Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ee42e5a432e083cea8550e05b2516cca17761923.cer
File:                     ee42e5a432e083cea8550e05b2516cca17761923.cer (raw, json)
Hash identifier:          0/yN9k8H8C+1QBKy+g36lMeDDT/q4SKBKuecE/xZA2c=
Subject key identifier:   A7:7F:03:85:AD:0C:BA:96:76:57:49:DF:DE:03:EA:98:13:3A:17:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6FA8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/ee42e5a432e083cea8550e05b2516cca17761923.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Apr 2023 14:21:01 +0000
Certificate not after:    Fri 29 Mar 2024 22:41:04 +0000
Subordinate resources:    AS: 263241
                          IP: 192.100.254.0/24
                          IP: 2801:13:2000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15137421 (0xe6fa8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 24 14:21:01 2023 GMT
            Not After : Mar 29 22:41:04 2024 GMT
        Subject: CN=ee42e5a432e083cea8550e05b2516cca17761923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3d:4f:41:30:e1:ef:3e:f7:6a:90:4e:1b:4b:
                    fc:d8:e3:50:7b:34:26:5c:29:03:ab:e5:db:74:fa:
                    63:48:28:a2:f8:47:4b:e1:72:e8:2b:08:56:1d:4e:
                    17:a9:44:d6:ae:fb:86:7d:4b:7e:d8:0f:68:af:b1:
                    a0:9b:d2:c1:95:a5:0e:a0:be:ec:ec:3a:a4:8f:49:
                    ee:8d:42:ab:b3:0e:bc:b1:51:bc:3e:15:ff:ca:53:
                    70:d9:01:4b:a8:d9:6b:68:ee:75:e4:97:41:17:ec:
                    cb:fd:be:5a:79:12:06:ed:b0:80:f8:21:ed:23:2b:
                    3a:42:50:fb:09:98:9f:11:45:b3:80:bc:95:0b:0a:
                    f6:1b:c8:c7:4c:2c:53:9f:ba:e2:73:6e:08:83:28:
                    9f:0c:1b:f7:04:59:21:ff:67:48:7f:92:98:94:33:
                    23:4e:d7:a6:df:d8:f3:3b:03:cc:37:88:69:0d:88:
                    6a:39:ec:2e:fb:ad:f8:1f:cb:10:91:b5:2d:52:87:
                    73:46:fa:15:3f:e7:fd:db:78:63:0c:2b:fa:7f:2f:
                    b6:14:2f:a0:69:46:b8:b7:11:07:0c:2d:8e:c5:98:
                    e8:c8:a7:d6:73:7e:28:ef:e7:56:3d:67:93:e3:7f:
                    c7:ab:ed:68:29:a9:ce:c5:b2:5b:9e:e1:12:c0:a9:
                    7c:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:7F:03:85:AD:0C:BA:96:76:57:49:DF:DE:03:EA:98:13:3A:17:0B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5118c0ae-3c95-490d-9a25-46d08dc22994/ee42e5a432e083cea8550e05b2516cca17761923.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.254.0/24
                IPv6:
                  2801:13:2000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263241

    Signature Algorithm: sha256WithRSAEncryption
         01:80:81:15:a8:b6:6d:1b:54:dc:16:b1:1a:0e:ec:1f:f1:f1:
         a4:fd:9a:6b:9b:54:0f:f3:71:f7:eb:cd:15:e0:44:80:e4:c6:
         a9:3a:4e:8e:c4:e8:48:81:62:c0:f0:ec:4f:08:27:f0:d9:17:
         f5:3e:7c:af:c1:ea:59:61:94:e6:fa:4b:31:95:5d:03:1e:65:
         46:71:87:6c:47:8c:73:61:ba:61:00:f6:49:b4:56:cd:51:0a:
         f0:e3:04:04:a3:f2:d0:4a:3a:97:8d:6e:7f:ec:ce:9f:0a:d3:
         a2:2b:cb:c2:dc:dd:94:a6:a0:3f:25:7d:62:33:ea:c8:b5:bd:
         ec:9a:72:58:15:43:84:79:7b:f8:60:0f:d9:04:ae:28:93:86:
         37:dd:8a:d2:1c:44:21:bf:4d:df:5c:a0:e5:87:08:ce:82:57:
         8c:de:4a:4e:1c:49:f6:49:94:14:06:ae:80:64:3d:2f:65:fd:
         c3:28:d5:f6:dc:86:5a:7f:56:22:e8:db:2a:36:9e:30:7b:fe:
         05:c2:34:ba:61:ad:97:05:17:64:4c:68:41:4d:e5:f7:67:00:
         5f:23:bb:5c:c2:1c:6a:5e:62:94:35:b0:f2:b3:24:1a:0e:09:
         08:9e:ef:f0:d7:80:99:46:41:1c:59:94:c9:fd:57:68:86:7c:
         b5:4e:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----