Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6473cd1fb7330855e9b7711a4fe47408552f96b0.cer
File:                     6473cd1fb7330855e9b7711a4fe47408552f96b0.cer (raw, json)
Hash identifier:          oWFHFGWP4QO96UJ4r8aOYXbDUYv0HiU8hNof1mBTqzQ=
Subject key identifier:   10:9B:E3:D7:A4:50:D4:17:F8:F1:ED:9B:01:55:E5:40:AD:AB:F9:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECC177
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0da905cb-b963-4dd9-b1cd-1433067adee3/6473cd1fb7330855e9b7711a4fe47408552f96b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0da905cb-b963-4dd9-b1cd-1433067adee3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 12:59:06 +0000
Certificate not after:    Tue 22 Oct 2024 19:36:07 +0000
Subordinate resources:    IP: 200.9.250.0/23
                          IP: 2801:1b:1000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15516023 (0xecc177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 12:59:06 2023 GMT
            Not After : Oct 22 19:36:07 2024 GMT
        Subject: CN=6473cd1fb7330855e9b7711a4fe47408552f96b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:61:4b:f1:03:b7:09:63:aa:a4:32:47:84:
                    2a:05:23:45:a6:b9:8e:b3:00:20:bc:d9:51:59:62:
                    6d:80:ad:98:bb:04:5f:0a:c7:fd:28:df:23:0c:ab:
                    d7:90:09:53:7e:21:ff:47:8f:f9:49:62:e4:78:79:
                    4e:ae:2d:57:44:b6:fd:e2:51:d5:46:5d:43:7e:72:
                    00:e9:1e:6f:51:6e:b2:6c:35:ca:0e:0f:31:2a:d3:
                    c5:9a:f1:06:57:f9:be:ba:3b:37:eb:ce:d4:cc:93:
                    89:8a:6f:18:4f:f7:89:4f:e7:c7:61:8b:d7:1d:1d:
                    c3:a7:23:93:c3:91:17:f6:b7:f4:58:5b:a3:5d:de:
                    f2:ff:f3:2f:29:fe:7f:ce:b7:5d:85:33:8f:dc:94:
                    92:5e:7b:1c:26:e0:58:68:b7:aa:9f:67:92:91:2b:
                    c6:11:fe:18:0e:95:48:2b:99:ea:97:48:75:6f:f4:
                    e3:16:e6:c0:8f:19:88:c6:f7:fb:dc:39:7a:b6:4d:
                    d9:35:6c:6e:da:f9:7d:d4:4c:71:19:26:b2:18:85:
                    bb:aa:27:48:b8:ba:b2:88:f6:11:9c:f1:38:70:37:
                    3f:65:3f:d7:f7:a8:e1:81:d1:55:74:d5:bf:7f:10:
                    7c:53:45:6d:c4:61:24:b4:65:4e:85:09:cb:f9:11:
                    d4:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:9B:E3:D7:A4:50:D4:17:F8:F1:ED:9B:01:55:E5:40:AD:AB:F9:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0da905cb-b963-4dd9-b1cd-1433067adee3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0da905cb-b963-4dd9-b1cd-1433067adee3/6473cd1fb7330855e9b7711a4fe47408552f96b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.250.0/23
                IPv6:
                  2801:1b:1000::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:54:35:c8:9f:be:8e:3b:04:0d:31:ed:6b:7d:93:7d:df:bb:
         df:ca:36:de:21:e4:3c:be:f7:58:b7:9c:50:e5:7e:ec:d1:cd:
         0d:b1:12:a5:b5:70:a2:3a:4a:3e:35:e2:5c:dc:50:55:5b:b3:
         69:1a:2c:76:c5:68:2f:16:7c:a3:db:cf:af:d6:cf:7d:15:27:
         f8:bf:6e:9a:44:c8:5d:9a:f5:af:04:d6:5b:70:c9:0e:42:49:
         9b:c8:0d:ca:5f:bb:02:2c:bb:25:d9:a9:39:5a:bf:e5:18:e9:
         2e:2d:dc:40:6c:63:d4:69:2a:ea:ad:17:84:90:68:9c:36:e2:
         51:5b:f2:ca:f4:34:ff:e7:5a:a1:e3:1b:7d:23:ad:4c:01:dd:
         48:b8:bb:45:f5:a0:be:ce:92:2a:af:6a:f2:4d:ac:65:28:d3:
         f7:a1:6a:a5:24:60:f7:12:d4:81:a3:7a:d6:ed:26:85:10:f1:
         11:be:d5:68:af:f5:ce:6f:4c:db:00:19:78:ff:31:2d:00:59:
         78:4b:46:43:a1:e2:f2:71:66:04:53:ee:ab:15:49:af:c4:c1:
         3b:bc:aa:8e:27:72:90:9a:be:8a:82:65:40:da:21:25:34:72:
         7c:07:50:b5:48:a8:e4:9a:cd:36:9a:d9:0d:0a:c3:49:cf:fc:
         a6:5f:b3:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----