Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74a8f080b9806969ee0db42a7cab7044e7d07783.cer
File:                     74a8f080b9806969ee0db42a7cab7044e7d07783.cer (raw, json)
Hash identifier:          zX0KP1YCfWIijOqAMGUAHh2riIpBb91qET+BsqjgBUU=
Subject key identifier:   79:50:52:6E:A8:D2:00:03:2D:5C:D8:31:49:6C:88:95:10:9C:86:50
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBF370
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7f5d904a-ce8a-45bb-939d-921165941efb/74a8f080b9806969ee0db42a7cab7044e7d07783.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7f5d904a-ce8a-45bb-939d-921165941efb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 12:43:48 +0000
Certificate not after:    Fri 09 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 27934
                          IP: 200.24.240.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15463280 (0xebf370)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 31 12:43:48 2023 GMT
            Not After : Aug  9 06:00:00 2024 GMT
        Subject: CN=74a8f080b9806969ee0db42a7cab7044e7d07783
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:14:2f:df:9b:c0:44:4e:6f:7b:26:ed:df:
                    d7:17:ca:8c:3e:3d:fd:39:97:e5:16:b6:45:f1:d1:
                    2d:7f:17:d2:2e:23:85:7f:aa:cd:fa:d8:0b:18:aa:
                    cb:ff:6e:91:18:19:91:08:c6:7f:fc:60:f0:f1:dd:
                    bf:a7:1a:17:5b:ca:bc:24:97:33:e5:fd:30:e2:55:
                    df:51:fd:c2:c2:7d:fa:ea:ae:a4:60:f6:c0:f7:b9:
                    1e:74:7c:c4:1c:83:13:ec:5a:d1:b8:ea:6f:69:77:
                    80:4f:d0:9a:ff:49:9a:5c:7b:66:4e:ce:bf:51:d1:
                    10:aa:bd:be:5e:16:ac:29:23:19:05:67:3a:65:95:
                    4a:c7:03:3f:39:70:49:3e:d0:4c:08:b0:01:77:9e:
                    50:cd:08:19:7c:1d:32:2c:16:9e:b2:e1:96:08:68:
                    44:57:79:41:aa:de:61:30:9c:1b:64:a3:bf:a8:b9:
                    22:19:e3:8b:f5:7f:b2:ef:8d:51:17:58:fd:26:af:
                    cf:49:b5:5b:c0:b9:a5:b4:8b:bb:a3:99:e1:75:e3:
                    fa:65:53:b8:ae:39:48:cc:3f:b8:35:6f:76:9f:bb:
                    79:ef:59:19:ee:b2:79:ad:9a:8b:50:f6:74:55:d1:
                    3d:b4:fe:81:8d:df:97:4b:3f:2c:1f:40:16:62:78:
                    fd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:50:52:6E:A8:D2:00:03:2D:5C:D8:31:49:6C:88:95:10:9C:86:50
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7f5d904a-ce8a-45bb-939d-921165941efb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7f5d904a-ce8a-45bb-939d-921165941efb/74a8f080b9806969ee0db42a7cab7044e7d07783.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.240.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27934

    Signature Algorithm: sha256WithRSAEncryption
         5e:80:f4:90:72:31:75:47:40:39:65:c2:23:fb:1f:dd:70:22:
         50:a7:c3:6b:61:98:c0:66:e7:71:1b:d5:05:1a:a3:c3:a3:62:
         8e:f7:5b:b2:65:ec:56:bd:ec:a8:51:19:46:b2:e6:01:a5:a2:
         d3:c2:bf:f5:59:23:ea:22:ab:db:cb:20:11:aa:e4:67:25:1e:
         c5:62:d2:bc:2e:02:40:af:9d:36:f1:31:ae:ea:f9:24:97:49:
         2b:13:5c:c4:1b:cf:c3:39:c5:20:53:e0:17:07:e0:73:ec:0e:
         6a:8a:d1:a5:c0:8d:f4:8c:62:4b:e6:4c:31:06:03:ff:60:9a:
         4e:fb:7b:97:b2:e9:d6:dd:60:9f:81:ab:9e:c5:d0:6b:17:42:
         10:eb:e8:b8:9f:62:36:9b:62:60:f6:41:5b:3a:ab:b3:43:be:
         d0:c0:1b:53:cb:72:0e:b8:2b:af:a9:a6:38:8c:60:c5:cd:6e:
         fa:ba:20:3c:5c:07:9b:7e:be:77:6d:e2:ab:17:83:f6:e5:d1:
         68:c7:00:24:57:06:fa:93:0d:83:02:81:83:3f:5e:03:d6:04:
         aa:35:c9:ca:33:58:7f:4e:11:f6:e8:e9:46:d0:8a:8a:0e:ec:
         9d:5b:65:ab:0e:d1:24:7f:14:f1:0c:82:c2:6e:c5:21:a4:da:
         f5:73:d1:e8
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----