Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8029c38f8a3f128db6ca960a83a4cc59b92197c5.cer
File:                     8029c38f8a3f128db6ca960a83a4cc59b92197c5.cer (raw, json)
Hash identifier:          eGAOSAw3iiEZh2V06kONrRr2SbJ81PIyYmHtQsb+9c0=
Subject key identifier:   7B:6A:99:1F:68:DC:4E:7C:3F:29:D9:35:79:FF:B4:65:2E:C1:67:D6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC62AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/08c05e9d-f48a-4cb6-8de4-5049dbc7022e/8029c38f8a3f128db6ca960a83a4cc59b92197c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/08c05e9d-f48a-4cb6-8de4-5049dbc7022e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 03 Jun 2023 16:40:06 +0000
Certificate not after:    Thu 06 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 269744
                          IP: 45.182.28.0/22
                          IP: 2803:d960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15491756 (0xec62ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  3 16:40:06 2023 GMT
            Not After : Jun  6 06:00:00 2024 GMT
        Subject: CN=8029c38f8a3f128db6ca960a83a4cc59b92197c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c1:45:db:12:29:a8:ea:89:32:71:2b:f5:c7:
                    44:f1:a4:69:a7:2d:4c:61:5a:1b:c2:4d:1d:7e:5d:
                    04:52:4c:70:f9:75:76:e6:85:5e:d4:3a:80:26:2a:
                    62:bd:df:0b:b1:13:94:58:48:58:21:04:22:16:3b:
                    5f:1b:1c:18:e1:9f:b4:fd:9a:e4:a9:cd:c0:05:2a:
                    96:72:95:3f:48:45:82:20:94:2b:26:68:bd:e6:8f:
                    7e:a4:df:0b:9f:ee:7e:ce:ba:ed:4a:0d:bc:f8:14:
                    c1:a2:3b:c3:7c:06:b4:c5:97:0d:55:1b:80:e2:3b:
                    b0:06:bd:7a:be:b6:73:ad:2a:7c:84:88:2f:ec:b7:
                    90:ae:2d:a7:8c:c3:3c:df:86:a0:2f:3b:f2:cb:99:
                    4a:ba:45:6d:72:4e:f6:e0:9b:2d:b9:e2:88:0c:29:
                    ba:73:cc:7e:e2:00:c3:d0:87:06:4f:01:c0:2d:78:
                    6a:b5:60:7c:16:20:59:54:54:5e:f7:ee:a3:46:e0:
                    03:90:0d:ca:73:f0:a4:b4:28:0f:53:e0:8f:ac:d2:
                    86:91:3b:c8:c2:82:3e:5c:e2:74:e9:fc:b5:dc:49:
                    16:18:b8:78:bf:a8:02:8d:75:8a:3e:c6:e9:46:78:
                    b4:41:31:f3:60:f1:f7:7b:c9:87:6d:2d:92:f9:ac:
                    10:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:6A:99:1F:68:DC:4E:7C:3F:29:D9:35:79:FF:B4:65:2E:C1:67:D6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/08c05e9d-f48a-4cb6-8de4-5049dbc7022e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/08c05e9d-f48a-4cb6-8de4-5049dbc7022e/8029c38f8a3f128db6ca960a83a4cc59b92197c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.182.28.0/22
                IPv6:
                  2803:d960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269744

    Signature Algorithm: sha256WithRSAEncryption
         71:d3:f9:35:16:a5:2e:29:31:59:3c:84:40:5f:b2:5d:ba:c9:
         4a:d6:b7:b2:6e:e7:3c:a8:e7:43:63:72:b3:81:a2:5d:17:92:
         1f:22:be:5d:24:1f:37:fc:c6:b1:d3:70:aa:c7:f3:35:81:c2:
         9e:ef:d0:4a:65:a8:69:4e:50:ba:bc:fd:2c:70:f2:26:70:c9:
         1e:22:5e:b2:e6:76:66:eb:94:cb:bf:f9:2c:34:be:61:cc:42:
         34:c1:eb:c5:12:08:8a:f5:44:0f:b0:5c:45:6e:21:ee:5f:01:
         d5:81:cd:b7:0f:45:64:ad:21:08:78:61:25:00:f7:75:e6:1c:
         54:64:c9:8f:f4:0f:68:b7:0e:9b:3b:4c:df:c6:dc:32:5f:56:
         3b:0e:f7:c9:cc:91:3a:72:81:0a:fb:1f:b1:83:1c:e6:b7:dc:
         b3:e2:60:1c:77:24:e1:35:00:77:cf:e5:1e:41:fb:f1:d7:6f:
         ee:f4:46:63:8a:94:a6:7a:97:1f:81:12:ab:58:44:8f:30:00:
         96:d0:d6:df:f6:08:b1:79:33:c2:ad:01:c3:70:55:a0:77:d7:
         f9:f2:7d:60:c8:61:0e:cb:c5:7e:6a:bc:d0:d3:be:59:4a:0f:
         f7:a3:98:1b:c4:fc:8b:d1:49:9c:20:e2:e7:a8:22:90:ce:9d:
         01:07:2e:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----