Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fff28aa4ce595759670dda51184bb9a6f6500e2.cer
File:                     5fff28aa4ce595759670dda51184bb9a6f6500e2.cer (raw, json)
Hash identifier:          1mwE2oG4Ms0Z6+zAhaVhDOHIVvuW2Iq7kM8n5/0Cnzc=
Subject key identifier:   EB:1D:2A:19:E5:01:62:32:0F:4E:31:6D:DA:55:D3:37:4E:35:BE:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5B70D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/09addf1b-cf1e-4f71-bd5d-12b57d227428/5fff28aa4ce595759670dda51184bb9a6f6500e2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/09addf1b-cf1e-4f71-bd5d-12b57d227428/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 19:08:02 +0000
Certificate not after:    Sat 12 Apr 2025 15:00:00 +0000
Subordinate resources:    AS: 28563
                          IP: 201.131.56.0/22
                          IP: 2801:c4:36::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16103181 (0xf5b70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 19:08:02 2023 GMT
            Not After : Apr 12 15:00:00 2025 GMT
        Subject: CN=5fff28aa4ce595759670dda51184bb9a6f6500e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:2c:01:75:dd:ca:e6:87:8b:3a:b6:28:a1:62:
                    e1:7e:06:ad:32:1c:83:a5:4f:64:46:23:ee:1e:e6:
                    87:a4:ac:f1:ae:89:02:a1:a0:c0:96:d8:4f:df:bb:
                    86:9b:1d:22:95:c6:ce:69:19:c7:16:f5:6c:95:a5:
                    50:0b:46:fc:68:34:3e:0c:98:e1:a9:23:0d:37:e3:
                    80:56:1d:ba:2e:1d:75:44:9e:1b:c4:44:af:72:86:
                    91:c2:28:b3:dc:e2:5d:d6:ff:0a:1e:f6:2b:54:06:
                    db:3b:8d:d9:59:6b:ba:ef:b9:7c:e2:90:54:de:45:
                    a6:6c:09:af:02:ac:52:93:34:4d:1a:b8:d4:1f:cd:
                    1f:ee:34:f0:4a:8d:e9:75:32:ed:d4:c1:7e:3d:27:
                    8c:b8:f3:6f:36:34:cf:39:d8:d5:d8:3f:24:af:31:
                    57:d2:44:70:9e:77:a0:9a:02:a3:54:50:e5:3b:70:
                    d1:18:57:40:0a:0b:8e:de:d3:f1:c5:3a:c5:d2:89:
                    59:f3:ba:d3:0c:7d:28:e4:fe:6d:5a:15:c1:7c:3f:
                    12:02:cd:53:1a:1e:fe:31:a9:49:d8:8b:78:c1:b5:
                    0c:5f:a5:35:78:e3:5b:83:9f:a1:c0:ad:e0:e9:c9:
                    12:21:f9:3c:3b:c1:a8:96:a4:42:44:a2:ff:e7:08:
                    36:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1D:2A:19:E5:01:62:32:0F:4E:31:6D:DA:55:D3:37:4E:35:BE:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09addf1b-cf1e-4f71-bd5d-12b57d227428/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09addf1b-cf1e-4f71-bd5d-12b57d227428/5fff28aa4ce595759670dda51184bb9a6f6500e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.56.0/22
                IPv6:
                  2801:c4:36::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28563

    Signature Algorithm: sha256WithRSAEncryption
         1c:96:1a:5c:e5:1e:6c:86:9c:b0:1e:f0:cc:10:ac:3a:f7:7d:
         6b:fe:8c:a0:12:07:e0:8d:33:2d:93:db:46:11:c6:c0:05:05:
         f4:3c:0e:81:b4:88:4b:0f:6e:44:9b:d4:d9:93:ff:ac:12:26:
         70:42:64:12:c4:03:b8:d3:82:04:11:56:5d:80:47:d7:ca:c6:
         52:90:e0:cc:ff:ef:c8:49:e3:fc:d9:6b:69:ed:92:70:65:fd:
         7f:20:69:a2:a4:37:76:e0:44:ee:8b:bb:d9:fc:51:bc:74:e5:
         b4:e7:73:8e:7a:09:0b:0b:cf:d8:91:8a:6c:1d:f5:00:be:3d:
         c7:b3:5f:eb:d3:02:74:43:2a:6f:24:54:c4:38:15:ed:67:57:
         7d:39:94:5b:26:d2:ea:f7:db:9f:bf:d7:fb:d9:75:eb:fb:69:
         6a:43:eb:e4:49:8a:22:12:82:99:3a:fb:db:71:d6:cf:60:f4:
         ad:6b:70:85:9d:a3:2c:2f:92:f2:3f:c9:31:c8:46:ff:1b:fb:
         9b:5f:b8:bd:74:6f:99:20:36:e6:2e:e6:96:76:ef:a4:db:12:
         12:4a:ee:20:62:2d:65:65:1e:2a:65:c5:a9:11:54:a1:ed:80:
         f7:71:c5:34:e5:c4:dd:01:6a:70:a3:65:ab:09:df:0c:24:38:
         b6:9e:70:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----