Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.cer
File:                     bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.cer (raw, json)
Hash identifier:          sC/af+sbl46eacMZ1G7o8ISekm7pr2q6mkEeSSoCHFc=
Subject key identifier:   35:8F:E7:D8:15:F0:73:4D:A9:F3:E0:E8:34:7E:9C:3C:A5:58:9A:2C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFAA7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 22:31:59 +0000
Certificate not after:    Tue 15 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 27881
                          IP: 190.7.224.0/19
                          IP: 190.15.224.0/19
                          IP: 200.110.176.0/21
                          IP: 2803:e010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15706746 (0xefaa7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 22:31:59 2023 GMT
            Not After : Oct 15 05:00:00 2024 GMT
        Subject: CN=bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:81:32:73:10:4c:19:bd:3a:88:26:ec:e5:b6:
                    b3:f7:7d:9a:a0:a9:39:21:7a:07:fa:25:a8:66:c6:
                    88:ad:81:be:c6:7a:c6:f6:2b:69:50:ba:91:81:9d:
                    df:dc:8f:01:6e:62:f5:10:83:15:00:ca:51:9c:7b:
                    17:06:62:0a:5a:ed:df:c3:b2:ef:c8:82:4d:dc:2d:
                    38:2d:b8:eb:2a:28:c2:ec:91:15:dd:93:ae:e0:68:
                    ff:ca:fe:e2:6a:40:4b:d7:73:d2:09:b5:d7:db:5e:
                    a0:b8:69:0a:ad:ad:af:03:8c:05:1e:df:e6:e4:5a:
                    53:92:d8:11:6f:a4:19:34:8a:e5:19:ac:af:0a:87:
                    6d:35:1c:df:af:27:59:84:b0:d4:13:38:a8:7e:ac:
                    42:0a:89:60:bc:9c:32:c2:68:77:33:35:4b:c2:25:
                    17:9d:0c:24:54:aa:57:bd:c4:b1:6c:0f:a3:7c:b9:
                    f1:27:4f:55:ed:53:55:62:57:fb:45:04:d3:fd:3c:
                    84:3e:8c:05:c7:49:dd:cf:cb:a8:a3:c2:2d:c6:ea:
                    2b:93:51:cf:2b:cd:44:3b:32:76:8c:c4:f7:6f:7d:
                    79:93:d9:cf:11:41:f1:65:9c:84:b4:69:37:35:bc:
                    dc:ce:90:21:8c:73:e1:a2:06:b1:83:c8:5e:23:9c:
                    be:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:8F:E7:D8:15:F0:73:4D:A9:F3:E0:E8:34:7E:9C:3C:A5:58:9A:2C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a21629f4-49b0-4d37-938c-e0954f8e592d/bbd84c8e3afcfa400f02dbac0e0457a4e37fbb47.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.7.224.0/19
                  190.15.224.0/19
                  200.110.176.0/21
                IPv6:
                  2803:e010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27881

    Signature Algorithm: sha256WithRSAEncryption
         b7:1c:9c:12:6b:d2:14:c3:ed:8a:5d:07:ce:f3:62:c1:26:11:
         be:c0:68:ba:ee:47:5d:23:99:b8:da:79:ae:00:f6:22:78:90:
         ae:98:48:e7:d1:5c:21:6c:ed:8f:b0:d4:a1:4c:bc:79:96:71:
         e9:77:2e:11:a6:85:b3:a7:bf:b3:c6:02:68:1f:6d:b7:cb:54:
         6a:f1:2e:54:c4:29:33:6d:a0:91:a9:81:3f:44:3a:45:49:09:
         d8:a1:f4:4b:b0:3c:1c:30:da:2e:36:3d:bb:49:a9:46:41:6c:
         a4:6a:b9:b6:8d:8a:19:33:68:fd:9f:e0:74:82:b7:12:b4:10:
         f1:08:6e:91:9a:cb:af:c7:69:00:76:af:e5:ef:50:87:76:70:
         63:87:26:01:4a:16:cd:a4:84:51:27:95:5f:7e:fd:a2:59:64:
         8a:82:10:c9:32:5a:6c:dd:5b:95:8a:0e:d6:dd:c0:5e:01:92:
         c1:4a:0e:a5:60:32:d3:9f:60:ef:58:e2:b4:03:85:70:e6:14:
         4c:f3:f9:c5:40:10:53:cf:b4:02:f8:36:1b:a9:c3:60:6f:61:
         9a:e0:26:5e:42:5d:6c:13:85:a2:ab:bb:bf:7e:9b:dc:40:82:
         10:17:53:9a:4c:39:64:a6:dd:7e:da:7e:0b:07:84:b2:3a:40:
         16:bf:db:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----