Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfe81163d8729c1fcf228b3bdd68cdcaf70965db.cer
File:                     cfe81163d8729c1fcf228b3bdd68cdcaf70965db.cer (raw, json)
Hash identifier:          rq6ZleBcWSTX79pYfPc6XkzoSsNgka3uHY3Ly3jOmkU=
Subject key identifier:   BF:3C:BD:02:AB:12:3C:20:EA:B6:C0:64:CA:8C:B9:5B:B3:AB:C1:4F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAEC12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1cf3e4a5-a6be-4918-8941-ba3019ce888a/cfe81163d8729c1fcf228b3bdd68cdcaf70965db.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1cf3e4a5-a6be-4918-8941-ba3019ce888a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 16:08:48 +0000
Certificate not after:    Fri 26 Apr 2024 23:04:39 +0000
Subordinate resources:    IP: 192.135.95.0/24
                          IP: 2801:10:f000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15395858 (0xeaec12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 23 16:08:48 2023 GMT
            Not After : Apr 26 23:04:39 2024 GMT
        Subject: CN=cfe81163d8729c1fcf228b3bdd68cdcaf70965db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:4a:35:da:fc:a7:11:4a:1a:7f:a7:8b:9a:fd:
                    ae:85:34:b0:64:a1:26:e7:0e:07:27:59:6d:75:57:
                    b7:2c:36:6d:66:62:3c:f9:c4:e3:73:8e:3f:ac:ca:
                    75:f5:0c:f8:79:69:03:89:36:bb:4b:6d:7b:6b:54:
                    ea:67:4f:44:8b:8c:fe:20:71:fd:39:10:e4:d0:7c:
                    a7:5d:e5:a4:7d:8e:ac:a5:5f:3e:76:b4:7e:59:f3:
                    e7:62:dd:d7:9c:02:5d:8f:e1:d4:6e:29:78:e2:6b:
                    1c:18:45:fd:94:f0:e2:ad:10:83:a4:a0:51:5f:3b:
                    39:6c:f4:b4:c1:8d:c5:a3:1d:77:c4:ce:dd:ce:74:
                    44:fe:3b:0d:2a:e2:39:ea:99:8a:37:6f:cc:77:c0:
                    a3:86:9c:65:da:dc:32:a1:ad:04:bd:d9:09:9e:70:
                    b5:10:89:8f:af:37:46:df:53:c5:ee:c8:54:f0:73:
                    0a:55:42:eb:97:0c:d0:a4:bc:9f:9b:61:81:b4:62:
                    4f:4f:c1:31:0c:af:76:d7:71:fe:21:6f:72:b3:4d:
                    37:c6:1c:88:33:cf:cc:3d:43:66:8f:f6:a6:37:2f:
                    d3:76:db:d9:98:6f:fd:92:77:b2:09:63:47:90:f6:
                    41:bf:e0:8b:83:ff:18:a5:6f:99:9b:47:58:e7:91:
                    1c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:3C:BD:02:AB:12:3C:20:EA:B6:C0:64:CA:8C:B9:5B:B3:AB:C1:4F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1cf3e4a5-a6be-4918-8941-ba3019ce888a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1cf3e4a5-a6be-4918-8941-ba3019ce888a/cfe81163d8729c1fcf228b3bdd68cdcaf70965db.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.135.95.0/24
                IPv6:
                  2801:10:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:19:e7:8e:7d:3c:b3:88:79:55:a3:e2:75:f9:99:9f:a8:5e:
         13:f4:87:41:20:65:cd:20:1f:af:05:55:84:b9:8b:75:b4:28:
         8a:79:41:f3:fb:df:d5:62:b0:db:f3:c5:80:d6:6d:27:20:34:
         a6:00:d5:31:97:62:68:9e:2f:52:f1:a4:d4:46:c1:a2:80:76:
         1e:b1:b2:06:77:e9:34:08:8e:50:7e:61:68:a8:ea:7e:6e:ea:
         57:a7:e2:63:93:6b:ef:7a:06:f5:c5:63:3f:d3:2c:87:67:db:
         be:6e:07:03:c0:36:ce:69:7c:03:91:fe:f1:c2:8d:4f:3b:82:
         fc:0a:0c:3a:3a:2e:28:06:16:7b:9e:ab:cc:02:5e:62:00:9e:
         03:b2:0f:4d:95:b6:eb:24:04:2e:6a:23:dc:85:8e:85:0e:75:
         eb:07:40:3a:1c:cd:1b:73:ce:b5:db:56:1a:6f:a8:2f:2e:6a:
         10:3e:21:4e:2f:35:eb:36:2c:da:0d:3e:2e:3f:be:f3:cf:7f:
         a7:db:07:43:5b:82:61:63:2c:4e:73:0e:c9:32:40:93:43:e3:
         5a:c1:d6:2d:5f:8f:de:ca:be:38:94:7d:e1:84:82:6e:f4:61:
         5a:63:f7:fd:7b:4d:89:5b:8d:23:43:5b:76:07:a6:1a:ff:5b:
         2c:5e:e0:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----