Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a8d18e189ad4cd90068f5097b2bc20ce48eee1d4.cer
File:                     a8d18e189ad4cd90068f5097b2bc20ce48eee1d4.cer (raw, json)
Hash identifier:          eyN2sb+piHJ3ReK4PC57siawCgWrU3/Yv/QakiOzXW0=
Subject key identifier:   FB:A7:21:6F:EB:7D:04:47:E4:61:64:25:2D:34:1B:13:BE:5C:42:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFAC9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/52f081a3-c3c8-4022-92e8-90c4413b0edc/a8d18e189ad4cd90068f5097b2bc20ce48eee1d4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/52f081a3-c3c8-4022-92e8-90c4413b0edc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 22:32:58 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 263134
                          IP: 148.220.0.0/16
                          IP: 2801:f0:16::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15707292 (0xefac9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 22:32:58 2023 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=a8d18e189ad4cd90068f5097b2bc20ce48eee1d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:6f:0e:c2:86:b7:d7:10:21:9b:22:50:f7:c7:
                    12:9f:51:d5:83:db:7b:16:56:e4:68:f9:67:8b:43:
                    df:06:b9:89:a1:7b:ed:ee:59:02:c8:ec:0d:1a:c7:
                    af:4f:07:43:ae:29:c7:0b:07:ba:75:7b:79:af:da:
                    7d:b9:33:04:5d:6f:36:8c:a1:9d:81:f5:a6:49:9c:
                    02:4f:a7:f4:e4:18:1c:7b:b6:a4:28:3b:e4:64:6b:
                    d8:ae:d0:64:b0:fb:8f:ad:26:dd:af:f7:62:d1:95:
                    d8:f4:5d:5b:1d:83:6b:53:38:57:e1:19:07:1c:75:
                    13:19:e3:da:1b:f2:37:07:56:27:41:b2:00:f8:18:
                    75:82:17:ce:9c:e1:46:80:a6:7c:36:58:8a:e7:b7:
                    6d:8c:0f:a9:ed:7a:81:41:6f:45:e0:b7:f4:49:93:
                    29:ef:27:2e:a1:16:a5:75:3a:d9:c9:c3:b6:bd:b1:
                    f7:84:b4:21:9b:7e:8b:00:0f:0c:43:0e:8e:70:2b:
                    0d:a0:a4:19:a0:28:aa:8c:93:8c:48:7d:a3:f4:81:
                    0a:1c:91:0f:ad:2f:58:eb:91:d7:2d:b5:16:2c:01:
                    73:fa:93:92:84:d5:14:3c:a9:6c:fd:9d:83:b3:c7:
                    5c:68:58:6c:ae:06:96:aa:6f:d4:13:1c:7c:b7:ba:
                    40:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:A7:21:6F:EB:7D:04:47:E4:61:64:25:2D:34:1B:13:BE:5C:42:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/52f081a3-c3c8-4022-92e8-90c4413b0edc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/52f081a3-c3c8-4022-92e8-90c4413b0edc/a8d18e189ad4cd90068f5097b2bc20ce48eee1d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.220.0.0/16
                IPv6:
                  2801:f0:16::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263134

    Signature Algorithm: sha256WithRSAEncryption
         b3:c7:5d:c5:12:b6:62:32:a9:b4:fe:f2:c9:28:a7:71:62:70:
         0f:9b:4a:fb:0b:1f:e3:5e:a3:29:4a:2f:ee:fd:1a:8a:c1:59:
         9f:6d:5c:a1:66:e4:aa:06:01:48:93:37:d6:1d:72:17:0b:e4:
         75:28:6f:aa:bd:ef:70:24:fb:21:ec:2a:9a:60:e8:80:b5:7f:
         3d:72:f2:67:f6:6f:87:39:b3:00:e3:d4:f8:17:1a:e3:a0:56:
         60:e5:d8:11:5f:17:fc:73:c1:3f:46:ac:91:a3:36:c4:8c:ab:
         15:38:74:82:50:94:4a:48:c4:94:2f:fe:0f:51:6c:65:40:09:
         1f:df:27:55:38:50:91:c0:0d:78:af:73:d1:dc:a5:5a:4d:1b:
         43:2e:75:d1:3e:04:b2:0d:10:4b:f1:d4:ad:a2:76:94:8a:76:
         b6:be:8d:80:e3:da:b6:1b:84:24:ef:ed:be:a7:04:5c:58:51:
         aa:b0:0a:29:07:5a:a1:35:9b:c3:02:1c:01:ed:fd:19:8e:2b:
         35:c0:45:9c:39:6f:16:1b:15:d1:74:83:00:7b:4a:fc:a7:df:
         e9:0a:78:83:d1:c0:80:09:e2:ff:b9:38:22:7c:29:82:16:32:
         6b:a0:55:01:90:c0:26:04:53:60:bb:5a:18:e3:e2:35:0b:9c:
         24:19:e9:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----