Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84b2c7bb8be7da0457b031a53217b1c6948aa96c.cer
File:                     84b2c7bb8be7da0457b031a53217b1c6948aa96c.cer (raw, json)
Hash identifier:          beoHyVOqWplp/A8vHmMLpOePXxn41fpl8mZeCoMel+w=
Subject key identifier:   80:2A:7F:74:BF:8F:A3:B7:9B:30:22:B6:76:34:06:69:AB:F8:03:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFA193
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/749b82ce-30df-4d15-8354-e0e32712af1c/84b2c7bb8be7da0457b031a53217b1c6948aa96c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/749b82ce-30df-4d15-8354-e0e32712af1c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 20:19:48 +0000
Certificate not after:    Sat 28 Sep 2024 19:12:13 +0000
Subordinate resources:    AS: 263148
                          IP: 192.100.163.0/24
                          IP: 200.13.48.0/20
                          IP: 204.145.201.0/24
                          IP: 2806:238:10::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15704467 (0xefa193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 20:19:48 2023 GMT
            Not After : Sep 28 19:12:13 2024 GMT
        Subject: CN=84b2c7bb8be7da0457b031a53217b1c6948aa96c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:03:c3:75:82:a9:e5:4c:44:42:cb:98:54:05:
                    6f:ee:51:b3:48:26:ba:b7:b4:a3:39:7d:bd:34:5d:
                    26:7e:4b:96:1b:aa:5b:2f:f4:09:b5:d8:51:29:a4:
                    a6:d0:9d:d6:e0:8b:c2:e1:58:25:d9:17:55:00:af:
                    c4:94:fd:80:07:63:ef:79:47:6e:a6:61:31:80:00:
                    9e:01:d6:0e:a0:c4:f2:be:2f:dc:b3:21:7c:78:e5:
                    68:80:ff:81:4b:ca:22:07:15:4e:ea:33:88:89:2b:
                    59:8c:57:ca:d0:96:53:6c:c5:66:6c:a3:a2:ae:5b:
                    10:41:14:89:b7:fd:c8:f6:2f:0c:8d:eb:ac:56:5f:
                    06:88:91:bf:e4:cf:85:80:55:06:53:7d:d6:e2:10:
                    58:8f:23:06:a4:dc:e1:03:e4:42:fe:65:20:63:72:
                    73:91:d7:2e:44:77:c9:bd:19:c3:f6:71:a5:bd:0f:
                    34:46:f3:06:6d:9e:07:39:8c:c0:59:04:2e:62:22:
                    31:ee:2e:81:d3:48:c0:46:41:53:14:11:ee:2b:d5:
                    b5:86:3f:94:0d:2d:1d:d7:14:e4:04:af:b0:aa:05:
                    6f:d0:44:07:9c:fd:4e:89:f7:9b:e8:aa:2d:80:1c:
                    dd:2c:7e:40:41:b5:20:cd:a6:5e:4a:53:49:f8:6d:
                    75:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:2A:7F:74:BF:8F:A3:B7:9B:30:22:B6:76:34:06:69:AB:F8:03:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/749b82ce-30df-4d15-8354-e0e32712af1c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/749b82ce-30df-4d15-8354-e0e32712af1c/84b2c7bb8be7da0457b031a53217b1c6948aa96c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.163.0/24
                  200.13.48.0/20
                  204.145.201.0/24
                IPv6:
                  2806:238:10::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263148

    Signature Algorithm: sha256WithRSAEncryption
         a8:7b:b7:80:06:45:2f:f0:43:f0:f2:4d:dc:97:b1:8b:4c:f8:
         b4:95:c2:8f:b4:80:e1:d2:f6:f3:4f:45:8b:c5:d9:cd:89:28:
         da:f7:f1:0e:4b:22:48:ba:15:42:91:d9:a6:dc:50:d8:5f:b2:
         35:15:17:2e:9b:fa:35:30:2d:5f:99:e0:88:64:5c:55:af:e5:
         94:db:08:c3:87:5a:4d:6b:fd:a4:61:e7:90:7c:84:1b:3f:4e:
         74:0e:a4:80:11:ec:9d:10:ec:fa:fd:a6:02:66:b3:67:00:3b:
         0c:b9:f2:8d:50:4b:7d:0c:1a:35:8a:6a:0c:ef:47:a9:2a:47:
         b1:26:27:61:4f:ee:07:9b:ab:a7:88:b8:2d:c9:8f:90:17:57:
         ad:22:f5:91:1e:2f:78:3f:b5:95:e0:16:7b:39:66:70:c7:63:
         7b:98:11:bb:18:a8:a2:81:eb:2c:f8:ce:ab:e4:e5:a8:b4:c7:
         07:32:89:ee:70:2d:a7:78:22:e8:b2:65:6f:91:ea:a8:d8:67:
         d7:99:fd:da:63:a6:16:dd:71:1f:53:64:1f:c8:60:d5:b5:fc:
         6f:30:27:19:73:9e:94:43:91:ee:07:de:da:5f:5f:aa:79:5d:
         11:f5:11:8c:ba:67:f7:11:94:42:14:e9:57:57:6b:4c:fb:e6:
         a8:10:64:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----