Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58df876eb017a0c2c8483d670cc9ad4ca6e6b86e.cer
File:                     58df876eb017a0c2c8483d670cc9ad4ca6e6b86e.cer (raw, json)
Hash identifier:          Ohf4Z/cZ6ztXadtLCUd2odG3aXv3UTU5cty0shWffNg=
Subject key identifier:   82:9D:64:24:4A:20:1D:E6:19:07:14:C6:76:21:69:15:0A:09:6F:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF1792
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ad92cee8-e7b1-4662-ba75-6e6b02942a0a/58df876eb017a0c2c8483d670cc9ad4ca6e6b86e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ad92cee8-e7b1-4662-ba75-6e6b02942a0a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 21:24:22 +0000
Certificate not after:    Wed 01 Jan 2025 17:38:48 +0000
Subordinate resources:    AS: 262722
                          IP: 187.120.224.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16717714 (0xff1792)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 21:24:22 2023 GMT
            Not After : Jan  1 17:38:48 2025 GMT
        Subject: CN=58df876eb017a0c2c8483d670cc9ad4ca6e6b86e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:16:4c:66:dd:3b:6a:5d:8a:c8:c9:08:9e:2e:
                    2b:26:3e:b5:75:2f:77:eb:81:04:df:70:fa:66:d4:
                    10:c0:9b:ce:37:c6:bd:d0:39:30:87:8e:2a:80:84:
                    ab:96:35:78:43:29:07:e5:cd:29:22:6b:73:bc:41:
                    e1:2e:32:bc:52:de:8b:70:bc:1f:31:24:14:7d:02:
                    fa:f7:d2:55:f5:da:7c:43:fa:01:fd:32:ed:b0:6b:
                    9a:78:07:d6:f1:41:07:06:ac:12:e9:b4:79:59:02:
                    ef:4f:cc:f2:54:5a:aa:72:fa:f3:c5:a0:bb:d6:5a:
                    2a:27:8b:fb:b1:d1:c1:fe:0a:1a:b4:9f:71:3c:4d:
                    7e:3b:94:49:71:c9:1f:17:b6:66:5e:bb:ac:b8:1a:
                    e3:bc:6b:11:a9:69:de:97:fe:fb:df:76:03:2c:df:
                    cf:99:a2:fa:b9:27:98:ac:fb:f1:f9:8f:5a:a3:b8:
                    7c:44:e4:33:11:e1:ab:02:fa:04:b1:27:33:3f:95:
                    5c:a0:45:c8:ba:bd:1b:12:da:37:79:7a:a7:93:22:
                    cf:f3:9a:37:14:c3:76:ee:c1:f4:a3:f0:f0:07:90:
                    22:1c:88:34:fe:62:f2:81:81:f6:bc:65:e7:32:2e:
                    c3:a3:ef:f8:82:35:dc:18:6f:41:02:89:c9:6e:ab:
                    89:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:9D:64:24:4A:20:1D:E6:19:07:14:C6:76:21:69:15:0A:09:6F:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ad92cee8-e7b1-4662-ba75-6e6b02942a0a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ad92cee8-e7b1-4662-ba75-6e6b02942a0a/58df876eb017a0c2c8483d670cc9ad4ca6e6b86e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.120.224.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262722

    Signature Algorithm: sha256WithRSAEncryption
         6c:00:72:07:9e:54:79:3f:13:b8:e7:69:0c:7e:ad:fa:05:f9:
         68:b5:89:5c:f3:ce:60:7b:a4:ca:40:f9:ae:6e:27:9b:65:62:
         bc:39:f3:f6:1d:55:79:cf:e2:30:e6:3a:ae:de:1a:63:01:3f:
         39:a2:10:10:a5:f0:75:78:54:fd:d7:02:ae:2f:b3:42:bd:06:
         b9:c2:ef:a4:0e:9a:45:04:ad:97:39:2d:bf:bd:b0:cd:38:3d:
         c7:f5:11:c1:49:3c:a3:22:81:f5:b3:8a:28:0b:88:7b:c5:28:
         25:85:b2:04:36:e6:0e:5f:f3:f4:5a:67:71:53:d6:a2:c3:9e:
         d7:75:bb:2d:5a:14:53:29:91:8e:1c:b3:ed:71:b6:c2:fd:ab:
         bc:e1:31:14:5f:15:d6:dc:15:53:76:6c:1f:76:ac:f3:33:04:
         3c:a7:4f:bc:60:ed:a0:54:5c:0f:6f:2c:45:4c:b4:5a:17:77:
         43:fb:39:3b:f2:f3:4f:0f:7c:0b:56:4f:f3:da:fb:35:c3:e2:
         15:b2:7a:b5:80:80:a6:b0:e1:3d:4f:75:3a:40:e9:4f:45:46:
         fb:7d:7c:f7:e0:d0:28:63:48:5d:e8:08:5a:8a:ec:5d:9a:ae:
         df:16:86:8e:b5:6e:e6:b7:9f:da:de:31:a4:29:c9:d3:83:43:
         12:a5:77:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----