Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4769429d2868dd476d19543c13bf3b6ad799b6e.cer
File:                     a4769429d2868dd476d19543c13bf3b6ad799b6e.cer (raw, json)
Hash identifier:          DPp2SwT2iFaA1Gb7RRnf9Wg9XDkCNeHqCvDHIrxBTy0=
Subject key identifier:   19:65:E4:D1:D3:0C:05:2A:53:95:3D:99:99:57:87:AD:7E:55:47:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED2538
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8ca35279-cec6-4e3b-9a61-5d32ecb4748f/a4769429d2868dd476d19543c13bf3b6ad799b6e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8ca35279-cec6-4e3b-9a61-5d32ecb4748f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Jun 2023 22:04:58 +0000
Certificate not after:    Sat 10 Aug 2024 15:00:00 +0000
Subordinate resources:    IP: 148.242.0.0/16
                          IP: 200.52.96.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15541560 (0xed2538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  7 22:04:58 2023 GMT
            Not After : Aug 10 15:00:00 2024 GMT
        Subject: CN=a4769429d2868dd476d19543c13bf3b6ad799b6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:14:a3:fe:2e:db:1c:ea:48:f6:bd:0e:46:9d:
                    7b:be:b7:95:a2:80:ae:7c:f7:99:00:c3:3b:5c:f1:
                    7d:8c:c1:3e:7f:ce:8a:a3:fb:5d:46:bc:b6:8b:31:
                    4f:12:ba:2f:fb:04:c1:77:7d:dd:b5:da:eb:0d:01:
                    b9:1d:6a:4d:a2:46:8e:a0:e5:25:b3:f4:5e:f9:ba:
                    f8:a6:a6:b0:ae:5d:1e:1f:84:66:5d:8e:69:2e:8e:
                    c8:ec:73:03:7e:cc:c6:e0:2d:52:ed:e4:e9:c8:f7:
                    4f:5b:56:6c:13:bc:a1:f8:ac:00:cc:95:a7:42:c6:
                    3b:7b:de:85:06:b5:c2:25:14:bd:60:6a:73:a4:ae:
                    c3:b0:32:b4:3a:0e:84:43:84:f1:c4:73:14:65:ae:
                    97:1e:f0:42:7d:38:ca:43:3d:0c:eb:d8:dd:08:ef:
                    04:ed:fd:d8:83:7f:74:7d:5f:73:11:34:12:a9:b1:
                    88:1c:d9:bd:3c:b8:a3:0f:ce:e4:2b:bc:98:ba:b2:
                    65:1c:1f:67:7c:33:dd:04:2c:f9:bc:9b:4d:02:31:
                    3c:32:5d:9c:06:c4:9f:ff:6e:92:2e:0c:7e:45:89:
                    08:2a:5d:a1:af:0c:39:5e:53:2b:56:ed:c1:9f:b2:
                    3f:5f:f0:dd:c2:27:a1:dd:69:17:54:34:50:69:7e:
                    b9:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:65:E4:D1:D3:0C:05:2A:53:95:3D:99:99:57:87:AD:7E:55:47:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8ca35279-cec6-4e3b-9a61-5d32ecb4748f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8ca35279-cec6-4e3b-9a61-5d32ecb4748f/a4769429d2868dd476d19543c13bf3b6ad799b6e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.242.0.0/16
                  200.52.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:71:a2:74:ac:61:67:55:3b:c4:98:93:ab:27:de:db:3b:53:
         f7:63:b1:aa:44:ee:d4:f2:9a:0d:e6:fd:6e:f1:f3:cf:84:e7:
         6d:35:37:a6:85:23:44:05:1a:97:3b:b7:32:6e:76:21:8a:a7:
         0a:35:fa:9e:de:f5:45:b8:b0:91:2c:e7:47:28:a2:2e:a4:62:
         94:81:d2:ee:70:c6:76:76:66:b0:7d:71:38:6f:59:c5:ce:1d:
         a3:fd:be:92:e9:37:91:c9:af:65:cb:73:b0:eb:d9:f6:c4:18:
         6c:9e:62:72:72:fa:2a:b6:14:96:2e:6a:56:e5:93:82:18:ba:
         4d:00:91:b7:c5:2b:78:a5:34:62:01:a7:7c:e3:60:c0:d9:28:
         4b:1e:f0:ea:80:ed:d3:ed:16:98:3d:62:2b:de:2b:6e:30:61:
         1a:06:fe:f6:dc:d5:38:76:ff:95:f2:47:89:14:e6:e3:78:3c:
         69:18:a3:ae:f4:9a:01:d4:71:a9:d2:a4:d5:3a:b2:ed:d5:39:
         9c:97:01:a5:75:5f:c7:41:52:51:e2:d7:81:1b:1d:1a:6a:47:
         cd:9e:54:d7:a5:00:85:ab:30:08:44:95:d5:73:0d:da:d9:b9:
         00:00:8f:69:17:2b:29:58:b7:07:41:c1:d4:68:97:d1:00:32:
         39:c3:8b:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----