
                    fd:ef:f0:76:58:af:59:2a:33:d8:8b:2e:47:58:51:
                    c6:fc:da:76:ee:e3:82:66:e7:dd:34:89:ed:0d:74:
                    75:ef:64:b8:eb:f6:66:0e:a1:da:85:e5:f6:e5:3f:
                    c9:98:8a:19:97:b0:3f:a7:90:eb:e8:f7:c4:aa:9f:
                    52:36:d4:aa:ea:9e:1c:82:09:77:75:e7:b1:22:ed:
                    0c:7e:fe:90:1f:c0:b7:7d:a7:d3:a4:e7:e8:d0:3c:
                    19:a7:52:88:52:65:14:a6:6c:5c:2f:86:72:6d:7f:
                    01:99:26:ce:1b:dd:57:0a:a7:5b:1c:b3:cd:eb:ed:
                    38:b7:9b:6f:cd:32:49:ae:5b:ae:be:8f:76:81:04:
                    c8:0b:ab:06:2b:70:87:52:1a:e1:f5:e5:a5:1f:d7:
                    13:e9:ff:46:02:d5:e1:de:d0:38:82:88:a8:d0:46:
                    16:8a:b0:dc:5f:a0:38:d2:bd:e9:66:86:7c:18:bd:
                    76:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:5A:49:E7:92:32:3D:59:06:A8:41:7C:8D:12:54:B8:4A:BB:E4:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7bbf13d2-1241-4b53-8ccd-f553c8abe366/54e763c6c15d73b40fc49c5a4ca85ced2f6c5e16.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.236.0/22
                IPv6:
                  2806:214::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28432

    Signature Algorithm: sha256WithRSAEncryption
         c0:ca:85:04:81:b8:60:f6:55:1f:d7:e5:c8:ae:f2:54:b8:ac:
         be:e5:63:c4:16:3d:98:9d:19:d4:8d:17:3b:94:f8:a8:03:5d:
         79:1b:ef:90:7b:43:21:a0:5c:53:e3:ec:6c:ac:08:67:e8:a8:
         e2:23:70:97:4a:78:6f:2c:fc:76:62:cb:57:b0:9e:70:3c:0e:
         f8:04:f3:a3:ea:34:cb:32:66:1c:89:b7:54:bb:43:1f:a2:cc:
         ae:da:9d:26:07:85:db:ab:31:fd:dc:d1:7a:ba:db:b9:18:4c:
         22:b9:6d:c8:ed:7a:bf:95:bf:be:a6:7c:3c:9a:c1:60:8b:60:
         3d:c3:6d:58:1c:a9:3d:ac:1d:8a:16:87:5d:01:b4:63:b2:1f:
         1d:43:fc:71:8d:ef:8d:b1:66:71:15:bc:ff:ac:d5:dd:b8:a3:
         6a:56:7e:95:2f:72:a5:bd:08:0b:ae:61:8a:16:06:d5:59:98:
         cb:17:06:0d:41:5c:e7:64:12:1b:0d:a3:34:af:20:7a:ee:e9:
         54:ea:7b:4c:29:d9:f1:05:39:9f:fb:1d:67:60:60:72:e5:44:
         6a:08:1a:79:05:39:d4:81:d1:4e:5c:7c:95:46:3d:61:f0:ba:
         d2:2a:47:42:49:7f:80:36:da:28:04:6e:93:44:79:6a:ea:00:
         d7:49:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----