Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3e7a8456c4212e5cfcc686a99a604128f90b01c.cer
File:                     c3e7a8456c4212e5cfcc686a99a604128f90b01c.cer (raw, json)
Hash identifier:          xCq0M6Iarh9b5vb9+qYLLN6KrNrCgtF5wR7U8/NfeUM=
Subject key identifier:   59:67:91:D0:AA:61:D6:88:D3:6B:2D:3D:A7:ED:84:95:93:BC:EC:3C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5E8A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b1b9ac7d-b1f8-4cc7-a57d-f317d8b17f2e/c3e7a8456c4212e5cfcc686a99a604128f90b01c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b1b9ac7d-b1f8-4cc7-a57d-f317d8b17f2e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 14:56:49 +0000
Certificate not after:    Sun 10 Nov 2024 20:42:49 +0000
Subordinate resources:    AS: 265642
                          IP: 170.247.164.0/22
                          IP: 179.63.224.0 -- 179.63.235.255
                          IP: 190.4.80.0/21
                          IP: 2803:7b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15067302 (0xe5e8a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 14:56:49 2023 GMT
            Not After : Nov 10 20:42:49 2024 GMT
        Subject: CN=c3e7a8456c4212e5cfcc686a99a604128f90b01c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:35:7e:25:70:23:1a:c1:83:44:45:37:9c:85:
                    2a:2c:92:a3:9c:8d:8a:7e:5d:a1:48:ef:db:68:26:
                    cf:40:20:4d:0e:8b:77:f6:c6:98:d0:a6:3e:78:3e:
                    1d:fb:6b:2b:4f:2d:c8:42:bd:f7:bc:0f:b9:2f:eb:
                    d9:de:48:72:97:c3:80:6e:1f:f3:73:a9:c7:c9:16:
                    b9:3e:ff:f7:f0:ab:dd:5e:4a:9d:6f:01:35:d9:a2:
                    c9:31:9a:de:9d:ba:63:b7:d0:25:61:e8:85:b2:b2:
                    f2:fa:cd:e1:04:b9:7d:c9:79:7c:b6:24:e2:b4:2d:
                    2e:e1:47:a1:54:05:f8:bc:e9:df:a3:2d:3a:27:75:
                    ad:2a:d4:0c:71:20:87:0d:2e:96:a7:ec:0d:bd:b2:
                    a0:67:d4:6e:55:13:b5:b6:a1:c3:dd:71:3e:02:73:
                    40:bd:f7:b4:0d:06:ea:d7:6c:1d:bb:58:38:a0:e0:
                    77:75:44:78:f8:fb:89:97:8d:a1:c4:35:11:8c:c8:
                    a1:c8:04:43:3c:0b:e3:3e:98:da:28:73:da:45:fe:
                    81:17:68:a8:bd:08:04:b7:6e:8d:3d:30:2b:ab:29:
                    86:1c:c8:bb:84:00:76:26:7f:bb:05:aa:17:6c:ac:
                    ce:f7:ce:5b:ae:ae:1d:4f:aa:a7:88:49:fe:e3:21:
                    e4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:67:91:D0:AA:61:D6:88:D3:6B:2D:3D:A7:ED:84:95:93:BC:EC:3C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b1b9ac7d-b1f8-4cc7-a57d-f317d8b17f2e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b1b9ac7d-b1f8-4cc7-a57d-f317d8b17f2e/c3e7a8456c4212e5cfcc686a99a604128f90b01c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.247.164.0/22
                  179.63.224.0-179.63.235.255
                  190.4.80.0/21
                IPv6:
                  2803:7b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265642

    Signature Algorithm: sha256WithRSAEncryption
         b8:29:88:e2:3e:18:5e:79:45:aa:6a:13:66:66:4f:6d:10:73:
         f8:9b:ab:1f:6a:0f:35:e8:78:74:9b:bf:2e:13:24:a2:60:28:
         4d:42:82:da:3e:1d:aa:63:a0:42:30:57:70:60:fc:a1:09:87:
         45:da:b7:9a:f2:58:77:6a:9c:d2:92:eb:28:98:e9:04:c4:91:
         6d:46:24:a4:00:6a:0a:68:05:7b:ba:2c:ed:9b:64:61:44:49:
         01:fb:e6:0e:64:67:c2:5b:23:1c:8a:25:19:4f:d4:8c:2e:c8:
         26:d8:0a:b0:57:26:a9:69:f7:d2:f4:b9:24:b6:88:ec:79:3c:
         10:c7:b5:27:07:0b:ef:4f:3a:69:e3:fb:1e:bb:f1:a2:90:a9:
         e1:14:28:1a:4c:28:81:2f:8f:56:9a:30:35:b3:40:8a:e4:ee:
         45:e5:7d:4f:c9:fc:06:2a:61:f6:01:fc:a4:47:cd:c2:26:4b:
         f3:21:8c:db:fa:48:47:5b:0e:81:28:37:4d:e7:31:9d:11:11:
         48:de:b7:3f:de:de:5d:3b:00:89:95:0d:34:c7:4b:f7:5f:24:
         00:ef:9c:c5:85:17:cc:cc:38:71:94:13:01:e8:74:0e:eb:25:
         0e:5b:2b:07:be:a2:ee:8e:40:31:fa:64:34:e9:e2:a0:3a:e8:
         4d:8c:95:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----