Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e1c05a92a385e8c5fe0107e8dbfa5287c168e026.cer
File:                     e1c05a92a385e8c5fe0107e8dbfa5287c168e026.cer (raw, json)
Hash identifier:          4O47RtkelCi7FkyKZLIWJfISCkf+0hePQah/4Idd9e8=
Subject key identifier:   03:FD:A8:5F:94:87:66:57:3A:3A:11:0D:30:A2:5C:08:52:89:DD:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F08A7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fefe688b-4428-4840-a83a-08943aa84d05/e1c05a92a385e8c5fe0107e8dbfa5287c168e026.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fefe688b-4428-4840-a83a-08943aa84d05/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Jul 2023 22:15:36 +0000
Certificate not after:    Sun 16 Mar 2025 18:41:50 +0000
Subordinate resources:    AS: 263157
                          IP: 170.0.12.0/22
                          IP: 2806:23e::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15764090 (0xf08a7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  3 22:15:36 2023 GMT
            Not After : Mar 16 18:41:50 2025 GMT
        Subject: CN=e1c05a92a385e8c5fe0107e8dbfa5287c168e026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:8c:8a:42:8d:bb:a7:f4:bb:41:d8:9b:30:be:
                    d1:16:39:36:2f:9d:0d:e6:f4:93:c3:ac:4c:97:c9:
                    ca:07:47:06:7d:c5:b0:fc:d2:b1:ee:bf:fd:4d:eb:
                    97:23:3b:b5:c6:42:6d:9a:85:45:c8:6b:ef:a6:ac:
                    4f:45:c5:f6:d9:a2:d2:c8:20:85:61:a6:7c:07:73:
                    3f:c1:ff:2b:08:1a:33:2d:d1:c1:90:73:11:43:09:
                    a7:5a:6c:d0:2a:ec:59:3a:f4:b9:ca:d7:5c:35:00:
                    47:22:82:83:93:95:19:4c:77:97:9f:17:12:de:8e:
                    92:c6:72:06:d1:cb:cd:da:b6:29:72:78:38:8c:12:
                    95:8c:12:f9:ff:58:13:71:46:7a:11:6d:27:14:f0:
                    4c:f3:2a:a1:3f:42:b9:a1:d3:1f:04:d9:d9:17:da:
                    89:ae:b9:88:3e:39:3c:7e:9a:ad:e0:5c:74:bc:95:
                    cd:0b:c8:bc:33:e1:d8:24:0e:5e:dc:92:1c:4b:98:
                    88:6d:ec:ea:88:57:b6:fe:52:97:cf:e7:c4:cf:2d:
                    f6:a7:69:ef:a0:45:aa:e0:b5:07:d9:bb:54:03:bf:
                    bd:1d:86:a6:ee:8e:fc:b1:d9:92:fc:18:14:53:77:
                    9a:86:cc:26:18:4d:ad:7b:c5:1f:57:46:07:b7:70:
                    3e:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:FD:A8:5F:94:87:66:57:3A:3A:11:0D:30:A2:5C:08:52:89:DD:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fefe688b-4428-4840-a83a-08943aa84d05/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fefe688b-4428-4840-a83a-08943aa84d05/e1c05a92a385e8c5fe0107e8dbfa5287c168e026.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.12.0/22
                IPv6:
                  2806:23e::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263157

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:f5:82:b0:89:bb:26:34:0d:01:e8:89:b2:13:42:19:ca:
         23:16:30:26:c8:3a:98:78:c7:54:b1:68:fa:1f:a0:b3:3a:cf:
         00:a3:bf:01:2f:b3:d2:44:79:e5:e7:f7:88:41:e4:2e:e3:90:
         7e:e8:a1:13:64:e9:57:66:45:51:d1:59:0b:88:35:07:f0:25:
         22:c4:b8:ef:f3:a5:61:ec:00:b0:45:db:a3:cf:05:7e:ef:0d:
         ff:0e:17:99:f9:85:fe:df:f8:ed:c7:1c:45:50:f8:90:06:73:
         2c:86:9d:18:c4:8b:56:eb:07:a1:cf:ef:7a:96:20:bd:48:a1:
         81:f3:ec:9b:de:a8:8d:b1:69:4e:66:4b:ec:24:72:82:31:ad:
         1b:11:df:e2:91:84:7f:74:2a:34:b2:82:b1:19:eb:c5:5a:f7:
         75:f1:19:a7:0b:d6:90:6c:99:ba:e1:5a:83:10:39:60:41:82:
         1f:fb:15:8f:21:6e:fc:79:a1:5f:ac:f8:4f:ac:9e:3f:ea:ba:
         d3:39:a6:2f:fa:0f:63:51:de:82:1f:d2:b3:7f:14:14:41:1d:
         71:b2:3c:e0:e3:66:fa:47:f1:a1:4a:31:fe:f2:b2:a8:e3:e8:
         15:7a:0d:7e:a3:90:e0:f4:c1:08:7d:a1:d7:6e:0f:dd:02:ab:
         3a:81:f6:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----