Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991.cer
File:                     5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991.cer (raw, json)
Hash identifier:          a42+jmjGmjenfxDQaiTcL95hNh/rnAmFNw7D6fMfD88=
Subject key identifier:   75:EA:45:74:93:D8:16:DA:27:E8:81:19:C4:1B:3C:F0:9A:22:20:4E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E23583
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/53f683cd-8400-4e1d-8387-d4202e665244/5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/53f683cd-8400-4e1d-8387-d4202e665244/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Mar 2023 11:58:31 +0000
Certificate not after:    Mon 01 Jul 2024 19:22:01 +0000
Subordinate resources:    AS: 262189
                          IP: 186.1.208.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14824835 (0xe23583)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 22 11:58:31 2023 GMT
            Not After : Jul  1 19:22:01 2024 GMT
        Subject: CN=5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f3:fd:60:be:1a:19:af:77:e0:90:4c:25:78:
                    67:56:c1:37:de:5d:ad:28:38:7b:47:29:c8:93:9b:
                    53:10:8b:e1:eb:08:aa:9b:9c:d5:bd:f9:a7:02:4c:
                    8d:0f:7f:fa:ab:0c:03:20:d3:b5:44:29:64:fb:ce:
                    33:e8:ad:70:61:49:72:63:14:ff:55:2b:1c:df:80:
                    5c:ed:72:78:e2:15:e7:7a:1e:53:f4:53:fb:56:fa:
                    fa:4c:f6:8f:36:29:ee:ae:ea:35:fc:1f:1d:e2:75:
                    47:0e:df:c3:59:5e:9e:c5:15:5a:5c:0d:05:ef:fa:
                    97:2d:ff:f1:07:3d:43:a2:75:76:b2:98:2b:21:c9:
                    38:14:8a:4b:53:aa:9d:75:8f:9d:e0:be:ae:f8:04:
                    0e:e6:4d:45:ee:8d:3d:fb:5e:06:36:fc:bd:21:c8:
                    e6:30:0f:75:e4:7a:7e:f2:56:4e:2a:a3:e4:ca:47:
                    c8:38:db:1f:c2:ea:47:e3:cc:20:ee:1a:7c:15:6d:
                    68:3f:6e:56:a3:c3:89:53:d2:a8:f7:e7:51:c4:76:
                    c9:a2:ab:2c:a0:01:ee:3a:d8:f5:2b:4c:fc:63:f4:
                    b9:ac:33:3f:32:0f:08:b8:40:ff:97:56:22:db:73:
                    8a:01:56:44:3a:2f:0e:87:fe:69:41:dc:50:ff:6a:
                    c4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:EA:45:74:93:D8:16:DA:27:E8:81:19:C4:1B:3C:F0:9A:22:20:4E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/53f683cd-8400-4e1d-8387-d4202e665244/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/53f683cd-8400-4e1d-8387-d4202e665244/5b4eb6dc9b61ecfa5398d93ea34cd9e28f888991.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.1.208.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262189

    Signature Algorithm: sha256WithRSAEncryption
         53:59:eb:e8:23:95:85:64:e0:69:c8:8b:67:20:f6:85:7d:0e:
         a6:00:77:a3:82:e7:f0:5d:20:6f:aa:1a:72:da:b7:e1:cd:bb:
         47:c1:05:b1:b1:66:f5:db:ee:d6:d6:5c:46:96:90:b0:f2:b0:
         05:f7:2d:fc:d6:0f:2d:e1:56:1f:6e:c4:df:0b:34:b7:87:37:
         c2:df:63:03:e3:68:b8:5f:ad:28:34:7c:14:f6:84:d6:48:cc:
         c5:88:3e:b8:61:12:1c:17:76:8c:4e:fc:fc:03:b2:e7:7c:bd:
         b4:bf:3d:a5:92:e4:84:45:42:5c:dd:7d:1d:6d:98:6d:01:73:
         1b:37:61:f1:5c:c3:4f:30:a1:73:1e:84:ac:5a:b5:a0:1b:c3:
         41:3b:2a:7a:6a:10:03:7b:71:17:64:5b:2e:a0:d7:25:d0:6b:
         0c:34:7e:45:44:16:e1:75:c5:66:f7:dd:2f:1a:2f:04:a0:2c:
         d4:3e:34:1c:ff:53:c7:53:d4:58:8c:7b:8e:08:8e:48:77:a8:
         f4:76:80:ec:ce:96:9c:2d:f5:9b:85:67:5b:c5:29:53:40:51:
         f6:c0:60:92:4a:4a:ee:76:45:a6:ff:34:7f:79:ea:cf:1f:6f:
         64:43:59:5c:90:79:54:10:d3:1f:ec:d5:da:1d:e0:bf:bb:da:
         fe:42:1e:80
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----