Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb70e0c09664235dabec312148f9c7b409a2a53a.cer
File:                     eb70e0c09664235dabec312148f9c7b409a2a53a.cer (raw, json)
Hash identifier:          HRMD/xopehzR6D38NrWpTfy2eHefSWAxFkS1MfH0e9k=
Subject key identifier:   8A:B4:9F:9E:DC:43:D2:6A:6E:96:B6:7A:B0:EE:12:CC:A7:19:42:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4E971
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/41d9092d-0962-468f-a97f-9aef0e093db7/eb70e0c09664235dabec312148f9c7b409a2a53a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/41d9092d-0962-468f-a97f-9aef0e093db7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 17:46:02 +0000
Certificate not after:    Sun 25 Feb 2024 06:00:00 +0000
Subordinate resources:    IP: 201.219.112.0/20
                          IP: 2803:cc00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15001969 (0xe4e971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 17:46:02 2023 GMT
            Not After : Feb 25 06:00:00 2024 GMT
        Subject: CN=eb70e0c09664235dabec312148f9c7b409a2a53a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:93:e5:b3:55:1b:da:01:c7:18:b0:82:96:54:
                    cf:2a:a3:b2:3b:2e:05:8a:38:08:16:c5:ad:53:97:
                    9a:b0:0d:8b:8a:c4:24:37:3d:8b:75:d7:05:f7:73:
                    7d:4c:1a:3a:ad:65:0e:93:8a:00:5c:4c:4a:be:a0:
                    0c:ca:e8:26:2c:cf:58:69:99:22:22:37:53:a5:14:
                    82:cd:75:a5:3e:cf:d6:00:84:14:24:9b:e3:b7:b2:
                    73:7e:6d:b1:d9:dd:b8:60:50:cd:ff:59:b9:d1:4f:
                    a1:22:38:a0:c4:db:dc:0a:a6:b6:b9:04:de:1e:e2:
                    bd:63:c2:19:9c:55:cc:da:6b:ae:a5:55:68:79:80:
                    d1:3b:e7:0e:c7:04:37:62:60:ef:9e:3a:f8:8c:a7:
                    53:5c:dc:8e:96:c6:f9:a5:9d:cf:dc:a4:3b:17:6e:
                    a2:16:60:59:16:e3:68:e7:1b:43:cf:23:46:5e:c8:
                    7d:7d:13:6f:2b:f3:ed:ce:09:bd:2f:60:15:67:b2:
                    b5:87:79:4c:6d:f0:0a:b7:f7:b8:f7:93:25:a6:47:
                    55:2e:df:c1:a8:05:34:4f:2a:e8:c7:3b:2f:0e:4b:
                    27:dc:7a:0c:54:45:24:af:25:64:7a:d4:3d:46:b4:
                    a1:0e:b1:fe:a4:bc:64:a0:cc:d6:18:61:2b:4e:5c:
                    28:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B4:9F:9E:DC:43:D2:6A:6E:96:B6:7A:B0:EE:12:CC:A7:19:42:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/41d9092d-0962-468f-a97f-9aef0e093db7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/41d9092d-0962-468f-a97f-9aef0e093db7/eb70e0c09664235dabec312148f9c7b409a2a53a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.112.0/20
                IPv6:
                  2803:cc00::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:25:a1:3d:fc:98:8a:d7:e1:7c:d1:ca:38:0b:e5:5b:41:b5:
         cb:7f:4b:18:7b:ae:4a:8e:be:ee:2e:97:79:4c:23:45:0b:30:
         16:f0:40:9e:1e:6f:9d:97:6b:de:c5:bc:1c:12:d0:e0:4a:f3:
         ea:9c:6f:24:a2:76:c3:94:63:0c:2a:9e:0e:f2:98:4d:46:38:
         7e:ed:ff:3b:fe:35:1c:44:77:2e:5c:82:f1:06:d5:be:dc:67:
         8c:43:17:30:3a:70:17:50:b8:e4:69:fc:e4:45:ff:9b:d0:fb:
         87:12:59:5f:93:c5:80:f8:b7:07:ad:01:ca:97:c0:59:70:84:
         54:a0:bb:43:5c:ed:56:57:f5:57:15:5a:27:54:d5:58:ac:a0:
         d8:7c:a6:05:e6:0d:cd:b6:2d:64:69:32:60:40:a2:8f:ab:f4:
         59:0d:ab:cb:0d:56:96:43:d6:83:a6:e7:41:48:0c:0e:10:4b:
         46:ef:77:12:00:27:ad:d7:4c:34:97:77:31:11:40:df:a3:a3:
         0f:ad:f4:27:ad:88:62:6a:f3:3f:8e:87:38:0f:d6:93:b9:8f:
         64:2d:ce:6e:4b:41:74:dd:f1:6a:23:70:b4:72:8d:21:cd:ab:
         86:87:e0:ff:35:45:a8:c8:d9:50:a1:3c:96:40:ad:c5:36:d8:
         36:2a:da:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----