Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8297ae514883b076973b30712234344f7ca69e5.cer
File:                     c8297ae514883b076973b30712234344f7ca69e5.cer (raw, json)
Hash identifier:          5umxcff1EaWs8drXqSu/uqEHoCPUsuB3upTXa1YRSxw=
Subject key identifier:   50:8A:1A:C9:CA:F6:21:D2:F8:1B:B5:64:DF:E9:C9:E9:D4:AB:5A:FF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFC94F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b3a34ee9-ec97-4798-9862-65b78efd714a/c8297ae514883b076973b30712234344f7ca69e5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b3a34ee9-ec97-4798-9862-65b78efd714a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 14:14:59 +0000
Certificate not after:    Mon 02 Dec 2024 15:10:59 +0000
Subordinate resources:    AS: 263727
                          IP: 201.131.51.0/24
                          IP: 2801:14:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16763215 (0xffc94f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 31 14:14:59 2023 GMT
            Not After : Dec  2 15:10:59 2024 GMT
        Subject: CN=c8297ae514883b076973b30712234344f7ca69e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:aa:38:a9:2a:0c:56:58:54:b5:82:b7:09:8a:
                    08:a6:ad:02:79:ec:d3:68:d7:4d:7b:25:03:60:ff:
                    cc:d5:81:2c:72:be:0b:be:f0:f1:75:8c:1c:de:e6:
                    51:ce:30:4d:54:d9:f1:44:ef:60:15:08:07:b1:d0:
                    10:18:8f:b2:51:08:ec:57:62:9d:6a:22:08:15:5e:
                    52:09:b0:7c:cc:42:f7:00:c3:ac:c8:f1:89:07:1c:
                    f9:34:d2:70:88:6e:6e:0f:76:c5:04:6a:67:00:87:
                    9e:6e:c9:88:a1:0f:6e:04:30:24:f1:88:b5:66:65:
                    c3:73:63:5b:05:a5:38:33:c6:1f:08:2e:c8:78:e5:
                    74:c4:59:4c:4a:36:ff:18:b1:54:bc:71:9a:d6:e2:
                    c1:c9:b2:dd:83:4e:be:67:3f:f0:68:2f:f9:d9:c7:
                    bb:7f:e1:af:b7:a4:d1:f6:ff:06:9e:cf:84:b5:ae:
                    2a:04:3a:fc:65:30:1e:2e:57:00:24:dd:5f:05:ed:
                    dd:84:76:19:8b:82:29:97:4b:87:37:7f:b6:00:ad:
                    2f:6d:9c:b0:29:9c:c7:13:86:7e:f2:78:f8:48:86:
                    17:c9:5f:53:68:91:50:ea:40:72:23:5c:16:1a:f7:
                    cf:77:71:7e:3e:02:38:25:d9:d8:7e:c8:b7:68:7e:
                    c0:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:8A:1A:C9:CA:F6:21:D2:F8:1B:B5:64:DF:E9:C9:E9:D4:AB:5A:FF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b3a34ee9-ec97-4798-9862-65b78efd714a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b3a34ee9-ec97-4798-9862-65b78efd714a/c8297ae514883b076973b30712234344f7ca69e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.51.0/24
                IPv6:
                  2801:14:e000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263727

    Signature Algorithm: sha256WithRSAEncryption
         0c:f3:4a:aa:ef:c9:19:fc:37:00:0e:0a:ed:e1:4d:87:e1:81:
         e7:98:5f:ed:85:0e:42:b8:d2:34:0c:bb:aa:f4:d3:e8:51:93:
         fd:77:f4:76:f5:5c:c5:aa:be:93:8e:7d:e9:dc:43:75:b1:12:
         4a:e7:fd:fa:80:c1:1d:4b:17:62:a8:02:0f:01:09:e2:f3:46:
         09:02:53:b6:63:59:4a:e3:17:67:1e:3b:6a:fc:f8:a3:b5:2b:
         87:8a:ed:7d:d8:c6:2f:13:1b:7a:f3:7e:55:75:2f:ad:ac:fc:
         63:16:6c:bb:21:ca:66:d3:93:c7:8e:bf:a7:f2:4f:a9:8f:f6:
         85:75:88:d0:f0:18:00:56:8c:f6:c0:d5:13:89:91:a7:2a:78:
         9e:3a:51:2d:4b:a2:0b:98:c0:c6:6f:21:87:ac:8f:d7:8d:ab:
         ad:ee:2c:86:72:ff:66:fb:13:eb:ee:04:64:71:f9:3a:d5:53:
         51:ca:de:49:f7:c7:e9:d1:7c:63:7f:ab:64:aa:a4:93:cf:39:
         5a:e3:8c:5b:2c:ec:55:2e:25:67:e3:97:f0:f1:db:0c:c7:c9:
         47:b1:0b:cf:4f:d7:0d:8b:69:46:89:99:e7:a6:65:8c:44:b9:
         4e:f3:f2:ad:d7:bb:47:56:3d:fe:34:55:7a:41:67:55:53:e5:
         fe:75:ea:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----