Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df0cf296a05fe6769855d4d68aa95a8328ee45d9.cer
File:                     df0cf296a05fe6769855d4d68aa95a8328ee45d9.cer (raw, json)
Hash identifier:          dvpmXpFnweiVeAZX+xP+wV1Sotr+oGZEgdo/jXPWGVI=
Subject key identifier:   B3:7C:1A:7C:5B:82:57:D2:3E:34:BB:4F:92:BE:33:0F:F3:EF:1A:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5BC35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2313c386-130b-4422-8c45-26b5158a3f9a/df0cf296a05fe6769855d4d68aa95a8328ee45d9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2313c386-130b-4422-8c45-26b5158a3f9a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 15 Apr 2023 11:48:31 +0000
Certificate not after:    Fri 28 Jun 2024 22:43:53 +0000
Subordinate resources:    AS: 263830
                          IP: 138.186.244.0/22
                          IP: 2803:640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15055925 (0xe5bc35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 15 11:48:31 2023 GMT
            Not After : Jun 28 22:43:53 2024 GMT
        Subject: CN=df0cf296a05fe6769855d4d68aa95a8328ee45d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f7:5e:24:83:ac:5f:43:07:cc:c8:1a:05:6f:
                    64:e6:27:2c:56:d8:27:10:ac:de:56:01:69:5a:01:
                    13:b2:20:67:47:d6:a1:f9:7b:85:a3:97:14:c8:8c:
                    1d:48:4a:41:f9:5d:fa:1f:0b:9d:3b:3d:86:80:7d:
                    f0:81:6a:6a:6f:fe:fd:b8:ad:dc:cb:18:c3:72:56:
                    3b:ce:31:51:b3:4b:e4:97:39:bd:ac:39:ac:11:44:
                    30:f4:80:15:e1:fa:45:e8:f5:69:ac:c3:92:f4:a5:
                    11:ff:fc:31:53:de:30:41:3f:c9:35:3b:8c:3e:64:
                    f6:cd:bd:11:cc:ff:08:27:97:e4:15:7c:11:49:a8:
                    00:1c:ec:1d:07:26:04:a6:ca:14:a8:d5:65:b8:9e:
                    4b:1b:bd:43:ff:66:16:7e:8a:b4:23:d7:71:ec:7f:
                    51:aa:ee:5e:9f:b3:b0:61:b5:d0:68:60:87:90:f2:
                    ee:e7:1d:7f:06:31:f5:8a:b2:47:8e:92:05:01:7e:
                    84:d3:ac:08:7c:65:57:0d:13:31:bf:a3:09:90:8e:
                    f2:75:cc:94:37:17:c1:fa:d6:53:e5:20:bd:5b:0d:
                    f6:e1:01:8e:64:ce:52:a1:8d:3d:be:0b:60:08:ec:
                    13:e4:74:78:18:ba:06:a4:91:59:22:4b:19:ff:9b:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:7C:1A:7C:5B:82:57:D2:3E:34:BB:4F:92:BE:33:0F:F3:EF:1A:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2313c386-130b-4422-8c45-26b5158a3f9a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2313c386-130b-4422-8c45-26b5158a3f9a/df0cf296a05fe6769855d4d68aa95a8328ee45d9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.244.0/22
                IPv6:
                  2803:640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263830

    Signature Algorithm: sha256WithRSAEncryption
         40:70:96:dc:50:2e:ef:84:87:95:56:78:67:bd:96:f4:5c:44:
         2b:f5:e5:01:55:98:ef:80:9f:58:8a:4f:d9:68:82:39:36:4f:
         45:fd:1e:e0:e8:77:67:c1:e8:87:3a:10:3a:48:9e:27:6a:c2:
         40:dd:cb:5d:d1:4f:9a:25:e6:7a:2f:80:ef:17:39:b5:aa:ca:
         2f:ee:32:80:d2:2b:76:d0:27:85:20:a1:97:75:34:94:26:1d:
         04:ed:92:df:b5:49:4a:33:4f:21:fa:49:63:e0:27:da:d7:c2:
         7a:26:8c:4a:32:05:d0:82:53:f0:b3:45:5b:7c:e1:89:6f:56:
         9e:02:17:6b:84:c8:e2:b3:5d:16:02:9f:07:0e:df:37:72:ec:
         e5:2a:b9:59:6c:d1:7a:e8:0d:ee:1e:b3:3f:e3:44:1a:69:4a:
         c2:70:6d:6f:f9:97:e5:ed:9e:7e:12:64:f7:50:b9:4b:4c:3f:
         db:9f:35:fe:66:a6:4b:c0:40:5c:ec:a3:22:71:3f:13:fd:67:
         b8:4c:6c:32:f1:e4:65:02:f2:1d:bf:d1:f4:6e:53:30:7e:53:
         40:05:cd:1d:3b:c4:f0:24:12:da:6e:5f:c3:0f:b2:3d:82:2e:
         0d:15:fb:5e:5a:27:6c:27:7d:58:53:d8:c9:ae:42:18:0f:56:
         da:fe:d2:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----