Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9cf2681c1d5183d68eb2cc5e14b6eb80dfcf8e4.cer
File:                     a9cf2681c1d5183d68eb2cc5e14b6eb80dfcf8e4.cer (raw, json)
Hash identifier:          cqldOhAd+ppvMMg97c1ckvuIgUo9ijcxFyUxSfkMnMw=
Subject key identifier:   64:C2:05:82:B3:C5:32:3D:5F:3A:1E:84:B8:C7:74:B9:79:90:2B:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E927BA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5ce7e005-4173-4ea7-9fc2-1e5b08a67927/a9cf2681c1d5183d68eb2cc5e14b6eb80dfcf8e4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5ce7e005-4173-4ea7-9fc2-1e5b08a67927/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 12:52:34 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.16.96.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15280058 (0xe927ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 12:52:34 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=a9cf2681c1d5183d68eb2cc5e14b6eb80dfcf8e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:b3:ad:c7:88:d7:5b:8c:0b:e2:d3:4e:56:
                    a6:1a:32:ea:d8:0e:12:e2:82:7a:00:12:66:41:6c:
                    2a:4f:a8:3d:32:33:a2:b7:98:c9:b6:f8:86:35:0c:
                    16:30:f6:fe:4b:1c:eb:6f:d1:af:52:c9:ef:45:b4:
                    46:1f:d8:3b:16:3b:0d:e9:97:43:c2:e2:f6:9d:db:
                    e0:90:5a:2b:f5:bb:d8:eb:d9:b9:ab:4a:d9:26:4c:
                    47:9e:3a:46:d1:ed:0f:a7:f2:85:af:5a:94:32:1c:
                    a5:dc:09:96:05:05:79:d5:d5:9e:81:5f:43:ce:56:
                    53:36:24:b9:dc:b5:af:9f:af:59:52:98:32:60:a8:
                    0d:ea:43:9a:62:ac:ba:50:72:a8:1b:c4:13:9d:98:
                    6c:17:a0:40:cf:c8:c0:9d:bf:04:87:5c:55:7e:7d:
                    b1:95:33:e4:4b:74:e7:e0:14:ee:19:9b:72:4d:b9:
                    02:78:5b:3b:79:80:89:0d:30:fd:39:bc:03:25:9e:
                    9b:c4:9c:0c:4b:cf:7d:20:7a:4e:d1:45:7b:9d:97:
                    6e:3c:84:58:65:ae:9c:68:4d:86:f7:c0:8c:94:8f:
                    78:57:22:13:85:c9:e8:b1:71:3c:cb:db:f4:2e:c1:
                    20:60:2b:2d:08:98:99:3a:78:64:1b:10:97:94:3f:
                    e5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:C2:05:82:B3:C5:32:3D:5F:3A:1E:84:B8:C7:74:B9:79:90:2B:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ce7e005-4173-4ea7-9fc2-1e5b08a67927/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ce7e005-4173-4ea7-9fc2-1e5b08a67927/a9cf2681c1d5183d68eb2cc5e14b6eb80dfcf8e4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         be:52:8a:84:dc:c7:b7:d9:1b:89:a8:e1:8f:c4:27:fd:e7:58:
         cb:e5:1d:4e:ff:10:94:da:5c:d3:03:80:52:49:6b:36:be:18:
         f4:94:f1:b1:2f:a1:f9:58:c6:98:26:c4:cd:7a:da:dd:9f:1f:
         ac:f8:df:6b:a0:e5:31:b9:23:a1:4c:9d:e4:13:5a:c7:3a:52:
         5f:ed:30:fd:3b:c6:91:06:a9:9d:69:bd:e3:c2:95:b6:4e:ba:
         d8:55:39:38:23:49:96:fe:71:2b:da:65:32:2c:fc:72:35:3a:
         d3:f3:79:5c:5e:08:ce:af:81:e8:ec:5f:e4:ca:eb:cb:37:cb:
         54:90:60:f3:e5:68:dc:db:15:6d:4c:f4:a3:b8:7d:17:e4:87:
         73:4c:35:d2:1c:eb:45:47:8c:8a:a2:86:57:e1:5b:37:dd:6b:
         a5:e5:4f:f3:6e:a7:da:68:da:83:4a:eb:94:5c:79:f1:9e:bf:
         93:2c:d7:cf:56:84:e6:74:24:e9:4c:0b:2f:e9:78:e2:5c:e1:
         f7:2f:ea:e5:aa:82:a0:b4:4a:37:2a:e8:2d:a6:7f:ed:c1:4f:
         3f:d2:99:46:28:54:28:11:6f:4e:bc:ea:40:21:e9:a3:7e:21:
         8f:49:0d:df:da:d6:4a:22:f3:c5:4a:fc:20:e1:d7:5f:e3:d5:
         df:91:2d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----