Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9495f8fb67e006d5ed57eeeea742b26400dc178f.cer
File:                     9495f8fb67e006d5ed57eeeea742b26400dc178f.cer (raw, json)
Hash identifier:          YMVaI94EHVFwV/M7wGI9TwMeUuDgzT+EX0Jt6OUO+vI=
Subject key identifier:   2C:D2:C3:6D:DA:10:DA:30:12:C8:E0:9A:C5:CC:9E:8A:2D:C4:9F:E5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEBE10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6b827dec-1af0-4156-b794-2119418c9320/9495f8fb67e006d5ed57eeeea742b26400dc178f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6b827dec-1af0-4156-b794-2119418c9320/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 08:43:04 +0000
Certificate not after:    Thu 14 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 52498
                          IP: 191.97.28.0/22
                          IP: 2803:280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15646224 (0xeebe10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 08:43:04 2023 GMT
            Not After : Nov 14 04:00:00 2024 GMT
        Subject: CN=9495f8fb67e006d5ed57eeeea742b26400dc178f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:11:46:90:7d:27:28:09:cf:41:50:16:29:60:
                    e5:de:c1:21:06:78:1c:89:f0:d4:a3:fe:97:9e:7c:
                    5c:49:b0:e6:25:af:59:19:7a:62:67:75:6a:9d:c8:
                    e1:55:bb:00:69:36:9d:7f:21:04:b1:ef:a2:ab:bc:
                    22:e9:31:2f:08:dc:dd:4c:29:50:fa:1f:4c:94:d8:
                    94:f4:04:2f:cd:d5:c5:4e:a9:58:a5:b1:90:fc:1c:
                    45:28:08:26:15:18:70:c1:56:4d:68:94:f3:c8:ed:
                    c2:c2:83:56:93:55:83:02:01:4a:d0:b0:0b:f1:cc:
                    3d:6b:a6:e8:4d:40:64:53:2a:9c:c9:8a:25:bb:26:
                    47:e3:16:d4:3d:0f:ae:50:c1:69:00:ec:04:ef:37:
                    06:3a:92:96:0f:a1:75:c0:1b:8e:0f:66:f1:ac:72:
                    12:51:7b:47:66:30:c2:6a:12:e4:15:42:3a:73:2c:
                    4f:2d:f9:a6:76:a5:ee:2b:7c:24:65:d6:d9:a5:ff:
                    b6:99:ba:7f:d8:31:ee:1d:87:8b:f6:2e:55:f3:36:
                    47:b9:de:02:88:90:4f:a7:85:5f:5a:56:b7:b6:74:
                    63:e6:01:ae:53:c9:68:f8:ca:0e:2f:d9:8f:43:c1:
                    f0:7a:13:4e:f4:19:6b:b3:06:38:03:51:02:47:60:
                    0e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D2:C3:6D:DA:10:DA:30:12:C8:E0:9A:C5:CC:9E:8A:2D:C4:9F:E5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6b827dec-1af0-4156-b794-2119418c9320/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6b827dec-1af0-4156-b794-2119418c9320/9495f8fb67e006d5ed57eeeea742b26400dc178f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.28.0/22
                IPv6:
                  2803:280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52498

    Signature Algorithm: sha256WithRSAEncryption
         84:81:46:45:d3:44:81:a8:e2:d5:b1:64:06:cd:d7:e5:92:32:
         ab:17:3b:84:8d:5c:2d:ec:63:b1:cc:37:18:11:f3:44:7c:ff:
         76:db:87:84:88:fb:8f:3c:58:1c:bf:7c:98:2a:54:5e:0f:6d:
         aa:80:35:01:fa:3d:c4:e9:71:f6:95:8e:f3:42:2f:74:c7:82:
         4a:30:d5:91:2d:2a:54:3f:bd:5d:10:cc:5e:08:b2:4b:c8:84:
         34:00:ac:d7:75:6d:09:0f:d8:ba:0c:e1:45:8f:87:ec:24:72:
         d1:78:55:b2:34:f2:e3:c3:9a:1f:49:36:f2:2a:7f:ef:67:36:
         b8:2e:8d:40:38:dd:8c:d7:d6:d7:01:a3:7a:6a:a4:04:5e:94:
         a2:eb:7e:2c:5e:63:9e:3d:d5:59:93:35:cd:e3:05:23:78:e9:
         32:7b:20:60:ac:3f:68:84:13:3c:76:84:89:8d:5e:6b:07:17:
         f7:36:ae:53:7d:b6:08:a7:22:45:76:fc:58:5c:80:fb:30:88:
         37:8e:16:5f:15:ea:2a:ef:ee:7b:ca:04:21:cb:23:df:75:0e:
         3c:a5:53:e4:a4:43:c2:4d:fc:db:d0:e9:ad:e5:b7:ac:90:69:
         be:eb:20:27:26:db:28:c4:9b:32:41:2e:48:ac:70:9c:c9:d3:
         64:af:2d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----