Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbb33696dfeda6014d72e7e580e08c1dc7180b30.cer
File:                     dbb33696dfeda6014d72e7e580e08c1dc7180b30.cer (raw, json)
Hash identifier:          SgIrddAc+q72lBHYhpq5k1sdawQ+8g3uLBkXb/d4+k4=
Subject key identifier:   CB:36:70:79:1D:9C:F3:5B:D5:00:5F:EA:95:1F:E4:C4:D3:C9:18:86
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE5D37
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/dbb33696dfeda6014d72e7e580e08c1dc7180b30.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 13:28:02 +0000
Certificate not after:    Tue 17 Sep 2024 06:00:00 +0000
Subordinate resources:    AS: 271825
                          IP: 179.42.94.0/23
                          IP: 2801:1a6::/36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15621431 (0xee5d37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 13:28:02 2023 GMT
            Not After : Sep 17 06:00:00 2024 GMT
        Subject: CN=dbb33696dfeda6014d72e7e580e08c1dc7180b30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:47:65:03:4e:42:2f:c3:78:0d:55:80:a2:91:
                    40:cc:a3:54:6e:8c:4f:e5:e0:2f:b8:9a:6b:7a:35:
                    5d:97:00:05:5f:ec:8a:17:16:d7:e0:c0:d6:21:ef:
                    eb:5c:b9:77:d4:d8:51:c6:61:98:8b:c4:63:ca:81:
                    d5:06:1e:7f:3f:2b:c8:5f:64:53:b7:1a:b6:bb:6f:
                    12:7d:7d:dc:70:c0:80:7f:a0:7c:a2:4e:21:f6:c4:
                    d1:d9:96:a9:dc:7d:21:1a:2c:c9:eb:57:1f:28:12:
                    6f:8a:74:45:6c:04:77:41:8e:51:46:ed:1e:51:6b:
                    a8:d3:1c:c6:f4:d0:63:7b:d1:10:a9:a3:8e:17:ae:
                    3f:0a:4c:89:f1:f6:b5:12:df:88:2a:d0:bb:f6:e3:
                    dd:07:33:c2:87:47:81:09:93:75:f7:2f:fc:9b:36:
                    27:70:09:30:07:08:6a:de:cf:18:a4:bb:3a:e8:31:
                    09:a1:49:45:c2:7f:5c:a7:60:9a:4a:87:f2:31:b5:
                    bd:4c:e3:69:22:23:09:be:4c:c6:51:5a:99:fe:7b:
                    99:ae:2a:30:3d:26:73:ea:77:88:a8:ca:7a:cc:f6:
                    af:7e:d6:d2:cd:81:7f:d2:f9:8e:71:93:1c:29:4b:
                    90:e4:ff:5b:10:33:11:14:b6:a1:64:c9:27:e5:0e:
                    8c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:36:70:79:1D:9C:F3:5B:D5:00:5F:EA:95:1F:E4:C4:D3:C9:18:86
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/081f8480-bb5e-47e6-8568-fe5d02ba05f5/dbb33696dfeda6014d72e7e580e08c1dc7180b30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.42.94.0/23
                IPv6:
                  2801:1a6::/36

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271825

    Signature Algorithm: sha256WithRSAEncryption
         b0:63:08:5f:cd:0a:26:46:32:f2:20:13:3b:cd:88:48:dc:34:
         d1:f8:aa:18:2f:87:c4:de:cd:eb:cc:0e:9a:38:26:8f:5b:8f:
         18:87:19:07:ec:e2:57:c0:a2:f8:a3:f3:94:b8:a4:06:22:9a:
         34:a0:20:b3:72:b2:d4:c7:6c:40:d8:94:08:0b:22:73:11:f8:
         11:59:5d:e2:5b:59:3c:cc:12:3b:19:fc:b2:08:78:2b:e4:a5:
         33:4c:fb:ca:5a:c2:43:c1:de:29:9d:50:fd:46:a1:94:4b:67:
         b4:16:13:68:24:22:9b:3a:58:c4:fc:79:d8:cf:59:fc:b6:cb:
         f9:9e:d0:cb:39:1f:2f:9c:1c:b8:81:2e:ed:3d:21:88:7e:85:
         fc:cf:7a:b0:b4:e4:2f:44:46:83:f2:10:09:5c:74:bf:58:52:
         4f:59:ba:bc:73:85:1c:04:95:41:7d:9e:2b:22:f7:1e:d7:eb:
         5b:37:38:5e:3f:5c:2a:3d:56:ff:6c:2e:ac:08:95:97:68:b8:
         a6:3a:7d:c9:38:09:e3:e4:00:22:31:ac:8f:aa:49:f5:7b:79:
         10:af:8e:62:7c:de:e1:7a:80:a7:f9:e7:c9:26:70:97:8d:6e:
         c7:88:22:29:2c:c7:53:ea:66:a0:55:2f:16:f2:65:fa:21:c7:
         91:8a:02:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----