Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbffe46f4ecd19060cdcba8eca5e475610f92f76.cer
File:                     dbffe46f4ecd19060cdcba8eca5e475610f92f76.cer (raw, json)
Hash identifier:          Z5X22vkohvgelxpmIJaPZIPVZjakhJImvlbjFFDcwmU=
Subject key identifier:   FD:90:9A:87:78:9A:78:39:08:F3:01:7F:6F:B5:30:76:DD:EE:67:C0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E835FD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/dbffe46f4ecd19060cdcba8eca5e475610f92f76.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 15:58:29 +0000
Certificate not after:    Wed 10 Apr 2024 03:37:24 +0000
Subordinate resources:    AS: 28392
                          IP: 201.131.6.0/23
                          IP: 2801:c4:b4::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15218173 (0xe835fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 15:58:29 2023 GMT
            Not After : Apr 10 03:37:24 2024 GMT
        Subject: CN=dbffe46f4ecd19060cdcba8eca5e475610f92f76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:3b:d9:e4:aa:03:c6:58:a5:16:de:8f:de:64:
                    83:6f:f6:69:5a:d3:f5:58:af:19:72:17:d9:5f:b8:
                    7d:37:fc:c7:1a:b1:22:43:86:b5:fe:0b:30:4a:79:
                    17:12:8b:50:e5:52:1b:eb:d2:1c:b3:ab:c8:ab:90:
                    01:47:ca:e2:e4:28:47:fa:e5:a1:3a:81:08:88:fe:
                    e4:87:8b:0a:96:18:07:c7:70:bf:21:ec:7c:f5:d6:
                    d0:0f:3b:d6:89:38:96:f5:9b:29:f1:1f:7f:47:8d:
                    61:91:b4:17:25:eb:29:20:86:8e:27:c4:4d:9f:5c:
                    cd:35:bd:a0:99:43:03:6b:ab:35:7c:f6:1f:26:30:
                    5b:af:9a:6c:78:3e:b7:67:b3:a6:70:40:02:cb:c6:
                    86:0e:6b:55:b2:b6:9f:f5:e7:c2:9f:16:60:a0:55:
                    b2:dd:26:b9:e9:72:a8:00:fc:c7:2c:00:f5:6d:11:
                    c2:8e:1c:a8:30:81:47:ac:42:3c:99:7f:8b:96:0c:
                    53:2a:cf:c8:db:91:e3:c4:9a:03:f9:a5:f9:9a:55:
                    2d:ea:40:c1:76:69:a2:53:59:c0:43:31:d5:ca:7f:
                    26:bb:87:e8:75:fd:74:4d:b0:fb:1d:ea:d2:91:74:
                    f1:c6:30:47:78:90:37:d3:98:5b:3e:4d:29:13:99:
                    2c:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:90:9A:87:78:9A:78:39:08:F3:01:7F:6F:B5:30:76:DD:EE:67:C0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b368127c-c4b2-4d6f-81af-438c498ed09b/dbffe46f4ecd19060cdcba8eca5e475610f92f76.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.6.0/23
                IPv6:
                  2801:c4:b4::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28392

    Signature Algorithm: sha256WithRSAEncryption
         18:e6:e6:b2:12:fc:2f:de:16:a8:18:47:f4:48:13:b9:a1:92:
         e9:1c:b0:17:38:b3:0f:22:65:05:90:07:96:9f:47:c0:7c:dd:
         a3:37:e9:df:2f:e8:9a:b9:85:50:10:7c:43:24:67:34:61:ba:
         70:c4:c6:f2:1c:01:f9:af:0c:11:6f:e8:32:0c:d5:90:1a:1b:
         82:58:16:04:59:8e:35:36:33:ef:a1:3e:3b:ce:fb:eb:4d:e1:
         08:72:3d:e1:fd:47:61:da:59:bf:db:59:2a:b2:20:04:58:f5:
         18:37:19:58:a2:88:7c:82:75:15:83:6a:80:01:01:7a:54:7a:
         8b:ab:bd:cb:0d:04:44:05:d2:18:76:3b:36:34:53:c6:60:28:
         33:cd:09:6e:fd:ae:19:f4:bf:37:61:58:c8:62:3f:dd:a4:09:
         ff:71:35:92:b9:75:26:5f:e4:eb:cf:8f:6e:2e:34:3e:17:b4:
         64:86:b2:87:33:3d:f4:15:a3:3f:c0:80:31:85:49:34:1a:4e:
         9b:01:a4:5b:04:7c:c2:4c:1e:65:bb:71:bb:3d:02:41:67:10:
         86:75:b5:f3:65:35:88:8e:4f:82:fb:24:13:47:72:7a:01:38:
         81:fd:56:2d:9c:dc:20:85:99:67:b8:11:24:c0:8d:c0:74:c9:
         73:47:f2:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----