Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/afb700a2981459a56a8fa75c25470b64ab6a3888.cer
File:                     afb700a2981459a56a8fa75c25470b64ab6a3888.cer (raw, json)
Hash identifier:          bJfh+5aTmqXBPrF4Dy2AakjE0EKcFvrdzs8xeSjGbaA=
Subject key identifier:   ED:22:9B:EE:4C:DA:AC:60:02:21:F0:35:E8:03:2D:33:70:32:86:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102EA58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f135ac7f-49ef-4a44-8cf0-e3da0b6e9db1/afb700a2981459a56a8fa75c25470b64ab6a3888.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f135ac7f-49ef-4a44-8cf0-e3da0b6e9db1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Dec 2023 22:51:55 +0000
Certificate not after:    Sat 26 Oct 2024 19:41:58 +0000
Subordinate resources:    AS: 264842
                          IP: 170.81.252.0/22
                          IP: 2803:e2c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16968280 (0x102ea58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  4 22:51:55 2023 GMT
            Not After : Oct 26 19:41:58 2024 GMT
        Subject: CN=afb700a2981459a56a8fa75c25470b64ab6a3888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f1:00:6f:d5:36:5a:45:96:77:da:a8:99:04:
                    de:bd:0d:99:4b:98:c3:7c:af:e3:e6:17:e6:0f:5a:
                    f7:95:09:38:b8:c7:5a:4e:83:10:e1:8d:81:5b:2a:
                    6d:cb:b7:f1:35:87:69:20:16:c1:49:7a:84:e3:cf:
                    20:95:4d:87:59:28:28:75:65:da:e9:81:87:82:dd:
                    57:c1:19:7b:a8:9c:db:5e:17:47:e5:00:ab:ba:a8:
                    46:a8:f7:05:b9:3c:35:44:8f:b2:f5:79:77:99:af:
                    dd:e1:14:51:4b:ad:a2:ac:0f:6d:71:ee:f3:92:fc:
                    f7:c8:81:c3:4c:f0:74:78:ff:be:82:0f:dd:69:39:
                    7a:66:cd:18:37:11:74:4b:63:29:e0:c5:c6:b7:c3:
                    97:85:bd:24:0a:6b:16:ec:8d:4e:59:8b:26:d8:34:
                    b2:ae:b9:0e:3d:69:3f:dd:2b:28:24:76:f4:f5:44:
                    26:2c:e3:c4:e8:62:c6:58:64:21:a5:fc:b8:a5:01:
                    6d:e1:f8:7e:02:1b:c6:ed:bf:76:45:63:0f:40:85:
                    5b:14:3f:5b:8c:07:8b:d4:13:1e:42:c9:f0:1a:39:
                    cd:4c:8e:40:5f:11:a8:57:39:53:30:4a:84:ba:d5:
                    79:c6:aa:67:44:bf:bf:f0:31:0c:4f:b6:92:a9:1f:
                    20:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:22:9B:EE:4C:DA:AC:60:02:21:F0:35:E8:03:2D:33:70:32:86:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f135ac7f-49ef-4a44-8cf0-e3da0b6e9db1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f135ac7f-49ef-4a44-8cf0-e3da0b6e9db1/afb700a2981459a56a8fa75c25470b64ab6a3888.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.252.0/22
                IPv6:
                  2803:e2c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264842

    Signature Algorithm: sha256WithRSAEncryption
         b4:e7:c5:d6:48:9e:37:76:c8:21:78:25:b8:3b:f2:d4:47:4e:
         69:7c:17:c8:05:bc:6f:3e:d2:6c:11:61:43:4a:b8:f2:21:20:
         e1:c8:61:d7:b6:09:f9:91:44:df:2c:13:d5:8c:8b:f9:90:b6:
         7c:c7:da:29:20:f2:17:e9:cf:3a:17:c7:7e:13:c8:d3:b6:3c:
         56:d6:4b:4d:42:bd:f9:68:c5:49:9a:33:21:b1:d5:3a:c2:ed:
         49:7a:39:de:f2:47:30:57:43:c7:d4:41:68:cb:d3:2d:a5:77:
         41:1a:ef:e7:76:12:aa:dd:96:3a:7c:7d:ba:5b:de:66:8a:4f:
         9b:25:01:13:89:26:63:8e:84:46:53:ce:77:55:81:68:b9:21:
         4a:c8:03:69:08:34:3f:5a:81:96:1b:64:b3:c8:b1:ef:b7:5d:
         fa:f3:8e:e3:53:2f:74:e8:e3:65:57:72:e2:ce:6c:48:f4:e4:
         39:73:17:50:95:2f:b3:de:03:f7:5f:d9:73:ba:94:90:03:5e:
         91:3a:ba:b6:d6:b8:69:ce:d8:af:b3:45:e7:a6:57:b6:41:7b:
         ee:e1:cc:b7:20:14:62:2a:0b:74:c4:2b:d4:81:fc:66:db:16:
         17:5f:61:9f:48:ef:68:1c:71:2b:5a:00:58:b1:55:5d:2a:a9:
         24:9b:16:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----