Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce8bf9c9db709881d44a6d033f7448c4879c9b72.cer
File:                     ce8bf9c9db709881d44a6d033f7448c4879c9b72.cer (raw, json)
Hash identifier:          l+YMBoV2D47ycGlJdu5JBVfj+FVbSto5OT6d5JPSZjA=
Subject key identifier:   4A:93:6B:F1:37:78:18:F3:73:A9:01:57:B4:1B:B8:D0:D9:8F:E5:4E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F03CBE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0bb3c45e-139a-4cda-aa78-a2c73d4ca9db/ce8bf9c9db709881d44a6d033f7448c4879c9b72.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0bb3c45e-139a-4cda-aa78-a2c73d4ca9db/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 05:18:56 +0000
Certificate not after:    Thu 29 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 263189
                          IP: 179.43.96.0/22
                          IP: 2803:4480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15744190 (0xf03cbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 05:18:56 2023 GMT
            Not After : Aug 29 05:00:00 2024 GMT
        Subject: CN=ce8bf9c9db709881d44a6d033f7448c4879c9b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:54:27:a5:c2:93:ab:fa:14:4b:38:f4:7a:2f:
                    14:33:9b:c6:82:fc:6b:f7:03:d8:26:5b:a2:0f:35:
                    86:de:cf:b7:5d:15:cd:8f:aa:b2:b4:e8:55:58:60:
                    61:a9:fa:78:f1:15:5f:c2:da:95:55:49:91:a5:f9:
                    df:e4:2b:01:aa:40:ca:ac:c1:bf:2e:28:03:72:0f:
                    a0:aa:a0:5f:ea:70:00:f5:8b:02:54:6e:30:84:13:
                    68:54:9f:71:b9:14:3c:f3:b3:fa:3c:f8:54:48:51:
                    40:b2:85:64:e0:ab:26:44:e6:e4:59:82:34:64:75:
                    9e:4e:40:77:32:2c:67:36:f6:f2:f2:f1:4b:89:1f:
                    11:5d:a8:8d:8e:13:86:f5:9c:4b:b8:7a:65:98:56:
                    ee:73:e1:d0:59:33:f2:14:93:ae:3d:9c:a6:27:82:
                    ec:b7:07:1c:a5:37:6b:52:8f:99:3f:37:3a:e4:b7:
                    93:f1:46:75:ff:4f:70:78:34:c5:9c:a3:85:23:7d:
                    2b:a4:06:22:cb:28:ce:f4:f2:6f:9e:2a:8c:07:15:
                    55:54:93:a7:d7:66:4d:21:29:b2:09:57:43:f7:a3:
                    09:88:99:2b:7d:6c:a8:39:08:2d:51:ba:77:39:1b:
                    49:ba:08:ee:3e:fa:7b:be:0e:e1:4e:b8:ea:5d:a1:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:93:6B:F1:37:78:18:F3:73:A9:01:57:B4:1B:B8:D0:D9:8F:E5:4E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0bb3c45e-139a-4cda-aa78-a2c73d4ca9db/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0bb3c45e-139a-4cda-aa78-a2c73d4ca9db/ce8bf9c9db709881d44a6d033f7448c4879c9b72.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.43.96.0/22
                IPv6:
                  2803:4480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263189

    Signature Algorithm: sha256WithRSAEncryption
         52:19:58:65:dc:fd:49:6b:ef:40:8f:4f:ea:80:72:ed:e8:28:
         a0:a6:46:8a:55:b8:e5:1e:94:69:44:ca:dc:77:b6:0c:18:98:
         40:10:07:77:13:1a:98:46:a7:6b:7a:77:8f:21:2e:c4:42:83:
         49:83:94:95:89:ce:7e:6c:7f:6a:21:6c:1c:6f:6e:05:24:29:
         bb:ad:b5:15:ad:2a:54:27:ba:fa:09:9b:bc:b3:02:65:22:33:
         88:84:47:f8:41:14:ae:ae:78:96:c8:7a:11:9a:02:fe:31:3a:
         34:8a:d6:30:cd:48:ff:f3:6f:5b:55:0a:e5:fe:5d:ae:53:f1:
         a9:1a:f0:e2:fd:bd:d0:8a:4d:05:41:f6:a0:35:50:46:14:19:
         bf:28:5c:92:58:b8:00:01:10:bf:90:e5:ed:32:16:95:17:04:
         de:9d:fb:47:52:db:6e:42:7d:37:38:a6:5f:51:b1:83:b9:5d:
         4a:ed:f7:16:89:7f:c7:29:b5:ea:8a:f0:50:af:26:e7:ab:8c:
         87:3e:52:5e:42:66:3c:47:06:65:6a:9e:ba:35:38:eb:35:71:
         62:fd:fc:9e:b1:45:96:8e:1f:8b:31:29:bd:29:b5:4f:bb:8c:
         74:80:57:ed:c6:70:02:30:6f:5f:25:b1:80:f9:28:bf:6d:98:
         38:cd:8f:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----