Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce2ec1d65c0f62a566f707c79c519dade4d5fff8.cer
File:                     ce2ec1d65c0f62a566f707c79c519dade4d5fff8.cer (raw, json)
Hash identifier:          zhFzzdxr2MeY7oTeR9NBirCD5iFE55NUEvJWWuzxhH8=
Subject key identifier:   7D:FD:4A:BB:12:B0:68:CC:E0:6D:92:77:39:6A:37:1F:D2:40:EE:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBC0AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/716aa62b-d1d7-4dbc-9e57-b7b877a8fd1c/ce2ec1d65c0f62a566f707c79c519dade4d5fff8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/716aa62b-d1d7-4dbc-9e57-b7b877a8fd1c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 11:09:04 +0000
Certificate not after:    Thu 23 Jan 2025 14:40:25 +0000
Subordinate resources:    AS: 263746
                          IP: 138.59.172.0/22
                          IP: 2803:7f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16498862 (0xfbc0ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  3 11:09:04 2023 GMT
            Not After : Jan 23 14:40:25 2025 GMT
        Subject: CN=ce2ec1d65c0f62a566f707c79c519dade4d5fff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:5e:78:6e:87:c4:4f:76:e4:e5:5a:fb:62:71:
                    a3:b3:a5:6c:3d:cf:45:9c:ad:98:83:45:c7:6e:a1:
                    08:e8:53:aa:af:b5:1f:4e:09:62:9d:b5:07:a3:ad:
                    86:12:b3:38:f7:23:2a:df:b5:df:7b:e4:09:65:eb:
                    0b:41:f2:4f:48:1a:5d:54:2f:f1:fa:dd:11:40:36:
                    f9:44:de:90:33:4b:65:22:77:9b:f7:e9:49:ed:54:
                    2a:48:d7:27:11:f7:5b:2e:23:b8:5e:80:5f:3d:26:
                    57:dd:82:6e:7c:dd:ea:c8:ba:5e:61:77:26:ec:8d:
                    2e:5e:b4:ba:61:33:26:d2:75:bb:86:14:63:1f:af:
                    a1:4c:5b:51:e2:1c:c5:eb:83:7b:3f:07:04:68:22:
                    36:3a:45:0f:ef:95:6a:8a:ef:0f:c2:ec:d1:0d:2c:
                    2c:4d:2b:19:b5:d7:74:a9:f1:64:ba:45:3b:77:bd:
                    ab:7c:fa:34:50:ba:f2:41:02:e8:65:5d:5b:90:92:
                    78:53:cc:b0:06:cf:fc:c8:66:18:a1:84:38:99:c9:
                    6a:e1:0e:c9:b2:1e:f6:ad:33:2d:f2:4e:ad:21:16:
                    93:26:ad:ca:9c:eb:8e:d5:11:b5:f6:aa:02:5f:88:
                    0e:2a:53:92:e8:71:3a:89:d3:db:8a:09:80:8e:9d:
                    a1:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FD:4A:BB:12:B0:68:CC:E0:6D:92:77:39:6A:37:1F:D2:40:EE:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/716aa62b-d1d7-4dbc-9e57-b7b877a8fd1c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/716aa62b-d1d7-4dbc-9e57-b7b877a8fd1c/ce2ec1d65c0f62a566f707c79c519dade4d5fff8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.172.0/22
                IPv6:
                  2803:7f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263746

    Signature Algorithm: sha256WithRSAEncryption
         29:6a:5c:10:09:a8:5c:7f:9c:d0:84:40:cb:9c:9b:6e:bd:17:
         a1:73:18:06:0f:c0:6b:c9:a4:14:f7:a3:9b:75:c2:1f:c3:3a:
         7d:a2:bb:6e:82:c3:5e:2b:bb:45:e4:bf:62:5c:e0:36:de:6d:
         bf:cf:6f:a9:79:b6:39:ec:ea:06:f4:59:01:30:95:78:b5:88:
         a2:17:80:94:ef:76:52:64:6d:f7:96:83:c2:11:5d:e7:0a:b5:
         f7:c3:8b:e8:4b:f1:a7:75:0a:51:3a:ed:a3:36:a9:fc:d8:5a:
         20:fa:ac:b6:be:28:d2:65:38:c1:0e:c0:df:0e:41:93:00:c4:
         d2:8e:3b:35:47:ac:c7:08:b4:fa:4f:f9:57:03:0c:f7:36:cc:
         05:00:ee:21:98:12:59:13:25:28:76:8b:b5:82:40:95:2d:a0:
         91:71:2c:a6:da:42:5f:26:69:53:e2:69:7b:42:8f:40:b9:d6:
         5e:7e:9e:1b:b7:d9:39:67:49:55:c9:b2:c1:a2:f4:71:4b:58:
         75:1e:ba:65:fc:7e:24:3f:73:7d:4c:49:08:4e:6b:e6:77:ab:
         a2:0c:8a:64:ee:64:1f:bf:5d:00:e2:1d:fe:c6:af:14:78:db:
         c3:54:d6:37:f3:15:2e:e5:aa:3e:1d:c4:ea:8e:dd:56:18:4e:
         df:bb:60:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----