Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97e19f80a914e88700bb231723808fdf850cfd58.cer
File:                     97e19f80a914e88700bb231723808fdf850cfd58.cer (raw, json)
Hash identifier:          4oDelF2VfBwqQw+iERytz25csvywkDBSNMk61lMyjVc=
Subject key identifier:   DB:E5:0A:FE:01:67:93:78:BF:E2:85:B4:DD:C2:FC:07:A5:9E:C5:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01115040
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7bfe2523-2384-4939-a4a8-12f2939ff6b4/97e19f80a914e88700bb231723808fdf850cfd58.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7bfe2523-2384-4939-a4a8-12f2939ff6b4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 14 Apr 2024 18:51:05 +0000
Certificate not after:    Tue 29 Jul 2025 20:38:05 +0000
Subordinate resources:    IP: 131.161.84.0/22
                          IP: 2803:7380::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17911872 (0x1115040)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 18:51:05 2024 GMT
            Not After : Jul 29 20:38:05 2025 GMT
        Subject: CN=97e19f80a914e88700bb231723808fdf850cfd58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:22:7b:d0:8e:74:31:ca:49:d7:9e:8b:f7:57:
                    5a:0d:dc:49:fb:a2:fc:13:8e:05:d9:57:5b:f1:52:
                    48:35:fb:c6:7e:df:f5:73:a9:78:8b:06:7e:52:c1:
                    49:c3:fd:29:76:d8:b1:40:53:f7:7c:a5:14:77:a9:
                    78:ce:50:5e:48:a4:5f:b1:8d:6b:bf:1d:a6:fc:3a:
                    0d:4c:3f:ba:3c:58:88:a4:e1:4d:a5:eb:de:21:7d:
                    16:b8:78:0b:10:ed:ac:6b:3e:49:21:6a:39:1b:9b:
                    e4:ea:d0:f7:c1:1f:32:30:a9:ba:39:30:4b:0d:63:
                    ff:02:53:09:3c:e2:63:7c:42:12:11:7e:16:75:1e:
                    50:34:30:95:ed:76:26:1c:e2:2e:2b:e2:c1:29:84:
                    60:4c:a5:da:b6:e1:e7:0d:82:ab:b8:d2:9b:de:56:
                    b2:52:e0:4a:27:3c:f7:57:5d:d9:91:74:a0:03:9d:
                    6d:31:1a:ad:30:01:f7:78:cc:82:f0:b3:41:5b:33:
                    25:78:8f:c3:73:11:fd:4b:23:71:6d:f2:d1:d8:75:
                    e0:25:4b:c5:2f:61:36:e3:5a:ed:19:e5:ce:85:56:
                    a0:6a:cc:95:f9:0b:af:02:30:9a:23:b4:6f:67:03:
                    d3:02:17:03:4e:16:69:ac:e1:a1:46:30:fe:5d:9d:
                    04:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:E5:0A:FE:01:67:93:78:BF:E2:85:B4:DD:C2:FC:07:A5:9E:C5:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7bfe2523-2384-4939-a4a8-12f2939ff6b4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7bfe2523-2384-4939-a4a8-12f2939ff6b4/97e19f80a914e88700bb231723808fdf850cfd58.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.84.0/22
                IPv6:
                  2803:7380::/32

    Signature Algorithm: sha256WithRSAEncryption
         6e:f3:51:7b:e6:bb:2d:b4:02:ca:63:95:cf:66:88:57:9a:03:
         d5:32:a3:64:d7:5a:e5:3e:a1:c3:d3:96:16:dc:42:e5:49:50:
         72:58:98:83:6f:da:c8:17:05:69:40:73:ae:99:49:bb:22:6d:
         c4:f8:8a:4a:d0:92:81:0b:14:ae:63:a5:85:a9:23:12:ae:3e:
         a0:97:de:cd:73:6f:85:2d:10:67:21:dc:23:b4:4e:da:be:7a:
         2d:dd:da:6d:bb:6a:ed:88:41:c5:45:e2:92:54:d4:34:11:9a:
         76:13:44:e2:b5:be:04:0e:73:64:40:25:c4:8c:7d:c1:de:1f:
         de:7c:6e:a0:ef:94:19:f2:4f:8a:c0:13:66:b3:36:0f:c3:39:
         14:09:da:cc:2d:e8:92:43:57:f1:83:eb:01:bb:bb:60:fe:ea:
         d9:f4:22:25:a5:10:6b:95:61:7a:a4:57:79:27:eb:d4:49:d6:
         4f:78:e2:c0:c9:21:65:34:ac:52:f2:b8:e1:8d:15:2d:d9:fd:
         02:e5:d2:42:e6:cb:70:42:3c:07:a5:2a:7e:f7:51:1a:0a:b2:
         1f:05:58:86:de:d5:d7:91:8a:5b:3f:0a:d8:ca:65:da:73:bc:
         22:5b:85:7d:e9:2c:ca:13:48:bd:33:8e:aa:d9:e3:23:55:42:
         dd:47:34:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----