Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c97b9ab772c8af17300b7ec2506f748594cd8cef.cer
File:                     c97b9ab772c8af17300b7ec2506f748594cd8cef.cer (raw, json)
Hash identifier:          xJM/cPfIiJ1um3Qt2X6ultRHm65xfIjhPDDxGebvrVw=
Subject key identifier:   3B:59:03:CF:51:C6:0F:45:AD:F8:AF:86:CB:0C:0B:59:B0:1F:46:24
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101E12A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/c97b9ab772c8af17300b7ec2506f748594cd8cef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Nov 2023 15:10:56 +0000
Certificate not after:    Sat 21 Jun 2025 22:41:14 +0000
Subordinate resources:    AS: 265800
                          IP: 201.182.108.0/22
                          IP: 2803:b020::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16900394 (0x101e12a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 21 15:10:56 2023 GMT
            Not After : Jun 21 22:41:14 2025 GMT
        Subject: CN=c97b9ab772c8af17300b7ec2506f748594cd8cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:9d:66:44:af:09:20:b2:ea:58:db:ab:13:e7:
                    07:b3:87:56:e8:b4:33:38:27:d7:f2:80:58:cd:af:
                    4b:00:78:95:e2:ee:0d:63:b5:fa:80:59:1c:cb:10:
                    d9:17:e0:cb:e7:f6:d2:b7:9e:5b:0e:d4:e5:45:3d:
                    11:97:b7:5b:49:bd:12:c1:a5:b1:d6:33:08:70:a1:
                    9c:02:d7:22:0f:2c:68:8f:84:39:ca:cc:23:fe:18:
                    94:d0:24:1e:57:b2:e6:ff:6d:8a:a8:ed:93:d6:32:
                    08:6a:e7:ef:14:ee:ca:b8:02:fa:b8:e7:2c:9f:44:
                    b0:7e:4f:58:56:a4:a0:b6:09:23:7a:49:a1:05:5c:
                    02:c3:64:b0:9c:3c:6c:31:9f:17:4b:00:51:ea:be:
                    66:ab:19:69:58:71:63:5f:d0:cf:d1:2c:fb:03:ef:
                    5a:5e:e6:19:43:02:c7:cd:c9:b4:82:a7:d6:93:86:
                    d2:cf:48:df:07:79:b7:31:6c:dd:b9:56:2c:13:7e:
                    67:f1:f0:7e:c6:f0:26:fd:1a:cc:ac:7d:68:da:45:
                    49:a4:51:41:09:7d:59:b6:3a:e0:5f:54:35:67:59:
                    3f:86:09:55:f8:88:a4:76:db:92:1a:f4:aa:6b:bb:
                    94:4f:8f:3f:b0:61:94:79:c9:0c:88:d9:f8:5a:75:
                    be:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:59:03:CF:51:C6:0F:45:AD:F8:AF:86:CB:0C:0B:59:B0:1F:46:24
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2e88ff82-cb4d-4f01-ade9-1d5f0a6965bd/c97b9ab772c8af17300b7ec2506f748594cd8cef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.182.108.0/22
                IPv6:
                  2803:b020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265800

    Signature Algorithm: sha256WithRSAEncryption
         93:e1:0c:8c:28:57:57:00:c0:6d:1c:ea:f9:9e:20:c4:29:b6:
         20:fc:a3:c5:dc:e7:1c:e0:a9:d4:1a:f8:11:9d:e5:a2:bd:1b:
         4f:4d:3d:ac:0b:26:12:e9:e9:47:bd:d1:38:01:fd:33:93:95:
         46:51:04:63:3e:3e:4e:6d:c0:c3:0d:31:59:07:46:30:4a:94:
         e3:9e:a7:51:58:32:22:f1:46:9f:1b:61:3e:fa:53:5a:bd:b7:
         13:c1:aa:79:83:22:5e:59:3c:14:59:4d:aa:78:d3:a4:d4:f2:
         03:23:22:16:b4:5e:c5:dd:ba:9f:4b:58:68:05:5a:7a:da:e1:
         2a:cb:d0:e0:c6:a0:82:b8:00:18:6b:be:d0:6c:47:ab:6b:cd:
         28:f8:05:e2:cc:27:98:f9:c7:7a:6a:5a:09:86:0a:19:12:8d:
         9d:89:93:6e:51:e7:21:e2:67:36:12:16:3b:8c:01:78:ad:8d:
         9d:4b:0a:95:30:0f:f9:c3:61:bb:0f:5e:ea:a7:ef:87:72:b6:
         54:66:e3:a1:b1:ff:6b:87:76:22:5e:5f:ea:e6:ae:66:e6:85:
         97:0b:95:cd:19:7f:01:0c:c1:9b:dd:c3:60:e7:25:83:a7:15:
         a1:90:41:7b:23:c7:11:ef:be:9e:4c:e3:4e:09:00:5f:bd:b6:
         dd:35:6d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----