Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d04388ba1f7a26922d8cf5886a070b15c88650ce.cer
File:                     d04388ba1f7a26922d8cf5886a070b15c88650ce.cer (raw, json)
Hash identifier:          +Sj2FQXxI5p810buqgkekJGnCfR0grgJobVT5+zW8Pw=
Subject key identifier:   F0:55:8E:8F:A3:DC:A2:81:4B:24:4E:C4:8B:37:D8:75:2D:85:AA:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEF28E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c967288-3dbd-4582-9c6a-ef02718bd9c3/d04388ba1f7a26922d8cf5886a070b15c88650ce.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c967288-3dbd-4582-9c6a-ef02718bd9c3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 18:09:33 +0000
Certificate not after:    Thu 06 Feb 2025 14:00:00 +0000
Subordinate resources:    AS: 28576
                          IP: 187.73.128.0/20
                          IP: 189.38.16.0/20
                          IP: 200.220.144.0/20
                          IP: 2804:3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15659662 (0xeef28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 18:09:33 2023 GMT
            Not After : Feb  6 14:00:00 2025 GMT
        Subject: CN=d04388ba1f7a26922d8cf5886a070b15c88650ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e8:44:78:5b:a4:cd:02:aa:0c:ca:ea:0f:53:
                    bd:d5:f7:36:20:00:c5:c6:cf:0f:2e:3f:a6:0a:d7:
                    42:76:4c:c2:63:8a:df:79:e7:f2:82:6f:ef:02:d1:
                    a7:42:01:7f:54:4a:e0:7b:17:b7:37:df:e4:bb:6d:
                    f7:78:a8:13:bc:0a:55:c6:0a:21:23:88:53:85:90:
                    fe:f8:c3:dc:28:4a:40:ad:46:ba:e7:e6:64:e0:4a:
                    7f:12:62:e7:9e:1b:59:9e:a7:ef:d6:ac:79:74:fd:
                    84:f7:7a:ed:79:6a:16:d8:a2:0d:21:14:e3:ad:54:
                    01:3f:5e:7a:fb:50:45:3a:f0:7a:72:b5:8e:84:a8:
                    51:cf:7e:51:c6:d8:cf:a1:ff:ad:c1:92:d9:d7:d5:
                    c4:98:59:59:05:5c:aa:25:0d:74:85:32:16:1d:a9:
                    b4:3c:c2:2e:60:9d:04:a5:ac:b7:13:e2:68:a8:fb:
                    9f:93:a3:cd:ee:44:01:48:69:48:ec:92:65:d2:f2:
                    fe:ed:9c:8d:35:f2:32:40:17:3b:64:1c:44:8e:8c:
                    37:c5:6f:eb:6c:a7:02:6e:e7:ef:e4:9d:25:d8:a0:
                    db:bf:85:cd:2c:59:b3:96:61:95:a9:76:ab:93:2e:
                    6d:e0:f0:63:c5:ac:72:fd:85:6a:b8:6a:4d:21:af:
                    24:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:55:8E:8F:A3:DC:A2:81:4B:24:4E:C4:8B:37:D8:75:2D:85:AA:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c967288-3dbd-4582-9c6a-ef02718bd9c3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c967288-3dbd-4582-9c6a-ef02718bd9c3/d04388ba1f7a26922d8cf5886a070b15c88650ce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.73.128.0/20
                  189.38.16.0/20
                  200.220.144.0/20
                IPv6:
                  2804:3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28576

    Signature Algorithm: sha256WithRSAEncryption
         6f:e7:9e:1d:99:a8:b3:0a:14:f0:db:f7:78:ab:12:9d:11:25:
         96:38:44:c5:dd:80:80:de:ed:37:01:9a:24:fa:bc:c7:b2:81:
         a1:c9:8a:0f:2d:77:ed:7c:09:8a:e4:e9:6f:59:ce:e0:f5:e9:
         99:62:e4:ac:33:ac:e4:80:69:0e:2e:76:a6:5c:04:84:ab:b2:
         87:0e:fd:3d:bb:78:2c:c3:55:f2:02:26:21:8e:7c:44:86:a4:
         d2:7d:d8:41:38:c4:bd:4b:3c:15:8e:cc:a8:20:15:08:dc:f3:
         85:a7:93:ce:e0:4f:21:a1:a7:c9:af:5d:11:c9:e2:e3:84:38:
         3e:7f:25:3c:8c:8d:bc:5e:fe:5e:9c:80:10:4e:25:a7:a5:b5:
         6c:47:79:06:20:ca:bb:1e:5c:db:bf:ea:0a:ee:c5:d4:b3:33:
         31:75:6f:f9:51:d4:69:a8:73:f4:ca:34:59:1f:4c:21:b4:19:
         be:0c:c2:7a:ac:9d:27:1d:4a:40:50:bb:e0:5e:fb:c7:f5:3d:
         65:9e:90:96:4a:77:71:20:58:5a:e1:9e:aa:32:78:fb:1f:12:
         d4:f0:67:6c:9b:ba:9e:16:31:28:f9:28:5e:d2:82:bd:2f:d8:
         28:49:9f:d7:a2:c3:4f:79:5b:b0:6f:f7:13:31:bb:d0:eb:3a:
         0a:d7:f5:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----