Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df9aafb4685260f2a007f3af752ec897edf667c9.cer
File:                     df9aafb4685260f2a007f3af752ec897edf667c9.cer (raw, json)
Hash identifier:          OvAnhHIX/3Y3BwHdmZVCfi2IlKvkVyUZOlaeox/pOHQ=
Subject key identifier:   21:42:2F:8E:53:39:7D:CF:51:4F:D8:FE:EF:50:2A:E3:60:40:EE:41
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0F18E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/df9aafb4685260f2a007f3af752ec897edf667c9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Jul 2022 15:25:36 +0000
Certificate not after:    Tue 06 Aug 2024 15:29:44 +0000
Subordinate resources:    AS: 264792
                          IP: 200.23.207.0/24
                          IP: 2801:1a:5000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15790478 (0xf0f18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 15:25:36 2022 GMT
            Not After : Aug  6 15:29:44 2024 GMT
        Subject: CN=df9aafb4685260f2a007f3af752ec897edf667c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a5:45:e9:b0:ff:d9:7e:71:10:2d:9f:94:1e:
                    fe:a7:2b:ee:bc:f7:33:ba:9a:59:ff:28:da:ff:27:
                    09:12:1d:43:03:fb:b9:83:32:d1:ea:8f:15:2f:ec:
                    58:ad:fc:6c:c5:91:c2:18:68:8c:8c:2a:d3:99:71:
                    4c:cb:b0:5a:8a:62:81:dd:e4:3b:e3:9c:9e:5f:58:
                    d4:f6:7c:e2:48:cc:80:f3:bb:9a:1d:42:aa:9b:82:
                    10:31:fc:a9:98:f8:44:a7:b7:22:47:53:a4:36:4b:
                    1f:4e:76:dd:41:b5:90:74:52:e2:a2:9a:67:32:b2:
                    ed:90:5b:6c:46:ed:7a:15:34:f3:0b:fe:42:ef:07:
                    bf:6c:ba:5b:7a:82:da:ae:b0:0e:9c:61:78:c9:55:
                    b3:a5:49:57:da:ec:ae:32:01:1a:64:c5:97:f1:ec:
                    35:57:8d:50:f8:03:11:cd:89:de:2e:19:b6:e9:8e:
                    ce:1d:f8:eb:94:3c:19:71:86:b0:e7:f9:d1:82:34:
                    2b:59:6a:5d:d4:2e:e5:cb:77:d7:e3:0e:bf:a1:2c:
                    d2:b4:93:93:7f:04:e3:e8:55:fa:68:4d:db:5a:cf:
                    24:cd:c6:27:c5:a9:d8:98:10:9a:95:b2:5d:02:d7:
                    98:09:29:4a:83:12:b8:ee:4b:49:d2:82:9d:59:f6:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:42:2F:8E:53:39:7D:CF:51:4F:D8:FE:EF:50:2A:E3:60:40:EE:41
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fb6a321b-f5d9-456a-87d3-54296e1fbba3/df9aafb4685260f2a007f3af752ec897edf667c9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.207.0/24
                IPv6:
                  2801:1a:5000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264792

    Signature Algorithm: sha256WithRSAEncryption
         1f:ad:fa:6a:db:5d:de:51:e2:fb:28:59:1d:d8:5b:c3:7c:7d:
         ba:57:ec:cc:af:7d:b4:a9:5d:f6:bf:7a:44:24:d4:1c:cf:e9:
         db:3a:29:33:ad:f0:ee:68:bf:70:d9:97:72:df:c6:8f:99:bb:
         9e:d4:09:0d:80:71:92:bd:19:86:c4:32:83:3f:ce:29:ef:9b:
         6a:6a:c6:25:55:e0:0a:2a:31:2e:7b:6c:e8:eb:5f:1f:c3:8e:
         8d:b9:69:46:c1:0c:7c:87:fd:a7:dc:5c:77:e9:1f:2e:86:75:
         c9:f1:30:eb:f2:1f:52:67:af:5e:39:be:94:d4:ab:b9:09:ed:
         c7:f8:db:d7:fe:e6:bf:1b:8b:87:8f:11:c2:60:8b:d7:48:a3:
         15:29:3b:b1:90:70:8c:0c:ce:4a:3d:60:7b:c3:90:77:09:2c:
         d7:8a:a8:0f:10:aa:f9:3e:a3:ac:6e:63:f3:4a:3c:e6:14:3e:
         d4:47:7d:d5:8d:3c:dc:69:6d:fc:2d:f2:4e:32:07:10:ce:82:
         df:2b:20:c0:9a:cc:8c:60:b1:fb:c8:60:ff:61:7e:e2:5e:a2:
         3e:28:d3:2b:16:e9:b4:67:a3:a3:8c:f0:d5:25:48:95:74:7f:
         5f:ec:db:cc:5d:51:39:70:98:65:6a:b7:19:ed:7a:45:41:b3:
         b9:f6:8c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----