Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/883f77c6db380f8bd041e446a4ad392c4cfdf52c.cer
File:                     883f77c6db380f8bd041e446a4ad392c4cfdf52c.cer (raw, json)
Hash identifier:          G0PemZE0+EyvVpmebH3N4dFUn82k+R2MWwqLYuXjOjQ=
Subject key identifier:   3A:2A:4F:26:FC:0F:CD:F1:46:17:59:E8:87:92:71:BE:C7:02:AC:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F610AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3f1f9ded-cf1b-4c28-8061-ed8448b13afd/883f77c6db380f8bd041e446a4ad392c4cfdf52c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3f1f9ded-cf1b-4c28-8061-ed8448b13afd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 21 Aug 2023 20:18:17 +0000
Certificate not after:    Sun 21 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 27748
                          AS: 262164
                          IP: 186.148.216.0/21
                          IP: 2800:a20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16126122 (0xf610aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 21 20:18:17 2023 GMT
            Not After : Jul 21 06:00:00 2024 GMT
        Subject: CN=883f77c6db380f8bd041e446a4ad392c4cfdf52c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:75:8c:da:74:7b:a8:f5:65:af:dd:8d:ca:3e:
                    98:57:74:ef:ca:2a:d9:2d:88:0b:5d:6c:27:14:29:
                    d4:b1:fa:02:cb:31:41:d9:9a:37:6a:b1:0f:34:26:
                    09:eb:76:09:89:92:56:8c:fa:36:36:a5:36:24:9a:
                    31:77:41:05:55:25:7e:01:f3:2f:8e:54:47:99:9e:
                    c1:b9:ad:2f:e7:59:2e:31:77:b6:31:78:33:73:ba:
                    7c:3f:12:c2:95:46:8b:d6:13:93:f1:61:44:ae:75:
                    b2:49:77:10:e9:7a:92:22:68:2b:11:97:22:7d:53:
                    7a:a3:23:0e:9d:c8:ba:fd:f1:0b:ab:0d:5f:3a:22:
                    70:3c:fa:60:75:25:81:04:f3:01:52:4c:6e:ec:77:
                    43:e7:74:d9:21:bd:4c:b2:79:85:f7:56:c3:d3:61:
                    a0:30:a4:13:a3:6e:32:a2:93:8d:dd:d0:7b:ba:b3:
                    68:ae:dd:49:16:01:3b:da:dc:09:3a:3b:cb:58:01:
                    e4:27:04:8f:de:e8:5b:d8:46:7d:11:e0:aa:1d:c4:
                    3c:93:38:f0:54:75:a3:ed:fb:25:da:42:00:f7:36:
                    ac:7b:50:0d:cb:43:89:78:52:11:2b:f2:33:fd:e3:
                    0d:1c:da:ff:ba:75:dd:55:e7:60:f0:53:18:e2:55:
                    0c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:2A:4F:26:FC:0F:CD:F1:46:17:59:E8:87:92:71:BE:C7:02:AC:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3f1f9ded-cf1b-4c28-8061-ed8448b13afd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3f1f9ded-cf1b-4c28-8061-ed8448b13afd/883f77c6db380f8bd041e446a4ad392c4cfdf52c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.148.216.0/21
                IPv6:
                  2800:a20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27748
                  262164

    Signature Algorithm: sha256WithRSAEncryption
         47:f7:98:86:ca:c4:29:3a:d1:32:89:94:ea:59:16:34:f4:62:
         f8:86:c1:7f:fa:9e:67:d1:3b:01:ed:43:5e:2f:e4:15:28:01:
         1b:45:8f:91:67:2b:76:5b:7c:c0:27:a8:03:8d:4c:46:66:4b:
         cc:9d:b4:94:b3:c2:b1:af:e9:98:dc:7e:e6:0c:19:03:9d:ca:
         45:cb:0f:c6:90:4b:52:66:e7:78:1c:52:32:6f:5f:04:14:f1:
         0e:ca:b4:c3:ce:16:dd:86:31:7d:df:c4:55:f1:52:32:b9:0d:
         10:af:80:53:a8:79:32:9b:33:51:d3:a1:87:f8:65:50:1d:a3:
         f0:34:76:36:d1:c8:28:9a:3f:21:4e:2a:35:a8:b3:72:81:29:
         03:bd:5f:37:e4:fd:2f:8f:86:e6:27:9d:49:48:7f:e6:8d:2d:
         e4:76:8f:60:47:91:cc:22:ec:71:cd:e5:d5:91:e1:ff:a3:13:
         89:3c:71:40:1a:dd:12:37:2f:c8:e3:03:62:ff:10:5a:d4:04:
         1e:54:d9:fb:0c:33:1a:fa:09:5d:1f:27:cd:3c:5a:08:10:6a:
         a3:e5:8f:45:35:01:df:78:4b:e8:d6:5c:9b:8e:e2:cd:58:96:
         cd:a6:a0:04:00:51:5f:4c:8b:58:73:33:b7:2a:ae:0d:3f:a8:
         9d:aa:c5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----