Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/989ea633e7daf573e96420aae6397a0be425d5f7.cer
File:                     989ea633e7daf573e96420aae6397a0be425d5f7.cer (raw, json)
Hash identifier:          rSMuNGfFz/pAQyckAoCX6nNN+4MDMUtS8Ygu6CGeQnY=
Subject key identifier:   9D:C3:A5:10:A6:C7:A2:D0:9F:F6:13:CD:CA:9C:90:E2:8A:BD:AD:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECC7B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/84f8251f-bd1d-4d19-b7fe-e91005911862/989ea633e7daf573e96420aae6397a0be425d5f7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/84f8251f-bd1d-4d19-b7fe-e91005911862/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 14:13:54 +0000
Certificate not after:    Wed 22 Jan 2025 21:12:29 +0000
Subordinate resources:    IP: 168.227.244.0/22
                          IP: 2803:4340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15517617 (0xecc7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 14:13:54 2023 GMT
            Not After : Jan 22 21:12:29 2025 GMT
        Subject: CN=989ea633e7daf573e96420aae6397a0be425d5f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9c:b9:23:5e:5f:a9:0c:aa:46:f3:c7:c6:5e:
                    d4:80:3c:14:cc:13:06:b7:3d:c4:13:ad:db:01:01:
                    ee:ff:45:a0:d7:43:c8:cc:b7:f9:1f:d6:70:e5:7f:
                    8e:3e:43:53:b6:b3:86:fe:23:85:10:53:cb:1d:48:
                    46:be:b7:29:6a:df:76:fd:80:04:32:fe:d4:22:22:
                    f5:57:89:92:36:2e:fe:8e:39:a7:ed:c6:ea:ea:83:
                    ef:ea:7f:d7:f6:71:ca:d2:c9:df:82:56:3d:43:b3:
                    9e:fc:8a:3e:74:5a:74:da:8a:b7:3f:59:8b:16:30:
                    74:8a:ce:1f:f7:f5:a8:f4:13:5b:8a:2f:af:2b:0c:
                    c2:e5:39:b4:a3:d9:48:7f:d9:3d:6c:06:22:cf:6f:
                    56:89:55:7b:a1:81:40:0d:62:6f:dc:bb:ed:3a:80:
                    40:cf:3a:f2:79:44:fe:83:d5:40:08:5d:9a:c8:eb:
                    13:ab:76:aa:41:95:15:af:34:39:32:9e:1f:e3:14:
                    9e:eb:e3:00:c5:90:59:d1:2b:4a:6a:75:9a:74:00:
                    da:d9:2f:4c:d5:47:37:93:13:f5:47:48:8a:d6:82:
                    f5:ed:a1:76:63:cc:5a:34:97:77:46:66:00:85:fa:
                    d2:a5:8a:9a:1a:53:68:e4:f0:d0:59:c1:7f:d0:dc:
                    0d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C3:A5:10:A6:C7:A2:D0:9F:F6:13:CD:CA:9C:90:E2:8A:BD:AD:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/84f8251f-bd1d-4d19-b7fe-e91005911862/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/84f8251f-bd1d-4d19-b7fe-e91005911862/989ea633e7daf573e96420aae6397a0be425d5f7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.244.0/22
                IPv6:
                  2803:4340::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:d2:bb:58:8e:e1:db:af:c2:1f:e2:36:e6:8c:47:35:4e:
         0f:d0:0e:c4:4b:bc:b2:06:18:c2:71:bf:13:da:4b:9f:4f:62:
         62:a0:49:b3:4e:16:d0:99:a1:33:ef:f3:cb:67:0d:13:ff:69:
         4a:63:42:16:fa:ab:e6:db:51:3a:5b:e9:60:d8:b1:e5:77:00:
         b2:b5:94:b7:77:c9:f8:42:db:08:11:a1:6e:2e:28:ad:33:b3:
         9e:d9:22:f2:92:7b:9d:7c:9b:5b:3c:d7:8b:bd:a1:b4:52:53:
         da:0d:28:06:28:f4:49:24:d6:31:c7:ec:0d:07:d9:4d:8d:53:
         04:c4:00:83:f2:22:13:cb:66:d1:82:f6:4f:c7:d4:2c:63:f5:
         3a:6b:ae:8a:92:09:9b:1d:44:40:f4:d5:6d:90:cf:c8:cc:f4:
         28:62:c5:b5:1b:9f:e8:6f:75:d5:89:54:67:aa:24:46:c6:15:
         57:e3:66:bb:f7:0e:26:86:f1:77:18:94:3b:3c:1e:12:71:31:
         85:c2:d3:9d:68:74:1d:d0:88:1e:36:f1:74:5d:9c:c7:cb:c6:
         73:ce:9b:e0:8f:c2:53:1c:84:85:4d:0d:d7:5b:65:93:2f:f7:
         5e:48:4e:72:c0:79:05:80:51:57:4a:af:db:33:85:3e:21:70:
         5e:d0:ca:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----