Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e729bc979c98110a38710bfa483edf8553ae9ed3.cer
File:                     e729bc979c98110a38710bfa483edf8553ae9ed3.cer (raw, json)
Hash identifier:          uKnWGeKc49zbUCkzwLIio4m3qDqSOyMgfbCqtTlD+xw=
Subject key identifier:   1B:F0:5A:ED:2E:CB:F2:3F:91:8B:D2:AA:0B:06:4C:E5:35:D2:9A:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF00F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aa910a9d-72db-42f0-bef6-fb456f2adc60/e729bc979c98110a38710bfa483edf8553ae9ed3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aa910a9d-72db-42f0-bef6-fb456f2adc60/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 18:10:33 +0000
Certificate not after:    Fri 13 Sep 2024 14:18:18 +0000
Subordinate resources:    AS: 267976
                          IP: 45.166.120.0/22
                          IP: 2801:80:2e00::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15663352 (0xef00f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 18:10:33 2023 GMT
            Not After : Sep 13 14:18:18 2024 GMT
        Subject: CN=e729bc979c98110a38710bfa483edf8553ae9ed3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:50:e9:7c:ff:99:79:3c:df:e9:39:85:75:71:
                    94:04:a7:37:07:00:59:11:d4:01:8c:11:3d:0c:84:
                    49:48:1c:88:dd:59:7c:47:4e:c6:77:89:e4:4d:d7:
                    9e:f3:b1:19:ac:dc:db:db:d1:e9:d5:a0:02:5f:6c:
                    56:b5:4b:5b:73:9d:f9:a6:a2:c3:82:82:1c:97:f9:
                    aa:c9:62:6f:2d:1f:59:c2:b5:5b:8a:49:ec:43:df:
                    01:c5:cf:ef:ab:e8:62:48:64:49:4d:c2:97:f8:ee:
                    f5:56:3e:63:43:6c:a9:a4:97:52:b7:cd:74:2b:ab:
                    ed:0c:9c:10:02:33:06:06:84:e6:3b:88:5c:ac:a7:
                    d2:f1:78:7b:e5:e1:af:54:47:da:d3:c8:58:52:57:
                    dd:e2:70:6c:d1:0d:b5:64:93:17:7f:71:15:1e:e5:
                    ec:25:04:f2:67:c3:8a:0e:35:65:e0:29:05:c7:f8:
                    b0:a4:2b:93:61:f2:ed:46:94:3d:6a:3a:2f:f4:a1:
                    88:39:71:24:62:3d:93:3d:2b:37:d5:04:14:a0:43:
                    10:79:7a:98:20:c1:78:6d:8c:01:c6:3b:49:00:97:
                    59:f8:7a:2b:ee:b5:af:22:15:a7:89:b5:3e:b5:93:
                    6c:65:ed:b1:66:e0:f6:77:1f:91:8c:31:6b:28:9d:
                    7e:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:F0:5A:ED:2E:CB:F2:3F:91:8B:D2:AA:0B:06:4C:E5:35:D2:9A:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aa910a9d-72db-42f0-bef6-fb456f2adc60/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aa910a9d-72db-42f0-bef6-fb456f2adc60/e729bc979c98110a38710bfa483edf8553ae9ed3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.166.120.0/22
                IPv6:
                  2801:80:2e00::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267976

    Signature Algorithm: sha256WithRSAEncryption
         5b:62:13:50:82:db:9d:1c:0a:32:99:0c:b2:a4:2b:86:c7:29:
         a3:ab:a9:59:8a:86:5c:98:12:98:82:d1:8a:8f:7c:3c:4c:70:
         5e:c3:f7:a0:ff:55:36:ce:7a:1a:ab:10:df:26:dd:38:c0:39:
         9e:d3:7c:09:62:e8:fb:9d:76:4e:82:66:6a:89:cd:4b:48:eb:
         1a:48:db:fb:09:29:5c:04:42:9c:16:65:6f:10:de:3d:a3:51:
         78:d9:b2:19:83:7a:e4:54:58:61:69:d8:55:c6:8c:8c:78:c9:
         91:b1:2c:7c:b4:96:95:17:8d:52:06:3c:a9:47:6c:d1:bf:46:
         1c:e8:f2:36:7f:39:b1:d0:24:f4:ae:fa:4d:25:6d:29:2c:e5:
         52:a3:57:c9:47:98:50:25:cf:35:31:9a:7b:5e:70:a6:75:95:
         c6:6c:1e:d8:91:db:56:5e:04:34:62:fb:fe:8a:dd:26:03:dd:
         39:90:08:47:58:b8:f7:e0:fc:68:75:05:e6:e4:08:fa:08:d9:
         db:8f:91:a2:1b:bb:96:62:e6:97:8c:73:4b:6a:51:59:80:d7:
         77:cb:2f:b5:f9:01:97:84:35:9a:68:d2:cd:7d:04:64:4b:88:
         22:bd:c9:8f:d7:52:3c:1e:d7:16:b7:70:3f:e9:ea:c1:49:70:
         a1:45:c2:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----