Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/80733c237d68e53f71513e12e99a13614beca33a.cer
File:                     80733c237d68e53f71513e12e99a13614beca33a.cer (raw, json)
Hash identifier:          3mPgOq13w1lLtbRhAYGmNvbWNYH/b0/wTWgnofJa+r4=
Subject key identifier:   CA:96:87:D5:6D:E8:65:E9:BE:5B:1C:34:33:BE:36:DA:FC:D1:07:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEC74A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6532dfc2-7c10-4572-a4a0-8b37c87b4b6c/80733c237d68e53f71513e12e99a13614beca33a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6532dfc2-7c10-4572-a4a0-8b37c87b4b6c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 12:49:39 +0000
Certificate not after:    Sun 02 Jun 2024 19:23:25 +0000
Subordinate resources:    AS: 264745
                          IP: 200.33.203.0/24
                          IP: 2801:1f:9000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15648586 (0xeec74a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 12:49:39 2023 GMT
            Not After : Jun  2 19:23:25 2024 GMT
        Subject: CN=80733c237d68e53f71513e12e99a13614beca33a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:4a:6a:ca:83:82:13:59:22:01:df:cc:5a:6c:
                    fd:c0:a2:52:6d:e0:8b:7f:bf:81:31:13:56:bd:0f:
                    b2:4a:dc:b9:90:98:d5:0d:8b:6a:67:97:a1:28:35:
                    c9:2f:85:d6:3f:0c:15:3f:3f:c8:c7:fe:ce:9f:4d:
                    be:1a:46:c0:c4:61:67:9a:ff:76:e9:65:88:56:4a:
                    1f:bb:55:95:c4:cd:a9:21:92:82:8b:7b:c3:b9:0e:
                    fb:78:2d:51:03:30:64:91:14:a3:30:e2:0b:74:3e:
                    6f:d8:de:9d:04:d5:ea:14:42:be:b6:8c:57:fe:7f:
                    e5:f3:d5:ab:35:89:7c:48:8e:11:69:0e:62:57:36:
                    17:3a:e5:06:39:6b:7b:9b:8d:6b:f6:8f:00:4d:71:
                    60:d9:ca:e8:d7:a6:30:ca:9f:e9:97:80:37:c8:1c:
                    56:1f:81:86:f5:ef:fe:46:e8:c1:3d:ac:f1:d8:97:
                    c1:a3:1e:cc:d1:ac:d9:be:6c:b4:3c:95:c2:24:93:
                    e4:30:84:3f:c7:ff:f1:a8:26:57:8d:f2:7b:e7:91:
                    fb:11:75:2e:9c:fc:e8:af:93:74:af:7b:5c:7b:7b:
                    e7:36:e5:9e:98:a3:ed:40:14:8b:0f:36:4a:85:f4:
                    ca:4c:f2:2e:50:07:e0:c3:71:c1:8c:25:87:95:82:
                    6d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:96:87:D5:6D:E8:65:E9:BE:5B:1C:34:33:BE:36:DA:FC:D1:07:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6532dfc2-7c10-4572-a4a0-8b37c87b4b6c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6532dfc2-7c10-4572-a4a0-8b37c87b4b6c/80733c237d68e53f71513e12e99a13614beca33a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.203.0/24
                IPv6:
                  2801:1f:9000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264745

    Signature Algorithm: sha256WithRSAEncryption
         6f:67:8d:3e:dc:1a:a3:1a:56:ae:be:86:8c:e7:e9:51:58:c3:
         ae:4f:02:fc:ae:4d:05:f5:74:8e:97:18:3c:d9:89:58:ae:5e:
         e0:8d:41:ea:70:0d:c3:f6:82:87:e8:bc:83:bc:33:a6:43:5e:
         63:1c:a8:28:16:3d:0c:0f:8f:02:88:d3:74:67:33:7b:a2:9f:
         96:55:1f:a0:53:ad:d6:da:9a:b6:8a:87:1b:3f:65:0d:ed:06:
         85:d7:9f:78:31:75:d1:c6:95:8b:0e:e8:6e:fe:29:8d:7f:a4:
         a7:8c:5a:14:82:73:b8:41:5d:02:23:04:59:01:5c:59:4f:05:
         7d:9e:9c:0c:05:d2:e7:5c:20:c9:07:a8:c2:ea:81:95:52:9b:
         e7:ca:18:ce:90:a8:8d:9b:82:1b:55:0d:ad:97:b9:1a:df:e2:
         06:4a:5a:9c:64:0e:1d:89:90:9d:a7:c7:bd:94:79:fe:a2:d1:
         cf:4c:1e:23:b7:de:08:1c:96:7e:44:f0:71:37:4b:ef:ac:36:
         46:18:13:ea:d6:54:14:b8:41:44:4d:b7:66:96:29:00:f9:dd:
         5d:20:c1:5d:be:32:57:76:85:cf:58:3c:b7:0a:e5:57:6d:e5:
         de:91:20:a4:f3:0a:25:a1:db:49:4e:2a:17:f1:c8:b0:7a:3d:
         ab:0c:4b:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----