Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db78e0686c968567d3ed0c67860421cc154572a1.cer
File:                     db78e0686c968567d3ed0c67860421cc154572a1.cer (raw, json)
Hash identifier:          xdCLYzbFTO/nuj6deN0YG8Uxz2ONp91SHWfLUKZAfIM=
Subject key identifier:   C7:9D:C4:DF:63:29:9A:18:0D:75:D8:0B:37:FB:C0:F4:08:72:5A:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E890F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/53ac391f-fe1f-4cfc-9f5e-9c739b1eb1d3/db78e0686c968567d3ed0c67860421cc154572a1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/53ac391f-fe1f-4cfc-9f5e-9c739b1eb1d3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 13:51:05 +0000
Certificate not after:    Fri 13 Sep 2024 23:18:00 +0000
Subordinate resources:    AS: 265870
                          IP: 45.227.68.0/22
                          IP: 2803:4e20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15241458 (0xe890f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 13:51:05 2023 GMT
            Not After : Sep 13 23:18:00 2024 GMT
        Subject: CN=db78e0686c968567d3ed0c67860421cc154572a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:7d:24:50:2d:62:5f:8c:39:ba:f3:20:a9:8b:
                    dd:43:d7:38:a1:cd:80:23:65:97:cf:28:cd:e2:25:
                    8f:01:2b:2c:ec:cb:93:ea:95:d6:37:81:df:84:21:
                    b1:f8:fe:0a:1e:71:5d:a4:d3:cf:60:e4:7f:63:af:
                    f0:4f:3c:74:68:25:52:e7:a5:3e:2d:e1:8b:3c:a9:
                    5f:97:92:ed:e5:c8:60:27:3d:74:97:69:c5:ae:33:
                    cc:08:42:69:fc:d4:84:50:69:34:6f:0d:aa:df:f3:
                    c7:50:63:c8:ac:97:80:c4:bb:43:46:0c:36:a2:f7:
                    a6:27:64:e2:57:d4:e1:88:fa:9d:ec:2d:6e:57:81:
                    03:f7:52:52:c4:33:39:d6:30:9d:04:33:5e:4d:36:
                    8d:e8:5c:b7:5f:64:48:35:1d:66:ee:f0:ab:a2:ca:
                    ca:a1:8d:54:70:bb:ad:e0:b1:73:c4:f6:f2:50:f6:
                    41:64:e8:42:40:61:86:41:99:63:db:28:0d:86:70:
                    89:0f:39:a2:25:0d:3e:78:2e:89:7d:3d:04:c1:9e:
                    2f:c0:a3:cd:e3:49:d6:a6:8a:1e:b7:23:1c:5e:11:
                    83:9f:fd:02:e3:a1:e9:cc:07:29:4e:63:b6:f9:53:
                    f9:e2:f9:3d:8e:80:33:b2:44:ef:6e:c1:8e:39:e9:
                    b1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:9D:C4:DF:63:29:9A:18:0D:75:D8:0B:37:FB:C0:F4:08:72:5A:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/53ac391f-fe1f-4cfc-9f5e-9c739b1eb1d3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/53ac391f-fe1f-4cfc-9f5e-9c739b1eb1d3/db78e0686c968567d3ed0c67860421cc154572a1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.68.0/22
                IPv6:
                  2803:4e20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265870

    Signature Algorithm: sha256WithRSAEncryption
         a3:17:be:16:fc:6f:7d:f3:b1:7d:dc:df:5e:38:68:b6:0c:db:
         56:1c:b9:97:15:45:3a:ee:a3:37:10:72:97:c8:a1:e7:02:d4:
         1d:f3:87:f4:a1:e3:aa:14:93:94:43:0d:1a:e7:a8:19:08:65:
         c0:f7:4c:52:e0:3a:47:23:c3:67:12:8b:fa:fa:9b:e4:51:e8:
         67:44:59:ec:ee:b5:c0:c6:9c:51:ec:65:d0:5d:70:c2:c0:12:
         26:38:0f:89:28:00:ca:16:8b:1c:7f:48:bf:fa:98:a4:6d:82:
         af:15:c8:0d:71:20:4d:f0:11:69:55:7b:e7:6b:d2:7a:f3:5c:
         eb:16:8f:37:ed:ff:3c:a2:d9:af:e4:61:a7:5f:ce:e5:cb:99:
         9d:23:f8:d4:8a:83:ce:97:7e:02:9d:3a:e2:94:07:cb:48:b7:
         13:7c:f7:29:15:83:1d:e1:18:51:dd:1a:c0:a0:03:d8:00:f2:
         54:01:f7:2f:aa:5c:2e:cc:a8:6b:7a:1f:9b:39:7d:a0:6a:71:
         a3:32:c3:11:2c:20:c4:39:db:ba:40:ff:4c:bc:42:b3:a3:26:
         4e:0a:d2:80:52:54:b3:4e:be:fa:3f:9c:61:19:33:42:85:a5:
         f3:d1:34:b5:7a:dc:60:03:7a:32:ef:4f:0e:f3:80:3e:09:57:
         1b:29:13:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----