Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a99a79ee813ebb8659795a1ee7469c580f038a32.cer
File:                     a99a79ee813ebb8659795a1ee7469c580f038a32.cer (raw, json)
Hash identifier:          pJt4ZJsdj+ghIC5YX5qwfxRL4vNUnf3DR+H03NDmA9Q=
Subject key identifier:   3B:8E:8B:71:68:83:C6:17:4D:CB:14:10:85:DE:3A:96:E1:F2:1C:E3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3F935
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c36371de-2c27-4aa3-bad6-b2205af1a2bf/a99a79ee813ebb8659795a1ee7469c580f038a32.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c36371de-2c27-4aa3-bad6-b2205af1a2bf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 23:06:01 +0000
Certificate not after:    Sun 11 Feb 2024 02:31:02 +0000
Subordinate resources:    AS: 28434
                          IP: 45.174.88.0/22
                          IP: 2806:331::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14940469 (0xe3f935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 23:06:01 2023 GMT
            Not After : Feb 11 02:31:02 2024 GMT
        Subject: CN=a99a79ee813ebb8659795a1ee7469c580f038a32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:d6:04:a5:40:b0:92:dc:52:51:e4:b2:5a:
                    0d:81:ff:c3:4b:32:72:9a:b4:d1:34:7f:7f:3c:bd:
                    4a:79:77:68:db:b7:f8:f1:25:8c:5f:bd:a9:c1:b2:
                    a0:87:6d:5c:da:d8:11:71:16:19:67:9e:42:0c:9c:
                    ce:eb:fb:10:5f:6c:34:d9:cd:ca:f5:53:c2:48:ee:
                    3a:1e:9e:82:28:fc:bb:a9:2d:dd:f8:2b:a2:0c:f2:
                    fd:4b:32:90:23:80:bb:7e:f8:76:be:12:2c:21:dd:
                    c5:e5:75:be:75:72:07:38:cb:97:51:c2:e6:79:ab:
                    dd:a7:86:2b:54:cf:01:64:a4:cf:a5:bb:d7:4c:6b:
                    a4:e8:c4:2b:48:08:40:6e:5c:01:95:31:64:35:eb:
                    a5:f0:48:05:2e:a9:f7:08:c9:5e:87:07:ff:84:3e:
                    19:04:f2:74:04:fa:63:f6:77:05:1c:74:c0:d5:17:
                    ae:35:85:ff:11:30:7c:14:f3:ab:84:4c:e1:bb:5b:
                    aa:c5:5e:75:00:f6:c1:d6:f0:59:f0:70:0e:87:4e:
                    03:c9:0f:7f:6a:ca:fd:c2:66:e9:58:61:24:ea:82:
                    21:d5:d7:49:ad:af:af:4f:b0:8b:20:92:f9:b1:6f:
                    b4:8a:60:1c:71:a8:2c:d8:81:6f:ce:b8:3a:4f:12:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:8E:8B:71:68:83:C6:17:4D:CB:14:10:85:DE:3A:96:E1:F2:1C:E3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c36371de-2c27-4aa3-bad6-b2205af1a2bf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c36371de-2c27-4aa3-bad6-b2205af1a2bf/a99a79ee813ebb8659795a1ee7469c580f038a32.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.88.0/22
                IPv6:
                  2806:331::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28434

    Signature Algorithm: sha256WithRSAEncryption
         68:fa:44:2f:71:3c:fb:a5:29:29:2e:5d:74:32:36:c3:7a:73:
         27:4a:fa:cc:eb:0a:78:80:43:33:47:ee:ea:73:91:8d:2f:69:
         50:4c:d8:f9:8d:27:cd:84:0c:66:fb:e6:ea:82:82:f8:73:4f:
         81:90:8b:41:3c:a3:62:f0:ef:1a:cd:94:f8:2c:b7:1c:8a:89:
         df:d3:91:0e:4a:79:20:0e:69:35:81:c6:06:1f:94:82:3c:be:
         88:50:63:d3:02:97:eb:ee:97:2c:27:49:82:53:8c:f8:75:19:
         6e:f8:ff:68:01:a4:d7:43:ec:a9:ae:a8:f6:c5:73:71:7f:42:
         39:4c:c3:2d:4a:52:d1:49:a7:6b:ac:58:d8:86:78:d8:d8:4d:
         ef:fb:8f:05:3f:65:e8:8b:80:a4:e0:c3:59:00:36:6f:cf:2e:
         87:b9:ab:da:a8:b7:d7:db:39:6e:e5:94:fc:64:91:8b:14:53:
         07:62:58:87:cd:37:e2:1f:e5:d0:ac:29:c8:4b:b6:c5:76:2d:
         dc:d1:ea:17:1a:b5:9d:67:64:74:5e:6f:a2:f9:dd:c3:8e:b3:
         23:ef:90:57:99:cb:55:dd:5a:a3:09:9e:36:a1:f2:f9:6a:21:
         a8:e7:ba:32:31:fd:f1:5a:31:c4:23:23:ba:58:15:76:63:59:
         39:5a:20:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----