Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9082801fd4f7f1c44320f4c3fcacf5f8a3a34997.cer
File:                     9082801fd4f7f1c44320f4c3fcacf5f8a3a34997.cer (raw, json)
Hash identifier:          vH9Wz25OY07sy32eYykhgn3s2rKKOQAuwbScmxPUB/Y=
Subject key identifier:   18:E7:98:19:30:82:72:11:C5:99:C2:A7:51:3E:70:0A:10:B5:32:AA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F96681
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cc990545-7526-44e5-997d-539e66560249/9082801fd4f7f1c44320f4c3fcacf5f8a3a34997.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cc990545-7526-44e5-997d-539e66560249/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Sep 2023 13:47:49 +0000
Certificate not after:    Wed 21 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 27653
                          IP: 161.0.128.0/19
                          IP: 200.113.192.0/18
                          IP: 2803:c680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16344705 (0xf96681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 13 13:47:49 2023 GMT
            Not After : Aug 21 15:00:00 2024 GMT
        Subject: CN=9082801fd4f7f1c44320f4c3fcacf5f8a3a34997
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d9:14:da:b7:1a:9b:1c:94:a9:74:15:f1:c6:
                    4a:66:a3:9a:a9:2b:80:48:3c:dd:07:5b:32:30:83:
                    e6:85:2a:27:f3:9e:73:60:54:70:86:ba:fb:62:f2:
                    3a:90:bf:6c:31:2e:44:d0:39:c8:e8:61:83:85:da:
                    bc:db:a8:79:8e:43:af:a3:84:dd:c4:2a:37:e4:d2:
                    fa:b6:b1:b8:1b:d7:f4:33:50:34:53:70:c6:5a:06:
                    12:ea:0b:c2:af:1d:bf:ea:45:8c:97:81:6d:f5:a7:
                    7b:d2:03:60:74:67:d0:70:85:8c:c6:e8:61:d4:fa:
                    a1:db:6a:87:3f:8d:57:88:4e:bc:be:4f:2d:1a:ac:
                    74:36:d3:58:88:35:40:ab:5c:13:63:47:66:0b:c2:
                    d1:b2:2b:d9:b0:d8:39:5a:86:66:e1:59:13:9e:78:
                    1e:75:15:1e:58:ee:9f:f7:16:cd:ea:da:c9:99:88:
                    ec:1a:a9:cf:61:e6:4f:41:1a:75:80:39:53:b9:2d:
                    e1:4d:45:1e:98:09:87:36:a2:d8:dc:12:d8:8f:d4:
                    43:6b:8e:99:d9:0f:0f:b8:93:f5:85:e4:eb:e5:77:
                    a0:23:99:64:40:d1:21:2a:33:6f:73:06:7e:d9:e7:
                    d4:93:37:de:5b:39:19:70:bc:4f:b5:20:54:f7:9f:
                    32:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:E7:98:19:30:82:72:11:C5:99:C2:A7:51:3E:70:0A:10:B5:32:AA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cc990545-7526-44e5-997d-539e66560249/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cc990545-7526-44e5-997d-539e66560249/9082801fd4f7f1c44320f4c3fcacf5f8a3a34997.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.128.0/19
                  200.113.192.0/18
                IPv6:
                  2803:c680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27653

    Signature Algorithm: sha256WithRSAEncryption
         b8:eb:63:07:e2:c3:16:c1:69:4b:df:cc:e8:a0:29:12:4b:26:
         9e:b5:ff:ec:90:9b:9c:32:7f:15:ea:70:e5:1d:63:c6:19:47:
         50:f5:af:4b:d7:24:80:92:85:11:fb:df:bd:97:8a:6e:fb:02:
         04:04:f1:86:02:83:42:1e:a2:5a:9f:f8:8f:e8:b1:03:34:6d:
         cc:c5:6d:df:b1:8e:f1:94:1c:2e:b1:e2:63:9f:46:db:73:22:
         89:69:88:3d:d4:4e:b7:37:1f:8d:90:5c:d6:d0:f2:44:1c:36:
         5f:a6:3e:68:83:b8:63:e0:f0:c9:13:13:e2:d9:5a:9b:8d:9e:
         4d:cd:e5:a5:f8:cf:de:91:20:eb:0d:b0:cb:78:54:9a:b6:bf:
         03:8a:09:e5:16:4a:50:0e:a7:a1:b7:4d:80:de:1e:ee:47:35:
         2a:3a:3d:c5:f0:d1:97:20:24:f2:d9:9b:29:d3:84:13:48:f9:
         5d:c6:09:b7:10:28:7f:66:a9:e7:0a:1d:f4:9f:1f:50:1d:8c:
         43:99:d8:28:2b:52:40:56:ff:96:30:c5:7b:5b:3d:a2:10:01:
         af:84:6b:e5:eb:dd:53:f8:dd:eb:25:2f:a9:58:9c:84:c8:fc:
         ea:b8:4e:80:bd:d6:7b:69:84:82:2a:c4:03:cb:2e:c0:af:18:
         3a:e1:32:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----