Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df2dedcd12e6d3557cb0c4aed3914512c97a3eac.cer
File:                     df2dedcd12e6d3557cb0c4aed3914512c97a3eac.cer (raw, json)
Hash identifier:          eTQdSHcR4AL3RJOfkJxJyhfBZcsotjGXRMsEUX8tMtM=
Subject key identifier:   9A:EB:C5:26:E2:E4:AF:E5:26:35:E4:A0:85:E0:DD:3D:D9:87:F0:4E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1CE30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/df2dedcd12e6d3557cb0c4aed3914512c97a3eac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 16:09:46 +0000
Certificate not after:    Thu 21 Nov 2024 20:03:40 +0000
Subordinate resources:    AS: 269913
                          IP: 200.123.228.0/22
                          IP: 2803:dce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15846960 (0xf1ce30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 14 16:09:46 2023 GMT
            Not After : Nov 21 20:03:40 2024 GMT
        Subject: CN=df2dedcd12e6d3557cb0c4aed3914512c97a3eac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:55:01:51:21:f3:85:3a:f3:82:0e:f2:c2:d7:
                    99:11:4e:af:2e:14:97:bb:21:91:f3:56:26:00:28:
                    4d:e4:49:33:1f:33:81:b7:01:cc:26:26:cc:a0:2f:
                    f9:ae:4b:74:88:e1:b9:1b:53:f5:20:a9:03:34:98:
                    a4:da:6d:44:26:51:0a:79:c7:44:8c:f1:3d:96:7d:
                    f8:a5:e9:0b:f5:3a:ee:a4:12:89:c8:a5:50:b9:df:
                    7e:ba:c9:30:61:3e:5e:6f:16:cb:87:96:17:b6:e5:
                    fa:b9:3c:78:26:11:c4:51:c8:c5:4a:25:aa:8b:f1:
                    7d:5a:f5:44:01:ac:0c:37:c8:58:b2:2c:c5:f0:0a:
                    7a:d8:31:57:74:7a:32:46:10:51:0d:a8:7f:16:16:
                    cd:0d:8f:f0:05:98:f9:b2:09:ef:1a:e7:2c:7d:bd:
                    82:bc:d5:06:fe:fe:76:5b:72:9b:7f:2d:97:39:de:
                    f9:06:94:e3:c8:d4:85:c5:d9:85:64:9b:c4:3f:97:
                    d4:a5:8b:d1:cd:35:1a:46:b4:eb:64:71:90:2e:5e:
                    6f:80:36:f5:c2:a9:61:22:1f:88:ae:a3:18:37:2f:
                    a4:4b:b0:e9:a6:f8:c1:12:aa:94:f3:6b:fd:33:69:
                    f4:47:65:e3:89:29:e9:bf:2f:81:df:aa:11:11:66:
                    a5:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:EB:C5:26:E2:E4:AF:E5:26:35:E4:A0:85:E0:DD:3D:D9:87:F0:4E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ffe690cb-ed0e-4e2c-83b9-b6bdde4603a6/df2dedcd12e6d3557cb0c4aed3914512c97a3eac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.228.0/22
                IPv6:
                  2803:dce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269913

    Signature Algorithm: sha256WithRSAEncryption
         0a:35:d4:ef:f0:e8:1c:04:63:f8:f8:8f:e0:8e:79:ad:95:f3:
         05:0f:26:e7:b7:ff:4d:ce:9b:af:d9:ea:8c:53:64:a4:fe:e6:
         3c:95:b1:ec:52:dc:df:1f:36:51:5c:b9:9c:6d:26:b7:af:e3:
         3e:af:24:0d:12:4b:ef:81:71:66:d5:1b:bf:79:46:49:03:58:
         4c:75:d0:d7:4b:d8:1a:93:36:da:79:32:92:fe:af:fa:e6:ec:
         6c:66:48:4f:c5:ad:5c:23:81:4c:37:e7:b1:a6:a1:e1:91:af:
         1e:dc:60:37:02:bf:94:d1:3c:12:46:70:7a:29:17:1f:20:08:
         15:1a:1f:4c:f4:a0:a6:fa:cb:06:8d:62:41:dd:f5:18:f9:a7:
         96:17:3d:0c:6d:0d:fd:c3:ee:05:34:b6:3c:e6:49:02:83:93:
         ff:52:21:20:d3:1a:16:3d:70:31:84:c0:f3:a7:da:04:48:e9:
         4c:6e:16:1a:96:3b:98:7d:bd:92:a5:48:f0:ac:c4:99:b8:58:
         ee:99:98:fb:7d:a1:72:e0:55:8d:4b:59:8e:08:5a:fd:54:bf:
         d9:8b:a4:16:3f:bf:9e:f0:68:d8:ff:0e:5b:19:68:64:58:71:
         68:3c:44:d8:7a:05:60:c1:0d:68:c9:73:2f:b4:4f:cd:f0:ae:
         6e:f3:84:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----