Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b98a9e9bbc80489307fb42f7138160f7ec6db7bf.cer
File:                     b98a9e9bbc80489307fb42f7138160f7ec6db7bf.cer (raw, json)
Hash identifier:          5MydSNItoiVr5ZRJ6Ohr2wZIQrVsM2NoS5bi5X/fe0U=
Subject key identifier:   0C:17:7B:0D:DC:1E:0A:5B:B1:D2:CC:EA:EB:8E:F4:3C:9F:42:B5:31
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E82A11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/23e4f6ae-3704-4be8-9c39-8786377111d9/b98a9e9bbc80489307fb42f7138160f7ec6db7bf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/23e4f6ae-3704-4be8-9c39-8786377111d9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 11:00:04 +0000
Certificate not after:    Sun 18 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 11694
                          IP: 159.90.0.0/16
                          IP: 2800:100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15215121 (0xe82a11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 11:00:04 2023 GMT
            Not After : Aug 18 05:00:00 2024 GMT
        Subject: CN=b98a9e9bbc80489307fb42f7138160f7ec6db7bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:6f:a9:2f:34:cb:2e:43:54:41:4b:f5:bf:16:
                    e2:61:f0:50:96:25:6b:76:8b:7f:4a:60:60:a3:e7:
                    9e:de:77:84:68:fd:58:be:e5:23:42:7a:89:d5:e7:
                    5c:f4:61:b7:92:f4:57:dc:81:05:08:2e:07:20:4e:
                    74:87:46:d1:72:4b:77:37:91:9f:28:56:e1:67:54:
                    0a:a1:8c:e3:5f:f3:ad:c9:f6:16:2e:57:e4:7a:d1:
                    fb:d8:4c:e5:6b:3a:68:dd:09:98:d1:9f:95:4c:cc:
                    d4:c8:8c:11:50:0c:37:2d:e5:04:ea:12:6c:d9:8a:
                    e0:db:b6:1e:d6:f1:1e:51:55:19:d8:20:e6:30:e4:
                    07:ef:95:5d:01:a4:aa:da:c8:7a:10:d8:1d:54:45:
                    c2:10:bf:e6:a5:88:f1:ce:65:29:ce:78:1d:7a:7e:
                    28:3d:45:83:25:3b:a8:b7:65:81:83:8a:2d:6e:ec:
                    30:bd:06:3a:35:b4:5b:5d:40:84:a7:21:99:21:4d:
                    c3:ea:3c:7f:72:83:88:3b:15:6f:1e:74:0a:04:98:
                    9c:33:5f:96:4e:a5:2c:5e:89:26:10:c5:c3:75:05:
                    d5:0e:15:24:2e:8f:cb:19:ba:5b:81:c8:22:5d:ca:
                    47:30:bc:f7:f6:48:d2:3d:fa:30:a8:cf:12:ea:90:
                    ca:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:17:7B:0D:DC:1E:0A:5B:B1:D2:CC:EA:EB:8E:F4:3C:9F:42:B5:31
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/23e4f6ae-3704-4be8-9c39-8786377111d9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/23e4f6ae-3704-4be8-9c39-8786377111d9/b98a9e9bbc80489307fb42f7138160f7ec6db7bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.90.0.0/16
                IPv6:
                  2800:100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11694

    Signature Algorithm: sha256WithRSAEncryption
         59:47:59:10:e8:51:5f:57:44:dd:b5:d5:a7:6a:e8:bb:ee:c6:
         ba:59:15:36:4a:d9:90:82:32:65:c5:21:48:b3:d6:81:72:be:
         96:a8:55:20:80:4f:3d:f6:2f:3b:d4:6b:57:51:4a:21:57:16:
         14:d4:4b:74:2b:b0:ac:a7:21:31:84:9e:3d:8b:4d:c6:d7:e8:
         bd:1b:90:91:ea:f4:07:a1:47:03:53:68:53:dc:45:a2:06:16:
         b7:5e:65:b5:44:ef:ed:4c:31:64:02:60:f7:c5:79:ae:cc:0d:
         22:88:da:ec:52:52:08:44:7a:5f:95:4e:db:52:fe:02:09:54:
         5a:30:a3:00:36:44:de:f8:27:8c:86:d5:21:95:8e:08:f1:cd:
         24:41:51:3d:b9:10:51:b3:60:ad:3e:9e:bc:82:19:23:c5:7c:
         f9:df:67:e3:dc:38:22:16:23:8f:0d:3e:8e:12:7a:08:5e:4a:
         5a:15:11:a7:b6:ab:77:a7:03:bb:86:65:e3:71:f2:85:13:fa:
         a2:43:91:6d:ae:c3:9a:be:70:70:1b:e3:33:12:eb:cb:f6:cf:
         1c:3d:a9:51:43:5e:8a:13:75:d1:32:2e:49:68:62:05:53:e3:
         e5:76:44:a8:44:0e:f6:92:c5:10:5d:fa:03:e7:51:dc:8d:4a:
         47:8e:8c:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----