Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad9913e770d89471dcd7b96f3fa8638d3c172706.cer
File:                     ad9913e770d89471dcd7b96f3fa8638d3c172706.cer (raw, json)
Hash identifier:          IxndbJbWrDql/Zv4Z1LLWxsBR6o6JXC8QmI9zyajK/o=
Subject key identifier:   B3:A7:21:D0:0B:E2:56:DA:E4:86:BA:CA:0B:4E:83:83:58:CB:60:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01007519
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2e9ef716-333d-46cd-a746-66db90947a60/ad9913e770d89471dcd7b96f3fa8638d3c172706.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2e9ef716-333d-46cd-a746-66db90947a60/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:01:34 +0000
Certificate not after:    Mon 14 Oct 2024 14:23:51 +0000
Subordinate resources:    AS: 265197
                          IP: 167.250.72.0/22
                          IP: 2804:2c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16807193 (0x1007519)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:01:34 2023 GMT
            Not After : Oct 14 14:23:51 2024 GMT
        Subject: CN=ad9913e770d89471dcd7b96f3fa8638d3c172706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:07:4c:5a:eb:ab:f0:4a:39:c2:d7:e8:bb:0f:
                    dc:7d:22:d7:64:dd:cd:95:de:fc:1c:25:50:58:0c:
                    0f:58:d5:01:c0:e3:77:cc:5b:1a:64:8c:3e:1a:db:
                    50:bf:55:ef:19:d4:d3:e1:69:85:97:9e:0e:fa:61:
                    5f:db:dc:da:4b:0f:f1:f1:98:2e:e4:23:aa:51:80:
                    84:12:16:d8:98:82:70:d5:68:c2:a1:1c:6c:93:c3:
                    7b:c7:c2:2f:0e:f7:64:eb:a0:8a:0f:bc:c3:4e:e9:
                    90:77:dc:08:cf:84:c9:0d:7f:04:b6:80:7b:ea:38:
                    d5:4b:fb:e7:47:db:d7:2d:df:c7:f8:ae:e5:aa:88:
                    61:5a:58:11:5d:ad:6b:08:59:6d:3c:38:ec:9e:1c:
                    2f:09:c4:c4:aa:b0:74:0e:2e:3f:70:df:5d:96:79:
                    60:7e:69:d3:46:79:67:d8:29:a1:61:4b:1f:7a:0e:
                    00:f5:74:04:57:81:0d:13:71:68:62:ba:f3:8f:b1:
                    dd:4d:8b:17:32:ac:86:fd:88:6d:91:c9:be:b9:92:
                    93:02:b1:db:ab:73:e8:d5:93:31:f6:81:ec:81:48:
                    7f:fb:56:dd:16:0e:4f:6a:7d:69:cc:1d:c4:9d:1c:
                    aa:1b:0e:75:74:4e:fb:d0:95:5f:65:81:de:a1:9b:
                    ef:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:A7:21:D0:0B:E2:56:DA:E4:86:BA:CA:0B:4E:83:83:58:CB:60:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2e9ef716-333d-46cd-a746-66db90947a60/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2e9ef716-333d-46cd-a746-66db90947a60/ad9913e770d89471dcd7b96f3fa8638d3c172706.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.250.72.0/22
                IPv6:
                  2804:2c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265197

    Signature Algorithm: sha256WithRSAEncryption
         a9:7d:4d:9b:25:96:71:32:1a:f4:11:96:f3:dc:2b:16:89:5f:
         6a:36:df:42:b9:6c:e8:4b:cb:29:78:0c:35:43:fa:a5:ff:f5:
         2e:cb:4a:39:09:c8:49:b5:68:6a:76:37:f6:4f:fd:00:54:97:
         51:6a:70:0a:7f:19:c1:f5:73:d9:27:5e:54:d7:c3:a8:fb:15:
         65:45:65:44:36:dd:ce:1f:b5:d9:d9:ea:ab:12:63:f4:cc:8f:
         5f:bf:90:80:f4:d3:a3:5d:e7:6c:e7:7e:3a:1a:60:de:7a:04:
         f5:d9:ac:96:79:7c:50:c2:1a:42:59:7d:48:cd:2a:37:19:ef:
         ad:c6:c7:1b:76:f1:80:b7:94:f7:9a:4f:41:8c:7a:42:c9:19:
         06:37:f8:10:01:9c:ff:17:47:3f:6d:4c:17:dc:7e:26:58:04:
         ed:d8:2a:47:4b:27:36:c5:ce:6a:5a:05:79:e8:0a:89:b1:42:
         31:f8:79:c6:ea:80:4c:6c:ef:06:5b:78:d8:66:de:2b:bc:59:
         76:ec:59:0c:39:4f:de:be:a2:7d:bb:a2:3d:57:5d:18:ea:bd:
         b6:5d:35:67:a5:0c:43:91:cf:87:37:1b:ac:50:83:dc:51:eb:
         ee:4d:47:4f:dc:47:ca:d5:1b:5e:c2:a5:b1:c0:4f:a9:86:34:
         87:6d:29:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----