Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b822f1f5296b37c1bb61936bff7ef7a75b75616b.cer
File:                     b822f1f5296b37c1bb61936bff7ef7a75b75616b.cer (raw, json)
Hash identifier:          sO4SlXJo6xV7F3h9RdrLkUiMXWoBQIcVIQGdBNo3XqY=
Subject key identifier:   D4:28:04:C4:33:FB:5C:E4:32:D6:D7:37:CE:4E:17:A6:A3:5D:CB:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF57B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a686f10-a100-4321-af82-2b5a46ebb732/b822f1f5296b37c1bb61936bff7ef7a75b75616b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a686f10-a100-4321-af82-2b5a46ebb732/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:15:38 +0000
Certificate not after:    Tue 11 Mar 2025 19:16:24 +0000
Subordinate resources:    AS: 262988
                          IP: 168.90.80.0/22
                          IP: 179.125.64.0/19
                          IP: 186.251.8.0/22
                          IP: 2804:1058::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16734129 (0xff57b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:15:38 2023 GMT
            Not After : Mar 11 19:16:24 2025 GMT
        Subject: CN=b822f1f5296b37c1bb61936bff7ef7a75b75616b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9f:f9:88:eb:0d:07:5f:b4:64:c9:8c:48:dd:
                    b9:b0:fc:43:8f:38:6d:62:3a:63:b0:2d:49:d9:8d:
                    4d:60:49:0c:a4:f2:93:96:a3:6c:50:2b:5b:99:04:
                    5e:cb:17:a2:c9:c9:3c:38:90:53:ec:65:3c:08:28:
                    05:1c:bc:aa:64:a9:ce:06:67:f0:5f:7f:02:b9:6f:
                    c9:c5:2d:8b:07:d2:b4:53:89:6a:9c:1a:4f:dc:31:
                    14:46:e9:11:21:e3:70:29:64:22:39:ed:81:a2:18:
                    09:25:81:64:c2:fb:a3:5e:db:2e:0e:af:6e:6e:0a:
                    17:84:eb:95:1f:18:80:48:b4:4c:25:ad:64:2a:ff:
                    f4:fa:cd:de:bb:5b:b0:e1:36:25:4c:6e:f9:e8:81:
                    fb:b9:61:ed:db:2d:fd:af:b5:c4:2f:d1:b1:f8:c4:
                    fb:e6:60:1a:7f:a7:69:8f:77:ea:a0:af:6d:0f:d9:
                    f3:fa:a4:c6:b3:a7:59:70:f6:a9:df:84:6b:f4:03:
                    f3:5c:c3:5f:cd:d9:c5:fa:bf:29:11:4e:3b:e2:53:
                    b8:6d:29:60:c5:e2:0b:ac:bc:c5:0e:ac:8c:6c:08:
                    b9:96:c4:5b:4c:b3:ed:59:05:8c:13:26:a5:1d:24:
                    c8:b3:91:09:56:cb:b5:b9:86:c0:a7:f9:4b:99:03:
                    8a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:28:04:C4:33:FB:5C:E4:32:D6:D7:37:CE:4E:17:A6:A3:5D:CB:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a686f10-a100-4321-af82-2b5a46ebb732/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a686f10-a100-4321-af82-2b5a46ebb732/b822f1f5296b37c1bb61936bff7ef7a75b75616b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.90.80.0/22
                  179.125.64.0/19
                  186.251.8.0/22
                IPv6:
                  2804:1058::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262988

    Signature Algorithm: sha256WithRSAEncryption
         a6:9a:71:6b:47:8a:6f:51:86:fc:a1:9a:d9:17:e1:e9:b2:87:
         83:2e:a4:08:d7:79:9d:e0:a0:25:39:da:a7:08:8b:83:87:2c:
         94:4d:9f:76:5d:1e:d5:f4:b9:59:02:76:6f:16:02:4f:9d:a6:
         9c:2c:a8:13:8c:70:4f:ce:e9:08:fe:50:42:1b:6f:97:a5:e1:
         dc:c0:fc:2a:95:82:d0:79:e9:2a:37:1d:cc:3c:36:2d:37:5d:
         67:3a:a3:64:73:fb:df:dc:28:84:c0:07:1e:02:79:33:a5:07:
         9b:93:0f:8c:80:36:9f:c7:f5:7c:63:22:dd:50:40:74:be:04:
         ae:64:3e:8a:1c:56:da:93:d6:04:b3:68:ee:e3:b9:43:3e:6d:
         55:21:33:20:66:9a:5f:15:fb:98:2b:09:5a:f3:49:b6:ed:d4:
         3a:1d:2f:d5:ea:eb:8e:19:92:04:db:07:76:57:f2:f0:b5:a9:
         32:72:1c:a3:55:a5:3e:23:4f:54:b5:1b:3b:34:6d:c5:74:1b:
         aa:2b:eb:39:18:8b:76:db:4a:87:b5:81:82:e8:7e:a1:63:5f:
         2f:aa:9f:46:35:28:cb:95:b5:cc:a6:c7:f9:ad:5a:79:a5:5d:
         d9:3a:34:57:3c:f5:d1:27:5b:68:f8:41:e7:fa:5a:22:91:b4:
         43:ca:24:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----