Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3c9d6e5bc12fbd7175eaee3c9a66d3aa19ee99a.cer
File:                     a3c9d6e5bc12fbd7175eaee3c9a66d3aa19ee99a.cer (raw, json)
Hash identifier:          5KEsFZqHNuZCdRPJveAdp1xY9elDoWjmtKxsM+RwUCg=
Subject key identifier:   7A:E2:EE:C8:C6:C9:03:3D:72:73:8B:DB:49:A2:EA:45:C2:8F:F8:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBC25A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/719153c3-f0a2-4db5-afc5-04033432aa33/a3c9d6e5bc12fbd7175eaee3c9a66d3aa19ee99a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/719153c3-f0a2-4db5-afc5-04033432aa33/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 11:27:22 +0000
Certificate not after:    Sat 11 Jan 2025 14:35:38 +0000
Subordinate resources:    AS: 271879
                          IP: 200.36.159.0/24
                          IP: 2803:5c10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16499290 (0xfbc25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  3 11:27:22 2023 GMT
            Not After : Jan 11 14:35:38 2025 GMT
        Subject: CN=a3c9d6e5bc12fbd7175eaee3c9a66d3aa19ee99a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:2f:54:32:04:25:a2:8b:80:be:ce:44:c6:
                    65:a4:73:9a:d1:38:50:b6:74:28:03:85:4b:af:70:
                    ee:c9:0f:3b:f1:f0:7d:1c:d1:6e:35:86:85:88:a5:
                    f5:db:a0:af:9d:59:fc:8e:d1:d4:85:cd:48:a4:e0:
                    2b:90:7d:5d:c3:4f:70:8f:bc:b0:05:45:08:69:91:
                    7c:05:0b:c7:58:ee:15:53:65:43:ef:bd:54:2f:b3:
                    1c:61:20:b8:9e:ed:db:84:e4:0d:74:05:b2:8b:5b:
                    6a:54:71:09:fa:cd:2f:2f:89:47:af:bc:9d:80:7f:
                    25:98:e7:7e:71:ec:c6:5c:01:3f:45:cd:98:a2:03:
                    a9:b8:0e:0b:b4:f4:65:03:f7:b1:7f:af:62:75:90:
                    f3:54:12:bb:00:7b:41:cf:e8:a1:bc:8c:45:4a:5d:
                    57:d3:5e:a1:c8:de:f3:d3:b2:d9:ef:5c:63:27:f8:
                    ec:82:95:1c:29:9c:ee:67:6c:82:ee:f6:ad:e2:c8:
                    f9:ba:49:c4:c8:0d:c8:72:46:cc:fd:a4:d6:ff:ca:
                    3a:b7:4e:9b:1f:05:20:db:40:7f:d3:5d:a2:fd:d3:
                    10:6d:64:b8:b4:8a:82:81:15:8a:63:52:70:e4:34:
                    7e:90:80:b4:2b:1d:79:fa:85:23:bf:61:00:5c:08:
                    c9:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E2:EE:C8:C6:C9:03:3D:72:73:8B:DB:49:A2:EA:45:C2:8F:F8:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/719153c3-f0a2-4db5-afc5-04033432aa33/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/719153c3-f0a2-4db5-afc5-04033432aa33/a3c9d6e5bc12fbd7175eaee3c9a66d3aa19ee99a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.159.0/24
                IPv6:
                  2803:5c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271879

    Signature Algorithm: sha256WithRSAEncryption
         43:d1:d5:b4:72:c0:3b:2d:4b:a4:b4:6f:a2:20:25:c3:c0:fb:
         f7:e5:9d:19:51:97:d9:46:a8:89:1b:e7:9e:27:00:17:19:43:
         5c:9b:dc:33:57:6d:47:9f:02:37:8d:f1:0e:b3:23:e5:c5:e9:
         70:9e:46:f1:67:ab:d6:d3:c8:eb:f3:bd:20:92:13:b4:f0:81:
         b4:69:09:ec:5f:28:b9:e6:04:2b:3c:32:ff:10:7b:48:99:09:
         7e:ba:a4:75:2c:ed:3a:d7:03:75:08:d5:68:cc:71:77:48:24:
         35:63:d2:f2:12:5e:1e:8b:3d:11:1f:5f:3a:cb:50:4c:03:88:
         e5:dd:ef:76:fe:fb:b2:f3:9b:18:26:93:b9:9f:bb:86:21:9c:
         ee:e9:ec:13:49:41:b7:1f:5a:09:29:54:12:61:88:01:88:82:
         56:bf:58:d9:6e:eb:73:4b:13:03:0d:ca:4a:e0:af:46:44:cc:
         fc:6d:1c:50:fd:03:6c:2e:de:a4:dc:7f:85:45:da:1c:41:dc:
         c8:99:5c:47:52:b1:01:82:11:80:c4:a0:88:db:51:27:ed:87:
         91:c5:ff:0d:7d:67:16:9c:2d:2c:fc:29:2e:0a:08:2e:e3:99:
         56:99:62:9f:f7:1e:c8:95:45:8d:b2:14:ff:10:0a:bb:f1:cc:
         f6:08:48:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----