Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce2a257ff316bb7d9bfd058087e8e4038ce3e735.cer
File:                     ce2a257ff316bb7d9bfd058087e8e4038ce3e735.cer (raw, json)
Hash identifier:          J9UnUOhNIjh+erX3rE3WD+UsB9PCZyLZEhhze3NNEbk=
Subject key identifier:   99:0E:8F:8D:64:14:16:F4:39:5D:D0:FC:4D:21:7F:10:7E:BA:9B:F0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE6032
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3dcfd598-1de7-4fa5-b63c-70606812d130/ce2a257ff316bb7d9bfd058087e8e4038ce3e735.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3dcfd598-1de7-4fa5-b63c-70606812d130/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 13:31:30 +0000
Certificate not after:    Sat 14 Sep 2024 20:14:37 +0000
Subordinate resources:    AS: 263706
                          IP: 201.131.43.0/24
                          IP: 2801:19:6000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15622194 (0xee6032)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 13:31:30 2023 GMT
            Not After : Sep 14 20:14:37 2024 GMT
        Subject: CN=ce2a257ff316bb7d9bfd058087e8e4038ce3e735
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:30:95:8d:90:a2:30:e4:bf:62:cc:94:31:94:
                    aa:bd:30:d7:65:04:cf:98:a0:57:99:87:8d:92:55:
                    16:13:31:4c:64:3c:ef:41:e7:1f:f5:7d:d6:88:d0:
                    90:6d:f2:64:63:e3:ce:40:7a:53:25:69:5f:24:fe:
                    a2:06:be:7f:d0:77:5c:19:47:67:53:d2:ef:be:1d:
                    77:d2:2d:91:9c:ce:7b:6b:2d:05:10:71:66:4f:50:
                    be:5c:5e:96:8c:5b:f9:87:d8:e8:da:69:42:f5:6c:
                    8c:46:49:75:6e:0e:71:0c:b2:dc:e9:bf:2f:a5:0c:
                    3e:28:bf:f6:67:57:ad:db:0b:92:80:78:b9:af:81:
                    e2:da:89:93:c7:70:1f:b4:d5:09:80:56:bc:e6:14:
                    2d:8c:c4:54:09:49:ae:d5:a5:83:9a:61:90:2d:85:
                    17:d7:8b:4f:ae:1e:92:09:3c:9d:95:31:db:67:5b:
                    6b:01:03:16:0f:f2:31:33:ac:44:c5:bd:32:50:9a:
                    0b:3b:d8:29:1e:e5:fe:60:50:71:2e:22:e2:f8:93:
                    d8:b2:1f:ad:d7:3d:23:0f:9a:0d:21:1a:c9:95:80:
                    04:c1:89:51:a7:7b:09:96:68:55:b4:0b:d3:f9:db:
                    08:96:d9:5f:01:c8:56:53:47:27:3b:a9:c9:b4:01:
                    3c:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:0E:8F:8D:64:14:16:F4:39:5D:D0:FC:4D:21:7F:10:7E:BA:9B:F0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3dcfd598-1de7-4fa5-b63c-70606812d130/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3dcfd598-1de7-4fa5-b63c-70606812d130/ce2a257ff316bb7d9bfd058087e8e4038ce3e735.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.43.0/24
                IPv6:
                  2801:19:6000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263706

    Signature Algorithm: sha256WithRSAEncryption
         3a:a4:d7:17:28:33:ae:1e:2d:de:bd:b5:99:46:a4:63:48:7a:
         6d:79:10:75:c6:68:2d:2c:6a:37:ef:ee:d5:7c:1b:6f:d6:ad:
         02:89:d0:39:24:75:89:f1:d3:e3:97:21:64:44:03:fd:ae:c2:
         e3:57:cc:74:3c:43:e4:f8:f2:0b:41:9f:b6:c5:68:6d:02:40:
         9a:ff:b5:98:8a:84:d1:6d:b4:1f:d4:81:70:da:ea:18:bf:7d:
         9d:17:c6:fb:69:2d:74:b2:23:9b:ed:56:5d:a0:30:4f:92:20:
         6e:aa:c0:6d:f4:0b:c9:b2:81:aa:53:d4:93:9e:3f:7b:b7:ba:
         d2:3c:69:fa:69:5f:2b:f2:8a:9a:39:14:ea:57:87:39:f3:6b:
         b3:c8:f6:63:fa:ab:63:25:a4:6b:07:6b:72:43:3a:2e:0d:92:
         d1:2e:91:a7:63:63:51:22:72:93:34:b9:cc:df:5a:80:36:95:
         a6:79:e2:08:69:89:fb:39:ff:87:f1:37:15:ef:5d:92:70:a5:
         fd:b9:7a:f9:dd:9d:74:a5:79:81:5e:67:7d:ef:6d:a0:34:3c:
         9e:a7:56:06:6c:2b:8e:9a:0a:d6:0b:25:77:82:d2:02:c6:79:
         87:a9:4f:5c:b2:c5:68:87:f1:2f:47:b6:a1:82:99:d8:9e:89:
         b0:4b:48:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----