Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68dc444b7779a72ab8d29128e2010ab45d6a1a75.cer
File:                     68dc444b7779a72ab8d29128e2010ab45d6a1a75.cer (raw, json)
Hash identifier:          Ry3JT1b94qJoophU9gRaWe+cxQKHSKVx1TmUDK5K+TU=
Subject key identifier:   C4:1A:81:D9:53:F9:67:66:87:1A:8E:72:5F:F1:51:AA:A4:7D:CF:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE9DBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ec642924-4f55-4d65-8b08-d099e8957749/68dc444b7779a72ab8d29128e2010ab45d6a1a75.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ec642924-4f55-4d65-8b08-d099e8957749/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:04:14 +0000
Certificate not after:    Sat 15 Feb 2025 16:16:33 +0000
Subordinate resources:    AS: 28292
                          IP: 177.54.48.0/20
                          IP: 179.127.80.0/20
                          IP: 189.28.176.0/20
                          IP: 189.124.112.0/20
                          IP: 2001:12a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16686524 (0xfe9dbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:04:14 2023 GMT
            Not After : Feb 15 16:16:33 2025 GMT
        Subject: CN=68dc444b7779a72ab8d29128e2010ab45d6a1a75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:8b:b0:6f:2b:48:b0:14:4b:a2:e2:8a:cb:88:
                    5b:49:0a:5b:24:cc:90:e8:39:77:a6:a0:80:e3:a3:
                    d9:a3:5f:fa:b3:70:ed:2a:b1:38:83:b8:5e:1e:c5:
                    c1:cb:d8:0e:a9:89:5b:01:3c:a3:39:e4:e9:89:a4:
                    d8:bc:cf:9e:49:a2:38:10:34:b2:3c:ba:a3:0b:3a:
                    7c:94:19:6e:bb:fe:d4:3f:2f:de:a3:01:cb:79:43:
                    77:11:75:74:7b:0a:aa:b8:41:c4:ae:88:b9:ae:f6:
                    a7:8c:80:76:b9:93:ca:d1:c6:88:0c:17:c4:75:49:
                    16:12:c1:c9:d1:0f:d3:f1:53:44:43:f3:0a:b0:9c:
                    27:8c:dd:7d:8f:0d:49:3e:d4:a3:2f:2d:71:48:5d:
                    77:ed:69:ac:7a:46:89:ab:42:c7:a1:51:13:58:85:
                    16:07:4e:9e:73:e9:09:ce:fb:56:0f:99:bc:39:07:
                    5e:4a:2b:92:1b:24:6a:9f:ab:17:5c:b3:e5:59:0d:
                    b4:39:7e:a3:a2:47:a4:af:55:7c:8e:48:0a:85:d1:
                    cb:b4:ae:46:9e:7a:89:db:75:e9:f6:a9:1d:01:d9:
                    6d:f6:ae:bf:37:99:30:d5:0a:cd:0f:a6:6d:9c:ba:
                    ce:dd:20:a1:3f:84:ec:54:d7:3e:b9:7e:a5:3d:64:
                    ba:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1A:81:D9:53:F9:67:66:87:1A:8E:72:5F:F1:51:AA:A4:7D:CF:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ec642924-4f55-4d65-8b08-d099e8957749/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ec642924-4f55-4d65-8b08-d099e8957749/68dc444b7779a72ab8d29128e2010ab45d6a1a75.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.54.48.0/20
                  179.127.80.0/20
                  189.28.176.0/20
                  189.124.112.0/20
                IPv6:
                  2001:12a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28292

    Signature Algorithm: sha256WithRSAEncryption
         79:3e:26:d3:6b:ef:82:8d:ba:1d:0f:76:1a:0c:99:55:45:43:
         ef:16:e1:4e:40:df:97:b2:fb:a5:99:87:f9:07:6f:cc:55:96:
         38:f2:f4:e2:b4:9b:a4:37:ef:c5:54:5a:c7:41:64:c7:39:5e:
         d5:a4:49:52:d2:b1:90:a9:6f:7d:fb:d7:4c:1a:38:0e:7b:00:
         18:f4:d1:2a:bb:76:3f:00:56:70:a7:60:39:02:14:c2:95:06:
         99:a6:da:16:58:7f:3c:e0:ee:fc:26:2c:d1:8c:b1:1a:27:c6:
         70:3f:15:0d:51:70:65:31:eb:9d:f3:a9:2a:28:c6:ec:48:51:
         0b:56:f9:dd:f8:51:e4:3c:e3:f0:12:a5:98:c8:41:c8:8f:1d:
         ab:6e:9f:10:a9:f3:50:1c:2c:ac:89:e5:ca:fa:77:aa:10:86:
         9f:2f:ec:59:e9:5d:4e:86:af:2d:5f:92:f3:b5:62:71:65:c3:
         c3:55:05:53:2d:2f:57:43:7f:a3:40:7d:14:51:f9:b6:cc:ee:
         26:96:29:a1:fc:b5:64:30:65:df:c4:87:44:e7:10:b2:7b:d5:
         5a:01:ec:24:72:b8:5d:48:50:3e:cc:dc:74:a6:6e:bb:13:53:
         cc:b3:14:47:6f:ea:84:16:2d:51:5d:e5:cc:fa:af:d1:c4:86:
         cd:ef:37:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----