Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6f01319158b481143f9879918e0466aa4e1e5377.cer
File:                     6f01319158b481143f9879918e0466aa4e1e5377.cer (raw, json)
Hash identifier:          ahYnOhhYeD8cprhiptbBVbDuzfs/zJCrA2GdAiPa8Lk=
Subject key identifier:   C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4B129
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/6f01319158b481143f9879918e0466aa4e1e5377.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 19:48:10 +0000
Certificate not after:    Wed 27 Mar 2024 15:05:45 +0000
Subordinate resources:    AS: 270008
                          IP: 189.127.136.0/23
                          IP: 200.23.140.0/24
                          IP: 2803:89e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14987561 (0xe4b129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 19:48:10 2023 GMT
            Not After : Mar 27 15:05:45 2024 GMT
        Subject: CN=6f01319158b481143f9879918e0466aa4e1e5377
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a4:52:f1:e4:90:d0:69:2b:08:8e:a3:4e:6e:
                    15:a5:06:00:f7:9a:cd:28:43:bc:65:18:c1:ec:6c:
                    59:59:e9:f8:f8:d0:61:f1:0c:16:8b:ed:63:1c:72:
                    a1:a8:50:32:11:c9:50:0d:e7:b9:20:86:3f:04:43:
                    e5:0b:88:fc:dc:c9:2a:4e:38:95:b0:d2:5f:de:7c:
                    3b:0a:cb:40:8a:6f:05:09:33:7f:ae:b9:eb:6f:68:
                    e1:fa:82:2a:93:d4:21:b0:a4:a2:30:89:bc:69:98:
                    7f:a8:9d:b3:99:a7:5a:39:0a:30:bb:e3:4f:ed:00:
                    3c:68:b5:c8:42:60:14:10:f7:f4:0d:d3:2b:80:e9:
                    cb:2d:c8:7c:94:a5:b7:5a:7e:77:98:9d:a5:b3:77:
                    ef:ab:80:a8:d5:21:18:5d:dd:10:33:b6:88:74:40:
                    d9:32:73:61:34:2f:bd:1d:9c:90:8d:e5:aa:9e:12:
                    fc:6d:da:6b:21:a1:94:7e:d4:e5:de:79:83:bc:54:
                    b3:27:c5:ee:88:e3:cb:ac:a6:62:7d:14:5a:ff:8d:
                    7f:80:7b:a3:77:10:f3:f6:c9:f6:0c:dc:05:c8:6f:
                    06:35:d7:32:9f:25:54:43:98:05:78:d5:8e:f2:80:
                    bd:6e:b7:66:69:58:af:75:31:ea:b5:b3:7a:06:19:
                    3e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:EF:20:70:94:03:0B:DE:C7:31:82:3C:FA:31:45:BF:17:FB:C2:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/178ec5a4-656f-4674-b158-c6767f091921/6f01319158b481143f9879918e0466aa4e1e5377.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.127.136.0/23
                  200.23.140.0/24
                IPv6:
                  2803:89e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270008

    Signature Algorithm: sha256WithRSAEncryption
         3c:8d:49:e1:ea:69:ab:7a:51:e9:e0:87:03:db:22:7c:f2:5c:
         b5:41:9f:b4:8a:ff:4f:b0:43:2c:e7:80:c2:54:f0:fc:59:97:
         2b:d8:07:40:de:63:98:83:7e:d7:17:e7:4e:a8:c9:18:5b:0c:
         0d:6a:15:93:a4:bd:27:66:d3:63:f3:d1:41:b6:eb:bc:88:72:
         bc:82:6f:7c:c6:ed:20:2d:0b:4c:ee:f2:d6:df:49:e4:e2:c9:
         1f:47:96:d4:cf:50:e5:a8:11:d2:13:93:d6:98:da:38:3c:7e:
         28:5d:21:9f:c9:32:4a:18:2c:ee:2c:56:65:d1:58:10:a0:d8:
         a1:25:ad:9f:52:56:10:d2:d4:63:13:12:31:3b:f9:3c:7b:53:
         6a:1e:a7:1f:fe:ce:9a:8e:ed:f5:c2:9d:c4:a5:34:1e:09:68:
         f9:45:a5:bd:af:21:0f:bf:a3:4d:3f:6a:9f:fc:58:52:3f:41:
         d7:09:60:10:5f:b9:05:d2:c2:0b:b0:58:bb:6e:05:82:84:ff:
         01:64:03:6d:28:70:f5:ca:6a:d4:ee:57:0f:1b:de:00:54:2b:
         40:d2:d1:2e:6d:be:80:36:02:66:5f:b3:d7:03:a3:68:c2:a5:
         4f:07:1f:bd:e7:16:69:fd:ca:e5:6f:5f:78:1b:9a:0f:e7:c8:
         a0:33:26:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----