Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.cer
File:                     58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.cer (raw, json)
Hash identifier:          +9ijo9dUVF+DG564mXZy5ITOEGBKOmnq8KDE1NyUHIM=
Subject key identifier:   55:1A:C3:56:8E:7C:DD:C1:2F:DB:1F:26:81:74:20:F7:A9:C1:7A:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4F706
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 13 Aug 2023 16:38:26 +0000
Certificate not after:    Mon 10 Feb 2025 15:05:33 +0000
Subordinate resources:    AS: 272977
                          IP: 2803:d590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16054022 (0xf4f706)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 13 16:38:26 2023 GMT
            Not After : Feb 10 15:05:33 2025 GMT
        Subject: CN=58bf8ff08351b2f713c258d0a9c2aa0ce58706d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:76:81:06:7c:36:42:58:6e:1d:6f:80:8b:03:
                    36:79:e1:9a:5f:51:e8:ff:b5:a5:b1:09:b7:bf:e6:
                    52:b4:7f:24:e2:72:57:dd:f3:f0:0d:5b:c3:dc:07:
                    7b:d6:4a:0e:69:23:6c:f7:d0:44:26:b8:7d:fd:2d:
                    e2:44:87:d4:cc:7a:80:9a:06:cd:14:56:1d:3f:ed:
                    e2:c1:66:e1:59:47:39:05:d6:01:da:ad:e7:15:88:
                    01:f9:05:dd:50:96:9c:cb:a8:8a:91:93:01:22:7e:
                    41:97:67:88:62:7b:2f:35:bc:53:01:3c:da:a4:d7:
                    9d:82:c0:12:59:69:a7:d2:de:a7:84:7c:e0:bf:76:
                    0b:c3:d1:03:38:d1:57:05:96:a0:85:48:77:b5:02:
                    90:19:ac:01:4f:58:37:b3:f9:7f:e6:db:64:4e:0d:
                    58:b9:f9:97:1c:1f:e4:75:51:1e:96:3c:f4:b1:4b:
                    94:6d:85:a7:fa:20:be:63:03:c5:3a:20:fc:4e:dc:
                    5b:c9:bd:18:c8:55:61:83:68:e0:9c:53:17:11:4b:
                    7c:17:e3:d5:a4:9f:a4:18:86:3c:43:dc:49:75:2f:
                    d6:2d:86:82:0e:59:88:88:37:9e:bd:1d:05:5f:df:
                    71:da:d0:77:6d:43:e1:53:c1:e4:df:41:59:50:af:
                    3f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:1A:C3:56:8E:7C:DD:C1:2F:DB:1F:26:81:74:20:F7:A9:C1:7A:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2af073aa-d765-4230-9aca-1f2851f77ae3/58bf8ff08351b2f713c258d0a9c2aa0ce58706d5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272977

    Signature Algorithm: sha256WithRSAEncryption
         01:3a:73:80:a4:59:d3:f9:e2:78:ac:f3:93:bd:a2:b8:b9:f9:
         f4:f5:79:39:8f:c4:b2:9d:de:7e:92:d7:5b:ad:08:6c:0b:33:
         a7:da:c9:ca:47:83:29:31:76:b1:e2:96:6d:1b:df:6f:f6:35:
         d4:d2:a9:11:32:93:3b:7c:c1:01:19:18:45:c6:f7:bb:77:34:
         b3:cd:30:fb:1a:9e:18:96:c8:ab:ea:46:eb:cc:8d:97:66:50:
         ae:3a:ac:3f:3b:75:54:98:6a:f3:f9:1b:d2:ea:22:b2:81:ae:
         f0:03:d3:0a:fb:42:f0:f0:8e:b3:13:cd:6f:22:85:d0:74:b8:
         65:ae:49:51:b1:b8:2b:57:b6:c1:29:b7:e1:7b:29:b7:14:da:
         5c:86:2f:f9:bf:53:26:aa:52:3a:23:ef:00:60:29:7f:71:75:
         1c:03:32:0d:5b:df:b1:d2:43:14:f2:5f:6a:48:8c:6e:e5:f5:
         20:a6:34:c7:44:28:19:1d:15:36:90:78:3e:eb:52:26:83:b6:
         8d:d0:b7:dd:52:2a:31:56:f0:30:69:47:bd:35:27:b8:c8:a4:
         70:2a:c4:a1:b6:d5:dc:a6:1a:92:62:e8:f9:f0:e1:cf:1f:b9:
         b5:4c:e7:68:e6:20:ef:72:29:c9:35:a8:45:62:b2:48:9f:e3:
         c6:c6:c7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----