Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9321849f5546e2d2ddc95ec7eb7155dc893ab78b.cer
File:                     9321849f5546e2d2ddc95ec7eb7155dc893ab78b.cer (raw, json)
Hash identifier:          DZ0QQ34emhaAkL0L150SapGfm2QzXJXrTgLm1YEPGdg=
Subject key identifier:   0F:4F:71:3A:84:0C:C3:4C:B0:96:DD:52:21:A3:84:B9:EA:80:50:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105BA4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8ad4b5fb-7b91-43c6-bc13-875b3d8ff505/9321849f5546e2d2ddc95ec7eb7155dc893ab78b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8ad4b5fb-7b91-43c6-bc13-875b3d8ff505/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Jan 2024 14:37:27 +0000
Certificate not after:    Fri 07 Feb 2025 05:00:00 +0000
Subordinate resources:    AS: 19244
                          IP: 200.49.248.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17152591 (0x105ba4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  3 14:37:27 2024 GMT
            Not After : Feb  7 05:00:00 2025 GMT
        Subject: CN=9321849f5546e2d2ddc95ec7eb7155dc893ab78b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:85:e4:d0:2c:e6:d4:3a:46:07:2d:58:39:
                    77:6c:cc:bb:a5:37:22:45:b0:a4:7d:51:96:4b:3a:
                    f7:1e:11:c7:30:c5:55:fd:0a:26:a1:ee:c7:24:f5:
                    a2:c5:85:b3:34:d8:27:57:cb:99:16:4c:d2:78:50:
                    a6:86:96:b7:66:27:26:d9:8c:61:3e:c4:2a:7a:3c:
                    a5:64:18:37:b1:2c:4c:f6:f4:eb:db:40:a6:93:bb:
                    ff:d3:9e:d4:ae:95:44:bc:35:72:e1:99:79:a0:ba:
                    cd:b8:5e:10:b9:d4:1a:93:9e:20:3d:56:9a:4f:70:
                    a6:91:2c:d0:f5:f7:d1:de:75:f1:94:b0:4b:fd:e8:
                    b3:ac:f1:c2:dd:f0:72:b9:13:b2:aa:f6:02:0d:51:
                    77:24:5e:86:fa:a5:94:95:49:a2:70:0e:98:a4:e9:
                    e5:b1:29:2f:65:bc:90:b2:31:28:1a:21:1e:5c:be:
                    6c:81:35:6c:d4:99:05:6e:94:e5:52:32:de:85:e1:
                    08:06:78:ad:ec:3d:11:dd:16:bf:fa:1e:26:a2:71:
                    c7:c5:1c:5b:40:47:50:ed:07:0a:0e:c1:84:c2:f8:
                    f0:65:46:f2:17:b7:12:cb:9d:3d:ad:68:e8:fc:83:
                    f7:ca:9d:24:e6:e7:a0:f9:79:97:15:9a:2b:11:06:
                    34:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:4F:71:3A:84:0C:C3:4C:B0:96:DD:52:21:A3:84:B9:EA:80:50:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8ad4b5fb-7b91-43c6-bc13-875b3d8ff505/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8ad4b5fb-7b91-43c6-bc13-875b3d8ff505/9321849f5546e2d2ddc95ec7eb7155dc893ab78b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.248.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19244

    Signature Algorithm: sha256WithRSAEncryption
         12:be:f7:2a:41:3d:9e:35:23:f0:e3:e8:9c:f9:0a:3d:81:5a:
         ea:1a:ce:73:49:f7:e2:f9:49:6b:b9:e7:e1:1a:30:15:e4:83:
         df:f1:c5:a0:45:d9:db:8e:9c:1d:21:49:fd:b0:4d:d1:e7:11:
         fb:73:e2:f8:f1:cd:57:d0:ce:42:68:21:a9:53:6e:4d:83:0e:
         63:cf:3e:6a:3c:96:ad:ec:54:29:ea:7e:86:ac:7d:86:4e:65:
         46:4d:4b:e0:0b:31:94:d7:be:4d:3f:ea:06:c6:a1:1a:d6:14:
         40:bb:c5:4e:b0:82:7d:b8:a8:de:3a:1a:b7:1f:6f:db:48:33:
         54:cc:4d:7a:c3:58:25:da:63:99:3c:f2:36:be:35:85:86:6b:
         5b:28:d0:12:a9:f9:3a:fb:fa:5b:73:7d:cc:90:be:2d:af:b0:
         2c:d1:00:d5:19:db:17:32:80:ca:78:0c:d2:9f:da:8d:f7:60:
         e5:01:3b:3d:10:b3:93:02:b4:71:ff:2e:65:a0:13:27:3e:da:
         76:5f:ab:bd:5e:52:63:f4:59:1f:11:18:99:de:a5:91:5e:70:
         73:e2:df:57:c7:36:a7:8d:94:8d:67:4d:55:6e:de:c9:0c:96:
         49:f6:d2:16:8b:bf:e2:f0:b3:54:5b:a0:3f:35:59:14:de:99:
         aa:da:53:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----