Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/76ee804ac980558c70c8d0a94d3d3e9fb8e8d382.cer
File:                     76ee804ac980558c70c8d0a94d3d3e9fb8e8d382.cer (raw, json)
Hash identifier:          9o2+5Q+w10OYJWzhNmuBCfbMF7MK+pEIEDr041kHujo=
Subject key identifier:   AA:54:76:5A:0A:6C:04:BA:24:EC:54:0D:AB:72:38:DC:A4:FB:31:2E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA8009
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/872e0d89-40a6-4c35-aba9-7ad1c383b903/76ee804ac980558c70c8d0a94d3d3e9fb8e8d382.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/872e0d89-40a6-4c35-aba9-7ad1c383b903/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 19 May 2023 15:55:22 +0000
Certificate not after:    Tue 09 Jul 2024 15:09:46 +0000
Subordinate resources:    AS: 271790
                          IP: 179.51.212.0/22
                          IP: 2801:12:a800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15368201 (0xea8009)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 19 15:55:22 2023 GMT
            Not After : Jul  9 15:09:46 2024 GMT
        Subject: CN=76ee804ac980558c70c8d0a94d3d3e9fb8e8d382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:b9:49:0f:8d:19:cb:9b:22:b3:69:61:7f:9a:
                    a1:93:38:b0:3d:6b:55:b4:2a:83:91:e8:a1:76:f7:
                    b2:7f:c6:47:96:62:02:0d:67:4b:c1:3a:01:cd:2f:
                    5e:1f:35:a8:9d:03:4f:f6:1c:84:92:4c:22:2a:08:
                    14:a8:fb:6f:e2:18:92:16:bf:b5:c6:dc:2b:3a:f6:
                    bd:6e:44:7b:c4:6f:48:b6:7c:5e:28:3f:e4:9f:71:
                    4b:fb:35:58:43:ed:2d:29:0a:b0:2a:04:90:25:86:
                    2e:26:11:27:e6:d8:15:a7:b7:e4:f4:71:27:3c:f3:
                    22:fb:84:a6:38:d8:ad:bf:96:d3:15:41:dd:c6:77:
                    9d:7b:e4:6e:30:3d:4a:f6:3f:5b:dd:f0:9b:d1:82:
                    13:5d:ab:71:c9:e5:a0:69:c0:05:01:17:ae:23:32:
                    2c:de:03:54:a0:6e:06:98:fa:dc:db:f7:49:f7:fd:
                    10:b2:87:bc:9e:29:f9:d5:0e:66:4a:ca:10:fe:b7:
                    98:c2:84:ea:39:2c:f5:26:3f:97:5c:43:0b:1d:71:
                    cd:41:cf:3f:ba:4e:de:90:f3:ef:32:03:d3:9a:fb:
                    7a:83:b7:57:2e:9f:c9:c0:ea:c0:23:a3:13:65:75:
                    ac:17:ad:f1:8d:b9:e4:e4:72:4e:f9:bc:26:6c:36:
                    0e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:54:76:5A:0A:6C:04:BA:24:EC:54:0D:AB:72:38:DC:A4:FB:31:2E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/872e0d89-40a6-4c35-aba9-7ad1c383b903/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/872e0d89-40a6-4c35-aba9-7ad1c383b903/76ee804ac980558c70c8d0a94d3d3e9fb8e8d382.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.212.0/22
                IPv6:
                  2801:12:a800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271790

    Signature Algorithm: sha256WithRSAEncryption
         ab:35:13:37:42:0b:c4:17:8c:4f:27:35:76:0e:f8:b2:b0:2b:
         25:70:a9:e1:b0:f3:65:f0:bd:47:99:bb:be:c7:f4:67:4a:67:
         d9:f4:58:ad:57:2a:c6:1f:98:8d:01:06:2d:b9:ba:a3:e3:de:
         34:39:24:6d:17:e0:90:93:16:5c:5b:cf:ec:df:30:e1:37:15:
         7e:db:bf:ce:87:47:01:90:62:f1:44:e1:d5:7f:83:f4:5c:54:
         a4:69:24:f0:bb:45:1e:04:8f:cc:a9:88:e8:1f:ff:25:fd:8a:
         1a:2f:c4:8a:27:9e:32:05:e3:3b:db:f9:0a:91:0d:94:e9:23:
         43:30:2a:d3:10:65:99:fe:5c:3c:41:49:d9:d9:6d:77:bc:30:
         0e:56:8c:e8:23:c0:74:97:31:cd:93:32:e2:47:ef:da:3c:17:
         71:b0:f0:31:62:36:01:61:12:a8:3d:2b:a5:29:92:92:c4:26:
         ec:6e:da:80:5e:6d:75:36:ca:6e:9c:bc:2d:a3:0f:05:f2:56:
         56:0b:0d:37:d9:6e:2c:a9:55:64:f1:d1:f3:d8:e3:6f:0e:61:
         c2:6a:4f:a0:df:41:5e:e9:00:cc:32:9d:25:fa:55:67:e8:34:
         14:e0:94:f7:b5:b8:35:22:69:64:56:0b:1e:01:ac:4e:48:48:
         57:e1:cd:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----