Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce130f5228c456e6166d44a338f7c8ee74b3f7bc.cer
File:                     ce130f5228c456e6166d44a338f7c8ee74b3f7bc.cer (raw, json)
Hash identifier:          WO50VVehrInTWDtGUS7szFwFLqpxEWSvK8S+R3MUb2E=
Subject key identifier:   4D:51:2E:94:22:32:BC:DA:04:11:0C:62:DB:A2:4C:1E:85:47:EB:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E560FC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/ce130f5228c456e6166d44a338f7c8ee74b3f7bc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 12:57:19 +0000
Certificate not after:    Sun 29 Sep 2024 21:36:46 +0000
Subordinate resources:    IP: 200.123.216.0/21
                          IP: 2803:c500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15032572 (0xe560fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 12:57:19 2023 GMT
            Not After : Sep 29 21:36:46 2024 GMT
        Subject: CN=ce130f5228c456e6166d44a338f7c8ee74b3f7bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:66:1d:da:0a:02:ad:1b:97:43:54:51:ce:3e:
                    93:1b:21:fc:dd:c6:25:e3:a2:71:e2:0d:38:28:cd:
                    60:92:4e:79:2e:a5:dd:ec:0a:60:1f:09:67:3b:12:
                    9a:94:f0:85:c5:93:c0:14:f7:90:06:cb:a7:3b:dc:
                    ef:9c:e8:65:17:d7:bc:13:d0:71:53:65:01:04:2b:
                    63:8b:aa:9b:ab:f8:84:91:b8:76:5e:39:53:71:98:
                    1d:47:ba:4b:8d:4e:d8:ef:31:ab:ff:34:d6:ae:c9:
                    62:82:c2:c5:17:22:bd:4b:5d:ce:f5:6a:a8:d1:94:
                    fd:cb:83:06:97:65:08:13:fd:b6:22:e7:a7:16:aa:
                    aa:c5:de:37:e7:a3:44:12:24:af:4f:2b:3e:37:c3:
                    0b:47:af:95:d5:d5:4c:a6:80:1f:40:75:04:9b:32:
                    ef:79:95:ab:27:7f:0e:3b:f1:ce:e2:54:02:b3:8a:
                    e1:67:31:d9:77:9e:f5:b0:1c:e6:6c:1f:36:6a:bb:
                    56:a2:2f:74:4f:69:7a:43:f4:5a:ce:e4:69:70:62:
                    57:54:9d:c7:f5:a4:4f:53:72:4e:b3:16:f5:0a:2d:
                    a9:ba:00:0e:b2:a5:16:ae:d7:63:5d:d6:c5:92:49:
                    4f:6c:6e:c6:52:00:40:cb:c6:11:d0:81:d7:34:3c:
                    0f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:51:2E:94:22:32:BC:DA:04:11:0C:62:DB:A2:4C:1E:85:47:EB:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6f874020-bb3a-496f-bee6-74488e81182a/ce130f5228c456e6166d44a338f7c8ee74b3f7bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.216.0/21
                IPv6:
                  2803:c500::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:37:5a:de:df:c5:02:eb:a3:a7:5b:dc:8a:2e:3a:b7:73:fb:
         1d:54:0e:0e:c9:97:c2:2c:da:c4:39:66:95:49:32:de:12:59:
         d7:19:ed:93:a9:f0:16:29:7b:98:88:91:bb:45:f0:4f:d5:0f:
         3f:84:44:74:13:2e:b6:54:ba:e0:4e:fd:5a:bf:f7:69:1d:73:
         ae:cc:69:2b:c3:d7:a2:9a:be:d2:6c:de:a6:11:d7:a4:10:21:
         2d:dc:d2:96:c1:ac:11:3c:60:9e:05:3d:71:fb:b9:03:91:a3:
         da:17:1a:c1:f7:f3:27:e6:5b:1a:e6:77:ba:49:42:e8:75:f6:
         3a:6b:33:2c:cc:9d:27:8c:9c:5c:a5:5c:1c:0b:a6:d8:d8:d7:
         37:25:d0:31:cf:4c:c1:e0:51:ab:87:c1:85:ca:3e:22:33:8b:
         34:9a:5f:a2:1e:c2:94:1f:bb:39:b3:ac:46:d7:5b:22:f8:0b:
         9c:19:f6:c8:e5:8d:18:bc:aa:83:05:5d:97:66:88:bb:70:58:
         a8:37:a2:de:83:8f:bd:94:3b:e9:52:fe:06:58:ed:b5:2d:10:
         22:b9:df:97:54:42:a4:9d:60:6c:44:3e:a8:0b:48:6b:79:fc:
         c5:17:49:cd:63:eb:84:bd:a4:f5:88:35:4c:e2:9c:83:1d:c9:
         8a:3f:7a:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----