Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a660c53c4b39b0d5d698878eb476db457543a510.cer
File:                     a660c53c4b39b0d5d698878eb476db457543a510.cer (raw, json)
Hash identifier:          amD4ikgPn+0PXk/DF+VXZxFjT8eSIs6BIFd19tN90+0=
Subject key identifier:   25:E8:5D:0C:AE:70:C4:F0:3F:C5:2E:3A:14:0D:F1:B5:EA:96:D3:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3C149
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5773ff5f-b4d2-45e5-84e7-4d8f9f4eb8f3/a660c53c4b39b0d5d698878eb476db457543a510.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5773ff5f-b4d2-45e5-84e7-4d8f9f4eb8f3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 19:09:24 +0000
Certificate not after:    Mon 27 Jan 2025 08:41:58 +0000
Subordinate resources:    AS: 28522
                          AS: 28539
                          AS: 265628
                          IP: 138.186.200.0/22
                          IP: 170.247.172.0/22
                          IP: 187.120.172.0/22
                          IP: 201.150.0.0 -- 201.150.11.255
                          IP: 201.159.96.0/20
                          IP: 201.159.124.0/22
                          IP: 2806:211::/32
                          IP: 2806:3af::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15974729 (0xf3c149)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 19:09:24 2023 GMT
            Not After : Jan 27 08:41:58 2025 GMT
        Subject: CN=a660c53c4b39b0d5d698878eb476db457543a510
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:69:62:d9:b1:6d:0e:20:d2:e7:b7:06:ad:2a:
                    7c:c4:26:97:ac:da:bf:b2:93:60:92:65:e0:fd:62:
                    ce:2f:66:5d:e0:1a:6e:dd:1f:f0:09:5c:51:64:c8:
                    e2:ae:0f:fa:02:2e:08:7e:8b:26:57:31:94:aa:d2:
                    5e:1b:eb:79:99:67:ee:4e:9b:0c:6b:9f:3c:1a:5f:
                    64:ec:6d:bf:84:31:ee:22:7f:f5:4c:86:02:65:5d:
                    96:95:63:1e:44:7e:a1:95:91:69:79:2f:b1:e2:db:
                    3f:37:8b:8c:43:f7:e2:f4:c6:88:d3:c0:76:38:27:
                    3f:79:c0:04:0e:c8:ba:b5:8d:ce:99:25:a8:e4:f8:
                    41:8c:00:5a:59:a5:ad:f1:b7:08:61:f3:bd:8e:52:
                    d6:6d:91:a2:13:e2:2e:38:82:01:dc:98:d2:38:0d:
                    87:b9:24:bd:c1:3a:e0:2b:79:8c:b5:03:b7:2e:4d:
                    16:47:48:01:e8:0c:7e:2c:c3:e7:0d:fa:b7:a1:35:
                    2a:3c:91:64:97:3e:ad:1c:2e:4f:19:ca:90:e6:54:
                    bf:ce:f2:34:60:e5:98:8c:11:71:b3:68:ca:35:0b:
                    3c:29:40:ce:8a:d4:9c:15:05:0a:a2:e2:bf:50:d7:
                    cd:33:8e:2b:02:88:2a:17:c9:a4:e3:fc:2c:2f:d0:
                    f2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E8:5D:0C:AE:70:C4:F0:3F:C5:2E:3A:14:0D:F1:B5:EA:96:D3:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5773ff5f-b4d2-45e5-84e7-4d8f9f4eb8f3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5773ff5f-b4d2-45e5-84e7-4d8f9f4eb8f3/a660c53c4b39b0d5d698878eb476db457543a510.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.200.0/22
                  170.247.172.0/22
                  187.120.172.0/22
                  201.150.0.0-201.150.11.255
                  201.159.96.0/20
                  201.159.124.0/22
                IPv6:
                  2806:211::/32
                  2806:3af::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28522
                  28539
                  265628

    Signature Algorithm: sha256WithRSAEncryption
         6c:5f:f7:ea:a1:6c:8d:c6:15:27:05:21:f9:77:1f:6b:90:74:
         04:5a:c6:26:86:c8:00:a4:39:20:c2:78:e2:dd:66:bc:64:0b:
         91:d2:d0:a4:05:3b:ac:81:8e:e9:8d:d2:11:8e:39:48:cf:3a:
         c1:4b:df:58:53:04:ff:7f:cf:4b:d6:4a:cb:50:4a:f7:da:84:
         85:20:c8:b5:ef:88:5f:59:26:fb:e6:e6:c0:f6:8c:d9:d0:ee:
         49:f4:03:3c:79:4e:04:68:8b:fd:31:a1:84:70:b6:68:58:32:
         90:bf:19:d4:ce:78:c0:e5:a6:c3:6a:76:0c:8c:04:86:21:89:
         80:ce:2e:9c:b7:18:2a:d2:0b:89:fe:ae:2e:81:5c:17:4a:49:
         3a:87:b1:2f:79:b7:8e:23:4d:d3:25:2e:cf:88:a0:b3:f7:ab:
         f4:08:4d:d1:25:87:05:21:2e:46:13:59:52:b4:df:81:0a:ac:
         32:0d:79:59:d9:e4:9a:da:4d:42:bb:e6:2e:7d:57:2b:d4:8a:
         eb:17:41:5f:a3:bd:fc:65:90:14:b1:55:47:44:e5:9d:ed:33:
         67:73:61:e3:4f:9e:29:3d:02:00:9f:39:f5:b1:36:cd:c4:89:
         74:0f:ae:9e:13:0c:b2:2c:29:cc:38:04:f7:00:84:08:9b:13:
         02:10:06:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----