Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d4917e9090de7c24d951e0efb8d7d891f6d712c4.cer
File:                     d4917e9090de7c24d951e0efb8d7d891f6d712c4.cer (raw, json)
Hash identifier:          7ozipXqWtx3B0xuWKXMPQc24JZ7T8U/ezc1eTwin7FI=
Subject key identifier:   9E:8F:60:E4:B0:FC:F9:1B:55:39:98:E1:17:79:0C:79:03:F4:2D:7D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8AE4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7e753a17-6f62-44db-ade8-bf5a6e5ac419/d4917e9090de7c24d951e0efb8d7d891f6d712c4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7e753a17-6f62-44db-ade8-bf5a6e5ac419/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 17:52:22 +0000
Certificate not after:    Sun 07 Jul 2024 18:57:19 +0000
Subordinate resources:    AS: 264767
                          IP: 168.196.112.0/22
                          IP: 2803:90c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15248973 (0xe8ae4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 17:52:22 2023 GMT
            Not After : Jul  7 18:57:19 2024 GMT
        Subject: CN=d4917e9090de7c24d951e0efb8d7d891f6d712c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:84:c3:6b:3d:87:da:dd:fb:c7:83:bd:8c:f1:
                    7b:38:3b:72:79:bc:09:69:d3:f3:57:ed:2e:96:cd:
                    08:11:4b:71:1d:25:e2:b8:29:93:40:48:aa:68:8a:
                    dd:07:16:f8:ef:86:01:d6:0d:d8:f0:07:9d:45:93:
                    bd:75:0c:c5:e9:2d:97:1e:93:ff:95:ac:75:dd:02:
                    f7:aa:bc:9c:ba:d9:92:4f:95:e5:b8:41:4a:8e:f5:
                    1a:9c:5d:9e:46:eb:c2:87:45:16:3a:f8:d0:23:bd:
                    37:f5:15:0d:26:34:43:62:76:c8:bf:62:52:2a:ba:
                    f5:68:1a:06:4e:72:b0:25:7b:f7:83:81:06:b2:da:
                    da:07:1d:fa:aa:9d:a5:e2:42:97:54:57:4a:bd:da:
                    1d:3a:54:36:5b:60:bd:08:33:64:9e:23:ec:2f:ba:
                    fb:5f:f6:b0:5e:d4:a1:fb:e0:4c:e8:7a:b6:9f:04:
                    1d:b6:bf:55:91:05:94:fa:78:1d:54:6c:50:63:3c:
                    cf:74:35:59:9e:66:35:aa:ab:50:f9:5c:f1:99:69:
                    23:99:f8:ad:3a:12:78:2d:f5:ec:93:01:0f:ce:32:
                    11:50:85:ec:1a:c0:82:a9:5e:91:13:2a:29:69:51:
                    0f:07:43:fe:f1:f2:ba:da:54:fb:74:0d:2e:ef:e7:
                    c3:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8F:60:E4:B0:FC:F9:1B:55:39:98:E1:17:79:0C:79:03:F4:2D:7D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7e753a17-6f62-44db-ade8-bf5a6e5ac419/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7e753a17-6f62-44db-ade8-bf5a6e5ac419/d4917e9090de7c24d951e0efb8d7d891f6d712c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.112.0/22
                IPv6:
                  2803:90c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264767

    Signature Algorithm: sha256WithRSAEncryption
         b9:61:af:26:41:3e:9c:d3:e6:7f:39:d6:d1:90:4e:ae:46:3a:
         75:92:1e:7e:10:b6:e9:6e:17:af:a1:75:89:06:d8:49:0f:d3:
         4c:3e:48:6b:36:b5:a1:7b:eb:be:83:41:cd:5e:3c:13:ac:74:
         e1:ba:95:97:df:b9:45:7c:48:2c:f4:87:da:b0:68:76:b8:f9:
         25:73:99:2a:e8:5a:5a:84:74:7c:a3:ca:53:e0:6b:69:02:36:
         2e:ef:6a:b0:c8:71:6c:c0:e2:41:bb:82:0a:cf:72:6a:dc:6e:
         3e:fb:0c:47:0b:ae:58:c1:b3:1b:d6:6b:04:e4:ad:88:26:36:
         4c:7c:b0:0e:58:f6:79:ab:65:ec:be:45:39:2a:59:94:d0:a9:
         87:37:d3:c3:00:30:3e:2f:b6:2e:7e:b6:ca:72:a0:65:ae:59:
         75:c9:84:33:85:b9:89:f4:5e:cb:65:5a:b2:70:73:3c:24:93:
         cc:8c:e9:05:81:5f:40:ac:86:5d:a7:36:67:1a:ed:e6:82:55:
         82:94:35:8e:42:65:2f:d9:cb:24:3b:2e:fd:f2:cf:d0:2d:34:
         62:17:3c:b7:7b:2e:85:f6:3f:23:45:cc:fe:9c:7b:cb:67:bf:
         5a:9f:4c:5e:ab:32:b6:6e:73:8d:4a:db:69:5c:85:8d:55:8b:
         02:64:c3:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----