Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7829f2978252f45731f187ed669101a3a76aaa8f.cer
File:                     7829f2978252f45731f187ed669101a3a76aaa8f.cer (raw, json)
Hash identifier:          GMDSW5iFEbXm4To9nachrfgDo3zpe6Nz732lpbNUSUw=
Subject key identifier:   8C:CF:24:99:BD:B4:4B:6E:50:DF:0B:FF:20:B8:90:75:15:D1:EC:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5AE8C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f81dfc5f-47ce-4d07-ab86-338336e76007/7829f2978252f45731f187ed669101a3a76aaa8f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f81dfc5f-47ce-4d07-ab86-338336e76007/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 19:25:38 +0000
Certificate not after:    Tue 26 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 28033
                          IP: 200.7.14.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16101004 (0xf5ae8c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 17 19:25:38 2023 GMT
            Not After : Nov 26 14:00:00 2024 GMT
        Subject: CN=7829f2978252f45731f187ed669101a3a76aaa8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:6c:b1:b2:a6:e1:a5:83:8f:71:46:54:f4:52:
                    57:d5:5a:61:5b:34:36:17:7f:e2:99:4e:18:51:a8:
                    8d:90:54:5c:d1:23:29:c4:4a:d4:8b:69:9b:1a:9b:
                    ae:20:5b:36:c6:b3:e7:3e:b5:71:be:71:15:d0:71:
                    35:f0:6b:b1:27:fb:e0:8c:af:84:da:97:a1:81:85:
                    15:f5:be:9d:de:af:af:e2:84:84:10:43:43:08:3b:
                    d4:ea:b1:81:41:03:04:c7:4c:08:e0:40:39:f2:14:
                    d4:6d:6f:2e:31:d7:8e:b7:17:3c:d7:28:02:b7:0d:
                    cd:1f:30:e8:db:38:8a:aa:bf:3e:e8:60:12:74:c8:
                    a5:1f:ef:dc:ae:88:7f:a3:4e:5c:84:c6:d3:1c:3c:
                    d9:6b:95:eb:7e:48:15:6c:e0:36:f1:43:ea:c2:6e:
                    a5:c8:cb:15:31:30:19:01:a7:b6:22:59:fd:c9:67:
                    53:28:eb:42:6a:79:6a:01:3b:f5:d0:76:55:d0:c2:
                    6c:92:ee:2e:e4:54:89:18:43:a6:91:9d:7f:fd:6f:
                    1b:ff:41:50:1f:c1:99:77:2b:c3:74:56:d0:a6:50:
                    95:83:80:6f:1c:3e:27:11:69:59:c0:10:a5:91:a9:
                    fe:70:62:e4:e8:49:62:20:67:db:d4:cf:8e:e8:8d:
                    3c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CF:24:99:BD:B4:4B:6E:50:DF:0B:FF:20:B8:90:75:15:D1:EC:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f81dfc5f-47ce-4d07-ab86-338336e76007/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f81dfc5f-47ce-4d07-ab86-338336e76007/7829f2978252f45731f187ed669101a3a76aaa8f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.14.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28033

    Signature Algorithm: sha256WithRSAEncryption
         97:ed:7e:f5:3c:c5:0a:1e:87:01:5e:71:1e:77:8e:40:b0:d4:
         67:d2:74:35:57:d2:49:0b:8e:29:8d:3f:e0:28:4d:13:86:42:
         5c:ed:2d:28:54:b3:3e:4d:d9:60:da:81:b6:ee:67:2f:fd:15:
         0f:dc:8d:1b:f4:00:12:00:c9:e0:af:70:d3:f6:99:7c:fa:e9:
         c6:2f:39:b0:8c:e2:a9:c5:64:8f:87:68:2d:e3:b8:e6:24:62:
         38:2c:ff:35:1a:2f:4c:a8:ee:1a:92:17:eb:2e:6d:a9:17:b4:
         1f:7d:dc:1e:be:b7:6a:33:88:59:79:7a:4c:9b:4f:a7:94:e1:
         02:60:d3:bb:4e:18:47:ba:4f:d1:11:88:0f:4b:eb:c3:ed:2b:
         1b:13:a3:ef:15:f6:e9:88:be:fc:3a:a6:14:9a:36:e7:35:68:
         b1:c9:2d:24:c9:0c:ef:b9:77:83:53:9a:79:82:e8:81:b1:5c:
         3b:90:c8:38:59:6c:9b:9a:2c:a0:e4:dc:e6:ca:e4:ae:55:a9:
         48:b3:8d:9d:2c:69:db:77:43:97:7b:9c:7a:09:8e:e9:80:ae:
         0a:07:d9:07:f8:60:08:16:06:f5:e6:be:37:03:b0:d5:e8:10:
         e3:f3:14:13:24:0f:08:05:52:f1:98:30:79:cc:91:39:cf:eb:
         4b:22:d9:0c
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----