Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a29b96b6c9255784449546bb0db7c5fd27ed59f1.cer
File:                     a29b96b6c9255784449546bb0db7c5fd27ed59f1.cer (raw, json)
Hash identifier:          BVPK8mTrMzlTpo8rG6qfAuyKz1LWmrkb9Er2mRjipOU=
Subject key identifier:   E4:43:99:95:A4:13:56:CE:4B:DD:5B:67:67:3E:BB:E5:F9:CF:1C:7E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5906C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/201e1907-641d-4103-82a5-f3b0d76200ab/a29b96b6c9255784449546bb0db7c5fd27ed59f1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/201e1907-641d-4103-82a5-f3b0d76200ab/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Aug 2023 06:59:03 +0000
Certificate not after:    Fri 06 Dec 2024 16:30:44 +0000
Subordinate resources:    AS: 269929
                          IP: 200.3.10.0/23
                          IP: 200.34.140.0/24
                          IP: 2803:72e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16093292 (0xf5906c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 17 06:59:03 2023 GMT
            Not After : Dec  6 16:30:44 2024 GMT
        Subject: CN=a29b96b6c9255784449546bb0db7c5fd27ed59f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:db:7a:55:f3:a2:3c:b6:bc:d2:2c:0e:7f:2b:
                    d8:f9:e6:f4:7c:69:0c:00:9f:4f:42:0f:0a:4b:fd:
                    ad:7f:84:c1:7e:76:c6:6b:6d:d2:25:00:df:23:86:
                    a6:c9:d0:78:78:c0:0e:87:a4:65:3d:2e:af:74:3d:
                    ba:e5:ce:15:dd:1e:02:7c:b5:8c:4c:4b:c8:3c:79:
                    e7:82:a8:49:ac:bd:23:72:45:81:bd:06:25:29:6e:
                    90:a8:92:14:43:c4:80:51:9d:f1:8e:18:83:90:fa:
                    31:c0:b0:51:f6:10:ca:b6:02:a8:2a:9d:ac:99:5b:
                    44:75:3f:3c:7b:82:34:b2:d6:05:46:28:99:4f:a3:
                    37:69:01:cb:66:7b:a8:46:d6:54:34:41:08:42:43:
                    7e:92:34:8c:13:95:5a:74:31:cf:9e:40:6a:6f:75:
                    b1:ba:06:f2:37:7d:39:d6:94:a7:a9:d0:ee:07:96:
                    61:cc:05:12:2a:3b:cf:9e:55:b4:04:af:b3:76:54:
                    ef:03:12:a8:7f:e5:2a:b5:fa:5b:de:1e:7b:08:f9:
                    70:b1:cf:90:d7:e3:3b:54:67:13:75:bd:42:00:a9:
                    2c:9b:52:1c:49:7e:c2:ef:b8:f8:4d:67:f0:ec:49:
                    ee:74:f6:15:a9:6d:68:55:b0:8b:eb:bf:f7:ec:ef:
                    1f:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:43:99:95:A4:13:56:CE:4B:DD:5B:67:67:3E:BB:E5:F9:CF:1C:7E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/201e1907-641d-4103-82a5-f3b0d76200ab/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/201e1907-641d-4103-82a5-f3b0d76200ab/a29b96b6c9255784449546bb0db7c5fd27ed59f1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.10.0/23
                  200.34.140.0/24
                IPv6:
                  2803:72e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269929

    Signature Algorithm: sha256WithRSAEncryption
         7a:2e:6b:ca:63:fd:33:d7:84:77:10:92:4a:17:ac:fb:da:5f:
         42:03:f2:d2:de:09:0c:8c:84:f2:09:93:4e:c8:9b:03:69:2c:
         f9:f1:76:76:2c:f0:f3:06:a4:a1:f6:6f:de:1d:ae:63:70:df:
         90:5e:36:02:ca:db:09:d6:54:9e:d2:0d:c3:3a:6e:34:41:62:
         27:a8:58:72:e6:b1:f6:c9:f8:87:ba:b6:41:fe:ae:24:fc:af:
         6d:5e:98:08:eb:5a:a3:67:e9:e8:45:eb:ab:ef:11:85:7c:cf:
         02:c9:49:35:15:6c:72:85:b2:e9:80:67:24:b0:9e:d0:f7:ff:
         08:92:2a:69:0d:0b:2f:5b:cc:39:7d:c3:12:54:15:3b:6b:65:
         9c:c3:b2:7a:c2:11:80:13:e0:2a:9c:be:28:31:ee:f2:75:6f:
         6c:16:4e:a1:fa:5d:1a:1a:98:7a:31:12:08:54:b9:c4:cd:68:
         40:cc:d6:25:aa:b7:79:b6:fe:52:6e:97:f4:4f:66:91:8e:a7:
         99:3a:9c:5a:6a:8c:47:f3:d6:1b:e0:ae:65:b0:30:f0:25:e8:
         cf:04:0f:eb:49:f7:b3:e1:30:f4:9d:49:38:72:a5:1f:27:08:
         62:ae:e2:97:8a:28:3e:25:bf:8a:cb:a7:4d:68:a0:0b:f9:59:
         e9:7e:c4:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----