Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8afea205db6faa93718394cf0499f71ee49d85ab.cer
File:                     8afea205db6faa93718394cf0499f71ee49d85ab.cer (raw, json)
Hash identifier:          +E7UUJIbvjV3NrE0Xj07NeYnc+l26enhpFbcXjJdKBs=
Subject key identifier:   B0:4D:6A:BF:CB:55:60:EE:97:3C:55:F1:5A:1C:38:D9:3B:B4:7A:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDA4B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/869b15bf-9c9e-46d5-817d-e0111db970ce/8afea205db6faa93718394cf0499f71ee49d85ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/869b15bf-9c9e-46d5-817d-e0111db970ce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 13 Jun 2023 18:41:21 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.10.194.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15574201 (0xeda4b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 13 18:41:21 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=8afea205db6faa93718394cf0499f71ee49d85ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f2:f5:0a:cc:4e:49:1e:ea:a1:ec:06:78:0f:
                    27:0d:e0:3c:b0:4b:f8:ac:22:d2:32:fa:e3:89:26:
                    31:7c:c3:a6:e4:76:62:d0:fc:d5:c0:35:9f:9e:1e:
                    f2:98:4c:b9:b3:1e:94:18:7b:61:09:8b:57:28:af:
                    d2:a4:26:d0:8d:c5:63:b1:50:9e:3f:96:c6:3d:79:
                    58:5b:49:7d:e1:34:c6:39:fb:c2:24:15:e0:66:48:
                    20:63:66:ec:bc:a6:64:b5:e8:de:66:df:57:f7:69:
                    43:20:bc:ab:69:86:28:3a:cd:31:d1:62:1c:b6:99:
                    1f:a7:de:24:26:84:4a:fa:c4:d4:4a:e8:f9:d9:37:
                    f1:df:b7:21:9a:9c:06:eb:ce:42:fd:1c:ef:95:19:
                    4a:32:ce:b4:3c:8f:91:ab:d9:b2:20:ec:4e:51:d3:
                    f9:16:b8:26:eb:70:16:3c:21:00:2d:43:67:6c:cd:
                    23:f5:89:24:c7:44:9c:a1:25:23:32:d2:06:81:12:
                    8c:0a:ca:37:dd:3a:7d:68:fc:8f:87:90:45:be:5a:
                    5c:79:cf:17:9e:0d:1a:5b:42:fc:01:27:c4:32:70:
                    f8:d8:07:b1:49:1a:24:5e:04:f4:8d:17:93:b4:5a:
                    ad:d1:1e:4e:c3:40:1f:c1:4f:a2:e5:d7:83:20:f4:
                    82:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:4D:6A:BF:CB:55:60:EE:97:3C:55:F1:5A:1C:38:D9:3B:B4:7A:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/869b15bf-9c9e-46d5-817d-e0111db970ce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/869b15bf-9c9e-46d5-817d-e0111db970ce/8afea205db6faa93718394cf0499f71ee49d85ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:0d:96:cf:97:b2:1e:76:c9:aa:14:28:f3:89:b9:60:ae:29:
         fb:fd:a1:d0:dd:f5:e6:62:41:30:8b:6a:5d:19:3f:ee:d1:5b:
         47:fd:e2:22:0a:ee:8b:bb:fb:4d:34:eb:a7:dc:f5:28:38:f9:
         f5:1e:2e:9e:c2:74:23:51:5a:c3:40:14:de:64:00:4e:75:ab:
         95:91:92:75:3e:2b:dd:a0:0b:07:fe:70:ff:7e:1c:7a:47:c6:
         a9:bd:0f:5b:2c:71:f1:fe:26:21:36:97:98:d5:af:7e:6a:65:
         5f:6f:44:4b:c5:e5:73:d7:db:06:79:19:c9:b0:ff:94:dc:52:
         d4:a1:e0:93:1f:46:da:9e:87:31:c0:7d:a5:4d:ea:0e:e2:e6:
         1f:dc:eb:56:d3:a6:39:a1:f8:31:2d:ab:a7:52:02:34:98:eb:
         ed:85:d2:11:0e:32:14:e0:9b:68:3e:ba:45:4b:45:fe:99:a5:
         c7:74:dc:89:d1:04:16:42:d1:20:ba:0a:24:94:ea:eb:06:10:
         c2:10:4a:40:4d:6e:38:63:22:cc:69:0c:c0:a5:d8:ef:42:e7:
         17:20:50:1a:db:de:00:58:3b:43:82:43:f9:cc:b6:05:ad:8b:
         f2:b0:0d:2f:a8:b4:70:79:92:46:d0:50:f5:5c:4f:ba:1d:f3:
         8a:04:33:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----