Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/692a80034b64b610d20dd1ca496f65b3dbb2a778.cer
File:                     692a80034b64b610d20dd1ca496f65b3dbb2a778.cer (raw, json)
Hash identifier:          E4Hw+QGcd/FFsr24Of8YFdvVJC+Bzow4qx0usUJ28BM=
Subject key identifier:   C4:B3:AA:D8:C0:7B:A3:A6:12:D3:5A:A3:CE:29:CD:B8:DC:AF:E9:24
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEEA53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/84752445-9cc9-4cc5-b293-100c3f5307d4/692a80034b64b610d20dd1ca496f65b3dbb2a778.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/84752445-9cc9-4cc5-b293-100c3f5307d4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:48:50 +0000
Certificate not after:    Wed 19 Mar 2025 15:00:00 +0000
Subordinate resources:    AS: 28161
                          IP: 187.60.240.0/20
                          IP: 2804:4928::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16706131 (0xfeea53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:48:50 2023 GMT
            Not After : Mar 19 15:00:00 2025 GMT
        Subject: CN=692a80034b64b610d20dd1ca496f65b3dbb2a778
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:86:f6:88:af:1e:d7:19:b7:be:3c:84:f8:30:
                    f5:fd:56:cb:74:60:d4:69:2d:e4:5a:4a:9b:b3:e4:
                    e7:7c:cf:e0:79:86:77:34:ba:98:a0:68:48:ed:b9:
                    90:36:c3:9f:f5:a3:aa:3c:c9:a5:a7:d6:1e:df:04:
                    5e:04:56:5f:fb:65:3d:7c:eb:67:f1:e3:fa:91:30:
                    7e:a6:9d:27:79:cc:40:c2:44:e3:c6:cf:f0:55:51:
                    ec:a6:2d:c5:c2:09:72:37:ff:af:48:07:43:66:ef:
                    4b:24:c6:d9:e0:a9:fb:c2:9a:b1:09:da:db:fe:c8:
                    9d:6f:09:e2:e5:85:be:b9:f5:80:a9:ed:ba:da:81:
                    06:07:6f:c4:c9:eb:5d:59:df:cc:f6:e9:33:52:b1:
                    7a:4c:6e:2b:ed:ef:65:31:21:e8:a9:62:41:16:8d:
                    a7:b6:f2:ea:4e:15:9a:98:18:ee:77:0d:6a:da:2c:
                    c8:3d:a2:c9:d2:7a:0f:eb:65:37:94:d5:aa:f3:2f:
                    c1:5f:5b:09:13:24:b8:d5:a3:41:95:4b:eb:2b:b5:
                    70:da:a0:3a:83:b5:0e:f2:fe:61:df:0a:aa:02:56:
                    d0:46:9c:f5:d6:76:57:11:61:b8:10:e9:1a:e0:70:
                    fc:d8:42:e9:7e:97:13:4c:71:c8:ec:0e:fa:02:80:
                    69:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:B3:AA:D8:C0:7B:A3:A6:12:D3:5A:A3:CE:29:CD:B8:DC:AF:E9:24
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/84752445-9cc9-4cc5-b293-100c3f5307d4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/84752445-9cc9-4cc5-b293-100c3f5307d4/692a80034b64b610d20dd1ca496f65b3dbb2a778.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.60.240.0/20
                IPv6:
                  2804:4928::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28161

    Signature Algorithm: sha256WithRSAEncryption
         89:35:51:00:65:32:b7:9a:30:6a:44:4f:4c:c4:5d:1b:63:5c:
         7b:fe:18:6c:f8:7e:52:37:fc:f0:36:c9:e8:81:5e:3e:20:e3:
         7c:1d:34:64:f3:5d:b0:07:c2:7c:43:b0:76:07:09:2e:e8:c1:
         c5:95:09:67:97:79:94:1e:10:7b:de:ed:d2:3c:62:e0:e9:2b:
         fa:b3:5f:cf:91:25:99:1f:8d:07:b2:01:74:ba:f2:b0:9b:6a:
         b7:80:a0:53:7a:51:e9:60:49:f8:84:24:fe:57:2d:d4:65:13:
         d8:3b:7b:79:3e:ca:c2:7d:36:eb:71:86:fe:cb:63:f0:73:bc:
         cc:40:14:ac:19:21:a7:32:9a:19:a5:15:a0:37:1e:ce:74:93:
         d7:c6:c5:35:29:f9:28:d5:67:7a:5c:99:90:ae:22:c1:cf:44:
         2a:74:2c:08:60:27:11:a7:84:14:29:f5:d0:96:af:01:97:26:
         10:d7:f4:55:71:19:af:4f:4e:81:19:b2:bd:12:cd:6f:2b:b7:
         dd:39:37:3f:a6:6c:7e:fe:4d:ab:ca:4e:7f:a3:9e:db:ce:71:
         0e:91:aa:24:19:a6:78:b3:fb:a2:ff:2b:f8:07:45:dc:33:f7:
         0a:81:db:32:bb:c1:f9:54:21:2c:7b:16:d4:0c:d1:3b:a3:10:
         f0:27:72:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----