Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1de058a3b40c8012953d0117fdbd1ab71a89023.cer
File:                     a1de058a3b40c8012953d0117fdbd1ab71a89023.cer (raw, json)
Hash identifier:          Z5c0LosxXPhfsmQCj9v+DwrY3N1V6EWQh79tQyaTIQk=
Subject key identifier:   00:6E:0D:85:46:B7:16:55:4E:6C:93:30:B4:46:D5:83:29:32:C0:2C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF0578
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d264609-d54f-4f2f-8e26-afd7236df4c6/a1de058a3b40c8012953d0117fdbd1ab71a89023.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d264609-d54f-4f2f-8e26-afd7236df4c6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:50:32 +0000
Certificate not after:    Thu 02 Jan 2025 19:48:47 +0000
Subordinate resources:    AS: 28126
                          IP: 177.37.128.0/17
                          IP: 177.154.48.0/21
                          IP: 187.19.128.0/17
                          IP: 2804:29b8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16713080 (0xff0578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:50:32 2023 GMT
            Not After : Jan  2 19:48:47 2025 GMT
        Subject: CN=a1de058a3b40c8012953d0117fdbd1ab71a89023
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:56:b6:90:b1:ab:50:0a:8b:8c:79:40:1c:0d:
                    67:4c:59:e1:07:e9:50:0c:e9:ea:cb:c4:2c:a8:98:
                    97:98:9a:9a:79:82:7e:15:d6:e1:64:2d:85:ae:a0:
                    f1:9f:05:57:e1:4a:ab:bd:04:c3:b1:6d:8f:9a:1e:
                    ee:0b:2d:cc:ca:22:d1:cf:55:40:0e:4c:6f:fd:8e:
                    9a:88:85:fb:fb:37:7c:46:2f:1a:cd:a7:52:b3:f3:
                    ec:74:ed:0e:4b:c9:4c:d0:66:a7:49:50:fb:5c:8d:
                    67:72:06:b0:cc:a1:e1:95:aa:c5:2d:9a:25:17:3e:
                    42:33:a2:30:c4:b7:f1:d6:58:8c:e0:ae:fe:2c:e6:
                    dd:2b:d8:87:9a:bf:9e:d7:d0:cc:fa:a3:e0:81:7e:
                    c0:6f:06:a1:7b:de:30:14:76:17:96:1a:31:88:ea:
                    65:db:e3:8a:2c:ef:5d:b7:af:91:a5:f2:9c:ca:a2:
                    59:b0:de:66:48:9b:10:ac:81:11:2c:ae:e3:64:73:
                    05:c0:53:4f:19:5b:af:7f:df:25:5d:ef:07:51:8e:
                    a9:60:d5:6a:e1:21:bf:a9:53:9d:0c:bd:b5:a7:01:
                    25:72:cc:5e:0b:88:bc:19:74:dd:66:ed:d7:88:b3:
                    4e:43:63:13:5b:cc:a2:99:75:c0:ce:0c:dc:db:fd:
                    f4:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:6E:0D:85:46:B7:16:55:4E:6C:93:30:B4:46:D5:83:29:32:C0:2C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d264609-d54f-4f2f-8e26-afd7236df4c6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d264609-d54f-4f2f-8e26-afd7236df4c6/a1de058a3b40c8012953d0117fdbd1ab71a89023.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.37.128.0/17
                  177.154.48.0/21
                  187.19.128.0/17
                IPv6:
                  2804:29b8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28126

    Signature Algorithm: sha256WithRSAEncryption
         5d:ab:f2:54:cb:1e:4b:62:c4:f4:0e:4e:7e:60:9e:95:8c:1d:
         4a:7e:1d:9c:86:a2:f1:c8:8b:e0:4e:59:2f:e1:af:16:3b:3c:
         74:0d:23:d8:9a:31:76:5b:4d:e9:c5:33:c3:a0:1b:d1:95:5e:
         40:1f:14:6f:8b:b9:3c:c2:bf:74:68:b7:6a:81:75:fb:53:48:
         66:fa:85:61:d0:43:c1:d7:e3:10:e8:f8:21:0a:15:2a:d0:27:
         08:ca:16:9f:d7:0c:c7:e6:5b:a4:9b:07:68:93:c7:2e:42:16:
         53:46:af:cf:c5:b5:5d:d7:3e:6a:6a:13:be:0c:3c:e9:b5:c9:
         aa:f4:3b:03:da:e4:2c:12:8d:81:83:53:01:87:e8:ba:6f:41:
         d0:7d:6c:4b:9b:81:50:5e:03:c7:a7:4d:78:0d:83:e3:d6:86:
         7b:fa:e5:42:c8:e3:c8:68:45:3b:ec:d6:f9:50:0e:61:03:0d:
         15:44:19:41:b0:2c:c3:c6:fb:46:68:0a:ae:33:99:12:72:fe:
         69:b2:9b:dc:12:9d:b3:a7:a2:66:cd:5f:4e:48:48:19:56:8a:
         33:09:ef:75:08:de:e5:92:99:4f:7a:07:2a:c8:05:6b:7a:b5:
         69:a6:03:ac:9e:0e:f2:84:7d:57:86:1a:f2:86:23:aa:34:b1:
         f9:d2:aa:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----