Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8541eb0cb32dafac6c2602ad14c25a4af047642d.cer
File:                     8541eb0cb32dafac6c2602ad14c25a4af047642d.cer (raw, json)
Hash identifier:          JYc2Pl8IXSZ9QiPi0L4NYOUScIEpbE9b6ix5YZUQk7o=
Subject key identifier:   15:03:26:41:F0:19:E5:74:D6:18:2B:73:76:FA:BA:13:93:47:2E:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E788F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/662baca8-70c0-439d-bb02-1f5b00ef8e9c/8541eb0cb32dafac6c2602ad14c25a4af047642d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/662baca8-70c0-439d-bb02-1f5b00ef8e9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 15:25:20 +0000
Certificate not after:    Thu 29 Feb 2024 23:45:35 +0000
Subordinate resources:    AS: 61452
                          IP: 198.12.32.0/22
                          IP: 2803:b680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15173876 (0xe788f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 27 15:25:20 2023 GMT
            Not After : Feb 29 23:45:35 2024 GMT
        Subject: CN=8541eb0cb32dafac6c2602ad14c25a4af047642d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bf:07:0a:af:a6:3c:f7:38:b0:f2:75:fe:43:
                    be:81:11:bb:d6:83:a7:98:c7:17:44:7c:49:6e:87:
                    b1:62:39:2c:1c:83:b5:83:18:3c:3e:08:9e:aa:95:
                    9a:b3:bb:dd:58:fa:dc:12:9e:66:cf:45:70:3b:ed:
                    cd:69:ef:18:69:7c:c2:14:9b:24:32:88:a4:ba:13:
                    3f:bc:e3:7c:14:d8:a4:9d:2a:b1:5c:3a:b6:00:4b:
                    53:3b:b7:86:5a:fb:2e:64:d8:f6:a9:1d:aa:2c:7d:
                    b2:62:70:c7:3c:59:d8:b3:46:d0:9c:6f:07:b7:d2:
                    9c:3f:b4:6f:6f:28:ec:73:88:40:7e:7c:9f:68:16:
                    73:eb:aa:29:5a:fc:f4:0b:6a:b0:03:fe:9f:65:bb:
                    7a:e8:82:49:56:a0:27:2a:a5:60:33:a5:ef:85:5d:
                    46:50:9e:d0:b9:7a:6c:59:7f:e8:53:5e:9c:32:4b:
                    a7:74:19:c4:d0:bd:53:8e:35:aa:3c:c7:b2:5f:f1:
                    c0:8b:73:d6:e8:53:5d:7f:ec:32:59:bd:92:32:80:
                    10:5a:40:14:d2:2d:5e:18:e0:bb:c6:d8:11:f9:a6:
                    91:3f:48:19:36:be:d3:87:83:9c:75:b6:47:93:f0:
                    8a:fc:8c:42:6e:22:bb:14:23:c8:b8:43:d9:16:0c:
                    72:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:03:26:41:F0:19:E5:74:D6:18:2B:73:76:FA:BA:13:93:47:2E:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/662baca8-70c0-439d-bb02-1f5b00ef8e9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/662baca8-70c0-439d-bb02-1f5b00ef8e9c/8541eb0cb32dafac6c2602ad14c25a4af047642d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.12.32.0/22
                IPv6:
                  2803:b680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61452

    Signature Algorithm: sha256WithRSAEncryption
         11:34:1c:13:89:c0:bd:bb:c2:19:de:61:d3:39:7f:20:ef:f3:
         3b:10:7e:5b:5c:43:6f:ae:f6:7a:c4:65:e3:c6:6a:96:d3:b4:
         3f:08:f7:1a:dc:0c:3e:5a:9a:f3:74:18:84:74:9e:7b:31:d1:
         e0:fe:07:63:ad:d5:22:7e:e6:a2:94:bb:9b:67:78:34:55:71:
         36:32:c8:a9:b0:e6:13:4a:f4:fe:2b:5d:5b:16:0c:92:e7:4b:
         ad:58:d0:bd:70:e8:6d:35:cc:76:c9:e2:3d:34:7e:69:0b:64:
         77:31:bb:94:a3:dc:35:c2:4e:36:a1:99:fe:87:8e:4d:77:08:
         e6:ab:49:d7:71:4c:df:8a:67:4a:dc:1a:11:af:b3:3b:ea:90:
         1a:56:48:bc:87:4b:94:1b:ef:a9:4d:f9:7a:f4:da:5f:36:e5:
         90:84:5c:35:27:31:c4:1a:ec:25:e2:5b:9a:51:b7:39:eb:34:
         14:77:f9:29:bb:80:49:9d:b9:b6:0b:af:37:26:a1:7a:6d:4a:
         86:89:35:ce:b0:6a:f7:e2:a1:a5:86:66:d3:52:e8:21:d3:9b:
         9f:2b:84:ff:29:31:3b:82:b7:6e:53:37:2c:b9:2d:61:34:96:
         fa:5e:34:62:df:b2:9a:59:ba:d2:a3:1f:67:4f:f4:b6:1f:a5:
         54:62:89:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----