Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.cer
File:                     e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.cer (raw, json)
Hash identifier:          QAh4EUtk/fB9ZqDRToWOgR9czYIKm1H1zC8LmeQk0xI=
Subject key identifier:   FB:C5:93:04:19:B1:9A:69:80:9D:F4:2E:5F:F2:93:11:D0:5D:36:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100ABD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Nov 2022 13:10:38 +0000
Certificate not after:    Mon 01 Sep 2025 22:11:23 +0000
Subordinate resources:    AS: 272902
                          IP: 200.123.54.0/24
                          IP: 2803:d690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16821203 (0x100abd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  4 13:10:38 2022 GMT
            Not After : Sep  1 22:11:23 2025 GMT
        Subject: CN=e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a0:35:69:6d:f6:a9:56:a4:fd:e5:3c:d3:39:
                    30:38:f8:54:45:32:b1:37:1b:ff:49:f9:e9:20:7e:
                    91:2e:e9:6a:a9:ea:62:9f:f1:62:20:33:f3:c5:8d:
                    9a:bf:74:90:0e:fb:e2:5b:cb:90:bc:f5:b5:5a:50:
                    76:2a:2d:f4:b1:69:1c:44:f3:ad:cd:a4:64:ec:49:
                    b8:c0:22:a5:6d:05:64:15:d8:df:ce:22:c2:2f:18:
                    da:46:ac:65:a7:87:ac:b7:a2:93:d9:c4:0c:e0:ed:
                    a9:14:ae:dc:76:3b:d6:55:a9:8f:46:73:49:aa:5e:
                    61:cd:a0:a5:a6:46:c1:eb:70:a0:55:32:6e:81:e6:
                    8d:35:69:0f:51:e9:84:f4:53:ff:dd:46:cb:ce:57:
                    7a:6c:db:8b:9f:06:b3:0b:15:b4:39:83:df:7a:7a:
                    29:85:c0:62:61:1e:56:bf:06:c9:e3:e2:16:d8:24:
                    7b:28:04:03:a5:6a:e8:2f:65:fb:e3:ec:80:ef:33:
                    df:98:a8:f6:a8:7a:af:0f:5e:93:26:91:eb:38:fd:
                    38:d2:ef:1b:e5:ed:4a:78:8c:57:5c:53:20:c0:da:
                    c1:3a:92:64:b8:b7:93:56:e6:e1:74:e6:fa:a0:24:
                    80:55:d7:6f:d6:8e:f7:6f:88:d1:82:7b:53:78:74:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:C5:93:04:19:B1:9A:69:80:9D:F4:2E:5F:F2:93:11:D0:5D:36:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d5475f2c-eeaa-44ef-9f3b-daf907fd7c41/e619412b29a5a9ba8f9672c97c3aa249ee0d9ad0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.123.54.0/24
                IPv6:
                  2803:d690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272902

    Signature Algorithm: sha256WithRSAEncryption
         b4:94:fa:b3:86:af:76:73:b7:19:74:e7:7a:96:00:5b:1e:86:
         f0:28:5f:16:45:f1:6e:90:f6:73:63:4b:48:ec:97:99:d7:52:
         d2:7a:45:5d:1f:e6:5c:a8:e2:02:11:c9:42:41:8f:1c:98:b3:
         62:97:d2:60:74:71:26:1f:6d:73:70:5f:d7:72:d4:f2:f3:ed:
         b1:5d:55:00:86:55:97:8d:39:d9:78:00:b7:45:0e:3e:8f:79:
         0d:a1:92:97:3b:d8:5b:00:b1:05:8f:77:8a:6a:be:e4:40:67:
         34:db:7b:10:b9:c0:b3:0b:e3:a2:81:d2:4e:d6:5d:4d:99:fc:
         73:d2:d0:e3:53:b4:0e:e0:c8:22:d6:f0:e2:2d:af:2f:58:d3:
         61:8a:06:c4:3f:57:dd:6d:ac:b1:3c:db:f9:49:de:ae:54:50:
         c2:50:e7:d2:5d:1f:a7:74:96:09:d0:72:4f:f2:2a:09:cf:c7:
         bf:7f:21:5a:1b:a2:e2:42:61:30:18:92:c5:bc:ca:72:26:e7:
         8d:83:0b:74:c2:45:b6:4e:d8:93:47:3d:7f:a6:2e:0a:95:5f:
         d9:e1:ed:6a:7a:05:8c:84:3c:4e:a1:71:4c:dc:76:d8:99:7a:
         7f:f7:fc:f8:66:53:7a:4c:6c:ad:0f:56:99:e9:52:d5:a1:ac:
         18:f0:32:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----