Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a0ba935855f21649a01384bf73f066791a4d1993.cer
File:                     a0ba935855f21649a01384bf73f066791a4d1993.cer (raw, json)
Hash identifier:          5TYllRRqBQrdLzDtg7EcfhyduVK/O8/uRIhuNZ8a3r4=
Subject key identifier:   09:FA:32:76:22:66:F7:E6:7F:12:CD:18:10:6F:53:B3:77:28:79:A0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E81C16
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c8705238-06fe-40c0-8636-cd12a793d9f5/a0ba935855f21649a01384bf73f066791a4d1993.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c8705238-06fe-40c0-8636-cd12a793d9f5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 May 2023 19:27:55 +0000
Certificate not after:    Sat 17 Aug 2024 22:20:44 +0000
Subordinate resources:    AS: 52410
                          AS: 264610
                          IP: 200.9.226.0/24
                          IP: 200.115.186.0/23
                          IP: 2801:0:3f0::/48
                          IP: 2801:1c:1000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15211542 (0xe81c16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 19:27:55 2023 GMT
            Not After : Aug 17 22:20:44 2024 GMT
        Subject: CN=a0ba935855f21649a01384bf73f066791a4d1993
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:30:08:c2:77:52:b1:b0:07:b7:4c:52:31:2e:
                    91:72:53:a5:89:9e:c1:bc:49:e0:7e:02:99:27:d5:
                    f1:c8:40:9c:0d:bd:5b:5c:8f:52:81:0b:a5:e5:47:
                    c8:54:4f:ac:c1:fe:a0:5d:a4:e8:ca:15:4e:85:13:
                    fb:9f:bd:52:37:91:26:39:77:d0:d7:b2:92:bf:bd:
                    01:5b:9e:eb:2f:ce:5b:23:1d:ba:a9:1e:99:45:01:
                    a4:11:9f:0a:ab:e5:b6:d3:df:06:13:f7:aa:b0:5f:
                    08:73:d8:96:99:cb:2b:b7:d1:5f:f4:a7:92:ba:2f:
                    4e:a1:ff:94:81:b0:cf:85:c8:19:c6:7b:19:f1:d2:
                    c8:fa:72:02:d5:d2:39:9a:16:59:35:1b:48:c7:7d:
                    56:2b:7d:13:26:c5:f9:cb:6d:77:73:03:4e:bc:bf:
                    f9:48:8a:32:df:0e:7f:87:45:eb:bc:34:f4:26:f1:
                    f5:fd:d9:b7:72:d1:80:bf:5f:a7:51:79:99:52:d6:
                    90:60:00:8e:05:fe:6d:20:ca:7c:70:cd:4e:f5:07:
                    12:ec:40:bc:de:82:67:83:f5:a0:e5:57:7e:86:58:
                    30:20:a9:ec:ab:96:ca:d0:4a:36:2d:8e:97:b1:2c:
                    a1:65:71:fc:78:ed:54:15:4e:5f:17:4e:62:1b:bb:
                    1d:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FA:32:76:22:66:F7:E6:7F:12:CD:18:10:6F:53:B3:77:28:79:A0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c8705238-06fe-40c0-8636-cd12a793d9f5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c8705238-06fe-40c0-8636-cd12a793d9f5/a0ba935855f21649a01384bf73f066791a4d1993.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.226.0/24
                  200.115.186.0/23
                IPv6:
                  2801:0:3f0::/48
                  2801:1c:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52410
                  264610

    Signature Algorithm: sha256WithRSAEncryption
         84:54:09:59:22:11:a8:32:20:bb:03:d8:34:78:3f:46:f5:b0:
         90:21:a4:39:85:1e:eb:d5:32:be:40:cf:6d:a0:ba:b5:28:64:
         c0:9c:3d:ae:1b:a1:f4:21:fe:f7:b7:8d:ce:2e:55:7d:8f:74:
         39:59:8e:4e:de:72:50:58:16:f2:ac:6c:16:b0:d7:ea:a7:54:
         7d:ec:67:17:9f:f5:cb:fd:34:b0:68:cc:11:dd:86:9a:e1:49:
         61:a4:c6:93:45:0a:c0:5a:9f:62:eb:a3:22:62:49:31:5e:4e:
         2b:6c:2e:81:63:be:de:9a:c4:a5:71:0a:2f:ba:5f:91:45:ca:
         5e:ce:64:77:a8:c5:25:c9:03:dd:b7:1f:f5:f8:05:1a:b8:aa:
         3f:27:d1:70:f0:3d:5f:b9:7b:52:8e:0c:35:51:9e:40:82:f9:
         9f:90:1e:5c:38:af:a5:bd:4e:cd:95:a8:80:8c:89:c7:1b:4c:
         a1:28:64:af:1e:5e:c7:70:8d:a3:c8:f1:56:62:08:b9:ef:ad:
         ad:1a:ce:2f:87:44:41:de:71:95:e6:f0:d6:40:38:e4:7a:87:
         a3:35:f8:8c:fa:ab:3e:b1:c2:72:27:e1:65:73:5c:a4:c0:21:
         7f:5e:db:8c:0d:36:2a:e4:5a:a0:8e:d5:fd:9a:fd:6c:24:c1:
         6c:07:75:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----