Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc2d12391daa96e940344d2b02d15c0d8ea11aa8.cer
File:                     bc2d12391daa96e940344d2b02d15c0d8ea11aa8.cer (raw, json)
Hash identifier:          L3HWNNk35sE/KEJ9HHwenX0Qvlwqv9ZNJBiqbnwUrwQ=
Subject key identifier:   00:5C:63:D3:9B:AE:10:83:A3:EB:2D:B3:18:FF:1B:C8:F6:BF:C6:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF9CF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dc6d8c5c-ed25-4eb5-b722-edbe0b6e326d/bc2d12391daa96e940344d2b02d15c0d8ea11aa8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dc6d8c5c-ed25-4eb5-b722-edbe0b6e326d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 19:59:44 +0000
Certificate not after:    Sun 22 Sep 2024 19:45:56 +0000
Subordinate resources:    AS: 64119
                          IP: 179.0.30.0/24
                          IP: 2801:14:c000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15703280 (0xef9cf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 19:59:44 2023 GMT
            Not After : Sep 22 19:45:56 2024 GMT
        Subject: CN=bc2d12391daa96e940344d2b02d15c0d8ea11aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:7b:58:87:7a:bb:d8:36:11:aa:fa:93:88:9e:
                    28:e3:cf:fe:a1:2f:e7:c4:70:5e:99:f6:79:5a:fd:
                    75:91:5f:dd:31:9e:ae:80:89:f6:a1:60:21:0b:0f:
                    b0:5d:6b:61:c3:72:77:55:69:9e:d0:98:ce:54:3b:
                    dc:f3:0d:f0:9a:c2:ff:fb:20:f0:22:f7:66:1c:93:
                    72:33:a1:e7:83:1e:d3:ba:fb:ec:61:6e:63:a7:0f:
                    df:54:35:6c:cf:01:fc:34:5e:bd:e2:33:7f:09:ba:
                    32:cb:a7:f8:8a:43:89:78:b6:9d:13:93:3e:9c:94:
                    39:66:ca:0e:7c:3f:9b:02:00:ba:e9:e1:5b:d7:b1:
                    bf:b0:9d:1e:74:6f:80:67:16:ad:29:41:21:bf:05:
                    fa:73:f5:c1:07:13:58:a4:41:89:56:f7:36:17:5d:
                    50:6f:70:74:22:b1:79:11:21:73:59:06:02:f3:89:
                    a6:97:08:c7:a8:a5:9c:a6:90:f4:df:7b:12:f0:c9:
                    6f:3b:0f:33:0f:de:f8:ff:fb:f8:33:7e:7d:41:5f:
                    f8:b5:5e:3d:20:51:54:bd:f8:ca:39:80:a5:5c:4f:
                    50:59:e5:67:0a:cb:f3:28:e1:0f:a7:b5:31:f8:7b:
                    ff:68:2c:f8:43:df:cd:61:f7:f5:a1:4d:f1:c2:4c:
                    09:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:5C:63:D3:9B:AE:10:83:A3:EB:2D:B3:18:FF:1B:C8:F6:BF:C6:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dc6d8c5c-ed25-4eb5-b722-edbe0b6e326d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dc6d8c5c-ed25-4eb5-b722-edbe0b6e326d/bc2d12391daa96e940344d2b02d15c0d8ea11aa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.30.0/24
                IPv6:
                  2801:14:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64119

    Signature Algorithm: sha256WithRSAEncryption
         66:24:80:97:e0:67:1e:c8:b7:e4:1e:1e:68:dd:fd:5d:76:9c:
         fe:cd:a3:fb:2c:87:7d:6e:95:d8:8d:0c:ae:ed:50:11:73:ce:
         9b:e4:b5:03:32:b8:f9:68:65:3e:a3:66:70:bf:13:c5:6e:c2:
         3c:c0:78:12:43:37:b6:72:de:dc:c2:e8:02:49:9c:cd:5d:b9:
         87:2a:b2:9d:d6:b8:27:d4:09:81:c4:c0:e0:dc:48:3f:fe:54:
         a8:cb:d4:d0:83:50:7e:9d:42:6d:47:45:ea:23:67:62:aa:16:
         99:e5:12:27:8d:a7:27:c3:84:41:2e:94:60:bd:9e:03:bf:5d:
         5f:45:57:05:a8:06:fd:ab:c9:49:8a:bb:e5:03:e2:e0:71:15:
         6c:f0:bd:9c:a2:69:a0:3b:1c:7e:f4:43:08:b3:a8:1f:02:2e:
         45:db:7b:c0:70:80:bb:74:05:65:74:dc:6f:a6:04:c3:a4:eb:
         26:84:43:31:b0:34:0c:9d:1a:84:27:27:93:d8:60:ce:04:f1:
         72:6e:07:53:df:66:23:00:d3:7f:1b:cf:27:0e:26:e6:2a:c0:
         80:66:c5:13:42:e7:82:f5:23:c1:b7:9b:28:e5:2d:6b:ce:08:
         20:e5:6c:93:d6:38:64:a4:5a:ae:7a:01:fa:ea:db:fc:69:7e:
         72:cd:77:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----