Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df9315c850f08ed6dd089f6939bdfe9d3cda7a10.cer
File:                     df9315c850f08ed6dd089f6939bdfe9d3cda7a10.cer (raw, json)
Hash identifier:          BAlKAFceesvEG4TTJIBsSlpNzeMdXkQqbpXsEwB7cl4=
Subject key identifier:   D0:D0:FF:A2:23:F3:9C:8D:22:15:C8:BB:5C:80:17:00:AB:34:22:10
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE9B91
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8837fe55-79b3-4189-987d-040a94cab5b3/df9315c850f08ed6dd089f6939bdfe9d3cda7a10.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8837fe55-79b3-4189-987d-040a94cab5b3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 19:16:52 +0000
Certificate not after:    Tue 30 Jul 2024 18:53:29 +0000
Subordinate resources:    AS: 271807
                          IP: 187.86.195.0/24
                          IP: 2801:1d:a800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15637393 (0xee9b91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 19:16:52 2023 GMT
            Not After : Jul 30 18:53:29 2024 GMT
        Subject: CN=df9315c850f08ed6dd089f6939bdfe9d3cda7a10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:1d:ea:9a:4e:a3:1d:14:58:41:39:33:11:d1:
                    da:47:8b:66:42:7b:2e:67:ea:ee:df:3b:55:f8:6d:
                    fc:02:65:99:24:50:10:c1:06:4f:6a:31:7c:3a:39:
                    45:f2:75:11:8b:60:1d:48:e1:ac:87:d3:1b:44:a4:
                    88:04:61:2c:55:53:e7:a9:35:69:11:f6:5e:91:2a:
                    85:bc:03:53:b3:9a:49:cd:0b:09:ee:24:8a:0a:68:
                    f8:1f:1c:fa:f9:4f:c9:b8:29:ee:2e:9d:87:b4:85:
                    8d:c1:74:0b:52:4a:3c:9d:93:07:3d:43:6e:78:80:
                    55:7e:74:82:74:7a:80:46:c6:b5:47:19:7b:21:39:
                    28:b7:4b:58:90:61:45:77:d5:cb:7a:83:ec:34:5a:
                    ea:64:95:75:b8:52:e9:33:00:b7:c3:c7:9b:67:42:
                    7d:74:bd:46:12:ec:a1:6f:55:4a:bb:27:24:b0:98:
                    88:8b:4f:9d:37:7d:51:23:d8:7a:ef:76:f0:b0:80:
                    de:4b:4b:4f:3c:aa:d4:18:50:d5:7c:ad:8b:be:c8:
                    54:43:8b:c0:3f:3a:1e:eb:ee:da:94:3d:e2:8a:7c:
                    7f:1d:3b:80:ee:25:d1:a6:93:b3:7f:c7:d6:ae:fa:
                    6d:14:16:62:16:d9:33:2b:cf:57:3f:5a:f2:be:a8:
                    5c:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:D0:FF:A2:23:F3:9C:8D:22:15:C8:BB:5C:80:17:00:AB:34:22:10
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8837fe55-79b3-4189-987d-040a94cab5b3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8837fe55-79b3-4189-987d-040a94cab5b3/df9315c850f08ed6dd089f6939bdfe9d3cda7a10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.86.195.0/24
                IPv6:
                  2801:1d:a800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271807

    Signature Algorithm: sha256WithRSAEncryption
         19:56:70:79:3a:c9:6e:e0:88:ca:ba:19:67:3b:ab:b8:c5:ff:
         58:46:ec:e0:10:b9:b9:de:72:7b:55:17:68:a0:63:d9:62:71:
         22:9f:c6:48:36:60:31:f5:03:2d:98:81:eb:a4:76:18:29:c2:
         8f:e9:3d:66:2d:9c:24:69:a4:3f:6b:3f:61:69:7a:81:ac:6f:
         83:22:f6:4e:da:76:59:7c:a8:e8:1f:72:f2:22:54:64:4c:d2:
         9e:fe:de:48:79:e8:4d:a3:d8:9e:d2:6e:6e:8f:94:7a:6a:75:
         bc:72:94:d2:89:84:c8:2f:13:97:d8:e9:8a:80:6a:03:e3:2c:
         85:49:de:46:1d:5d:7b:3c:2a:d7:81:d8:87:db:55:4f:63:1f:
         8d:84:0b:de:8d:71:91:df:c2:2f:0e:f1:aa:8b:17:d9:22:8a:
         df:8c:3d:c3:42:55:2d:9d:63:e3:ae:47:3a:64:a1:2b:00:c9:
         63:bb:0c:90:3d:1c:c1:6f:64:6a:a5:6a:d9:ba:7d:07:d3:53:
         42:b3:f3:4f:d9:65:35:3b:39:74:9c:15:d1:9a:16:64:e1:8a:
         b6:b0:35:e1:ac:93:00:1a:29:d3:27:d9:15:97:ed:2e:58:94:
         e7:9b:17:f3:cc:7f:b9:6f:af:11:d6:00:c5:71:ca:1c:0d:94:
         6a:c3:d2:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----