Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8b5c934ecafb5f2f165a5e702478809ad915bcc.cer
File:                     a8b5c934ecafb5f2f165a5e702478809ad915bcc.cer (raw, json)
Hash identifier:          55ucghgPc0S0KXWASefVzL0OI6wPa0AXVjsSSWYJUR4=
Subject key identifier:   92:26:18:5A:1E:33:AF:3E:26:08:87:51:F8:90:03:63:24:D3:77:E6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF46A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4c305ede-1ca3-48d9-8160-72bffc2bc1e3/a8b5c934ecafb5f2f165a5e702478809ad915bcc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4c305ede-1ca3-48d9-8160-72bffc2bc1e3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:14:09 +0000
Certificate not after:    Sun 15 Dec 2024 12:39:00 +0000
Subordinate resources:    AS: 267201
                          IP: 45.230.164.0/22
                          IP: 2804:49c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16729762 (0xff46a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:14:09 2023 GMT
            Not After : Dec 15 12:39:00 2024 GMT
        Subject: CN=a8b5c934ecafb5f2f165a5e702478809ad915bcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a2:86:a8:b7:d8:6d:05:88:a8:a8:2c:70:9a:
                    6c:90:e9:b6:6a:32:1d:39:3c:4d:bf:23:d8:45:80:
                    60:d1:9b:7e:f8:d5:80:fa:a1:07:42:87:46:e6:cf:
                    92:2a:f1:d5:bf:01:72:a1:e0:c4:e4:23:cf:6f:c3:
                    74:fc:f3:12:f1:84:ef:81:b4:e3:12:b4:52:df:43:
                    c4:82:3d:c5:e1:d5:27:a7:12:23:b6:15:17:82:7f:
                    b8:08:a1:fb:28:bf:b7:94:05:24:04:81:c0:6d:fd:
                    ac:35:9b:09:7f:6a:a0:ce:69:76:ec:4f:71:78:20:
                    54:4e:d1:4f:c6:a8:27:33:6f:cb:5c:0d:61:f7:b1:
                    aa:74:a8:aa:5c:2b:36:eb:e5:d7:21:e7:54:47:e4:
                    61:a9:1f:ae:dd:91:52:74:a2:04:65:c8:cb:2c:63:
                    8b:3c:3c:78:62:4e:ec:66:fc:ec:60:77:45:24:ec:
                    0f:17:57:13:a7:66:5c:96:4a:82:53:af:64:b2:ce:
                    f6:e6:bd:85:b6:5a:e2:9e:7e:7a:c9:33:72:7f:00:
                    21:ec:51:a8:5a:fa:70:7f:87:8e:aa:0b:8a:03:12:
                    6a:1a:ee:a5:84:99:ec:74:1a:b7:58:07:18:cc:ba:
                    6f:ab:2e:34:68:3e:bf:97:21:44:ee:aa:73:a9:ab:
                    21:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:26:18:5A:1E:33:AF:3E:26:08:87:51:F8:90:03:63:24:D3:77:E6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4c305ede-1ca3-48d9-8160-72bffc2bc1e3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4c305ede-1ca3-48d9-8160-72bffc2bc1e3/a8b5c934ecafb5f2f165a5e702478809ad915bcc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.164.0/22
                IPv6:
                  2804:49c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267201

    Signature Algorithm: sha256WithRSAEncryption
         49:26:05:9e:d3:c4:45:af:f1:f0:8c:b9:dd:62:18:ae:bf:99:
         4a:e4:94:cd:ad:40:3e:6c:98:46:38:be:81:03:00:63:f8:e6:
         6a:5d:cd:e8:4a:21:c3:91:e5:64:b8:26:08:d8:29:03:38:ac:
         78:17:32:67:2d:9e:4d:82:65:c2:de:38:1f:ed:a0:96:37:1a:
         f5:44:ac:33:d9:78:49:7d:57:74:1d:bf:cd:c8:1f:f4:d4:29:
         39:ae:83:67:17:0a:77:c9:19:82:61:85:dd:3c:ed:02:cc:77:
         25:14:c4:d3:9b:23:5f:03:ce:98:88:c7:49:29:fc:1b:bc:24:
         66:03:40:40:3f:36:c5:3b:c2:68:e7:da:ed:0d:20:29:d6:5c:
         46:e4:c7:1e:6e:9d:7b:c9:8b:4e:e0:e6:c0:95:ec:28:0d:b7:
         d9:03:e3:06:1e:b5:f8:ff:c6:c6:bc:39:b0:d2:06:78:29:9f:
         21:3e:35:a8:60:b0:bb:57:33:50:9a:2f:a3:c7:31:2f:7e:b9:
         34:05:70:68:c2:0a:a7:83:fa:ec:41:2c:31:2b:18:2e:f5:ed:
         3b:5c:ac:5f:1c:ba:26:c9:ef:20:02:ff:82:cd:c1:56:4c:cd:
         9f:6d:5e:48:bb:d0:40:e3:8e:dd:6d:aa:fb:3d:7f:81:14:33:
         41:93:6a:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----