Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df5a245f6f52f09479811abcbd433b19790b0f3b.cer
File:                     df5a245f6f52f09479811abcbd433b19790b0f3b.cer (raw, json)
Hash identifier:          jY7YqsIGMAm21oys7iN2i0vg0L3XiJ62syah6i/p60c=
Subject key identifier:   DC:E3:6C:25:2F:05:90:00:51:48:F3:02:CA:8B:CA:CF:EC:9E:F9:05
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCE9C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/df5a245f6f52f09479811abcbd433b19790b0f3b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 23 Jan 2023 18:47:51 +0000
Certificate not after:    Sat 31 Aug 2024 18:41:47 +0000
Subordinate resources:    AS: 272901
                          IP: 177.71.96.0/22
                          IP: 2803:5690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14477767 (0xdce9c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 23 18:47:51 2023 GMT
            Not After : Aug 31 18:41:47 2024 GMT
        Subject: CN=df5a245f6f52f09479811abcbd433b19790b0f3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:b1:22:5c:20:0e:46:eb:a2:45:29:51:b9:1c:
                    ab:45:41:85:21:76:fb:0a:45:6f:cd:6f:92:46:55:
                    bc:fa:f6:8f:dc:32:3e:0b:df:8f:2e:3c:b1:05:59:
                    28:fa:41:1b:8f:fb:08:b9:25:28:44:f6:65:e4:06:
                    7d:62:0a:b0:02:f0:8a:63:78:d4:e4:c4:d9:b8:03:
                    5e:81:73:9e:8d:e3:63:4b:9c:68:61:bf:92:c0:c8:
                    53:0e:04:d7:35:19:78:30:08:64:68:26:c6:c1:55:
                    34:c7:e8:1f:ff:80:68:9f:5c:91:50:26:66:59:24:
                    0e:1a:60:0e:0d:c4:f7:3c:01:f6:83:ad:30:1e:2e:
                    a9:b6:ac:16:55:cf:ce:b0:76:52:51:86:bc:4b:e5:
                    a2:7a:40:43:49:8d:a5:ab:41:79:f3:20:47:f0:cb:
                    b5:51:e7:5e:f2:93:d5:3c:7f:d8:18:f9:4d:d6:d7:
                    14:a2:a3:68:f5:56:8e:fa:b5:11:30:22:be:c7:5c:
                    91:9f:ce:0c:dc:50:de:1e:b4:39:81:7e:f6:4e:7d:
                    2d:27:ce:b4:c1:6f:48:52:d8:9a:ad:7b:54:ef:07:
                    5a:a7:90:54:71:c7:c8:57:00:92:4b:f5:62:a9:f7:
                    be:12:9d:d5:f9:4c:10:6e:8f:25:a9:0b:d5:d6:33:
                    77:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:E3:6C:25:2F:05:90:00:51:48:F3:02:CA:8B:CA:CF:EC:9E:F9:05
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91eba383-45b8-4b18-bf8f-cda525da5bb6/df5a245f6f52f09479811abcbd433b19790b0f3b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.71.96.0/22
                IPv6:
                  2803:5690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272901

    Signature Algorithm: sha256WithRSAEncryption
         24:9d:79:20:2a:9d:e0:37:cf:cd:e6:e5:89:14:23:48:58:8f:
         82:ed:1e:39:ac:45:d9:df:61:d8:ef:c2:7c:77:5b:37:83:14:
         a1:a9:a5:fd:34:ba:c5:6d:6d:41:6b:65:23:ca:51:b7:74:ed:
         db:09:50:87:45:43:66:f1:3f:8d:12:bd:28:b5:09:ba:13:46:
         5a:e3:b7:21:3c:fe:98:d9:b6:5d:90:fa:00:d1:c2:9a:3c:bd:
         87:92:f4:1b:17:cb:f1:f0:44:bd:15:b8:a2:0e:d4:86:7b:5d:
         89:59:61:73:ba:65:d7:bf:e6:f7:38:6f:b8:9a:25:11:f2:20:
         0c:b1:6a:c9:40:9f:a8:30:68:cb:09:7a:4e:6f:b7:79:ef:cf:
         6d:56:01:ba:b3:f3:ff:18:90:37:14:f9:ee:5c:72:48:39:54:
         b8:1a:22:a2:32:81:8b:e5:22:56:3f:7e:6c:9c:df:4b:be:af:
         9e:f4:b3:0c:76:7b:8e:5d:6b:cb:ca:78:85:b9:9d:31:73:79:
         f9:0e:b8:f3:0c:9c:2b:07:f6:5b:91:6b:55:3e:fa:1d:29:22:
         53:c2:8d:3b:1d:da:a1:a1:9a:90:56:f8:db:b1:00:24:e6:38:
         bc:bf:5a:b2:8e:fd:93:5a:e8:ff:b9:56:99:ec:13:4f:cc:a6:
         d3:37:dd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----