Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f0f0d602a05c0412b99711514ac98eae77c4a54e.cer
File:                     f0f0d602a05c0412b99711514ac98eae77c4a54e.cer (raw, json)
Hash identifier:          5g6l0C5RApXZcADQoW3+cm1kU5wpA8SXFT25Vvcs00k=
Subject key identifier:   DF:0D:7E:B5:39:BF:7C:48:25:69:F5:1A:A4:E3:AB:DD:95:7C:25:46
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF9AAC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/03886cf6-8c05-466b-a3e8-62dce632be09/f0f0d602a05c0412b99711514ac98eae77c4a54e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/03886cf6-8c05-466b-a3e8-62dce632be09/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Feb 2023 20:09:59 +0000
Certificate not after:    Tue 24 Sep 2024 21:13:23 +0000
Subordinate resources:    AS: 28098
                          IP: 170.150.120.0/22
                          IP: 190.3.176.0/21
                          IP: 2803:7b40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14654124 (0xdf9aac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 22 20:09:59 2023 GMT
            Not After : Sep 24 21:13:23 2024 GMT
        Subject: CN=f0f0d602a05c0412b99711514ac98eae77c4a54e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:c2:48:9c:ad:48:45:a7:24:44:bf:09:53:
                    91:34:57:71:42:5d:b5:2d:98:70:a4:45:cc:03:50:
                    85:65:01:d6:26:35:ea:1a:78:b9:6b:d0:b3:0a:34:
                    8d:32:46:24:8b:d9:bb:81:7e:8b:db:2f:b4:58:48:
                    8f:40:a7:12:84:d1:15:54:40:bc:30:56:ff:5b:20:
                    79:88:e8:32:b9:93:c1:2f:1a:80:43:e2:ec:51:e9:
                    c6:76:6a:27:89:7e:3f:7a:81:b6:ee:bc:21:4f:3a:
                    03:44:57:1a:e6:8c:17:32:b2:6d:0c:b3:eb:b7:ff:
                    18:89:52:d0:1b:74:f6:dd:6c:7d:a0:ea:d1:66:ca:
                    ec:61:2c:73:99:76:25:66:57:e2:9d:97:4d:d9:d9:
                    e1:11:4d:01:91:2f:82:3d:90:3f:ef:98:8f:8d:9e:
                    6e:83:36:e7:71:84:23:b5:47:82:06:a9:f6:16:84:
                    15:ac:39:c7:bc:4a:78:c7:1f:f0:da:c3:3f:e3:ed:
                    d0:2c:c0:74:8c:38:c4:75:cb:bc:11:33:42:fc:b7:
                    b3:14:70:f8:c9:f9:c0:04:7d:d3:d9:b5:15:78:19:
                    fa:9c:4e:a8:ed:a1:44:ef:ec:93:6e:0c:14:36:f5:
                    ec:07:5f:92:13:af:8d:e8:00:8a:98:e5:51:52:b9:
                    ca:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:0D:7E:B5:39:BF:7C:48:25:69:F5:1A:A4:E3:AB:DD:95:7C:25:46
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/03886cf6-8c05-466b-a3e8-62dce632be09/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/03886cf6-8c05-466b-a3e8-62dce632be09/f0f0d602a05c0412b99711514ac98eae77c4a54e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.150.120.0/22
                  190.3.176.0/21
                IPv6:
                  2803:7b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28098

    Signature Algorithm: sha256WithRSAEncryption
         ae:91:4b:59:31:5d:39:4f:91:4c:50:b6:a6:5f:9e:b0:d7:ba:
         01:81:48:22:9c:c8:88:df:4c:2f:c5:d8:05:3e:77:af:87:34:
         21:27:a8:00:af:17:9c:82:4e:d6:72:1f:dd:2c:3e:8a:c9:74:
         8b:40:27:7a:66:bd:4a:c1:6e:af:3e:4d:ec:0f:0b:1a:35:ee:
         e0:ae:71:a2:1e:68:cf:d5:6b:85:1d:16:86:69:90:d9:e2:3f:
         ee:a4:09:1f:53:10:3a:5f:9c:ba:3a:6e:e4:67:9c:29:0d:6d:
         09:1b:67:c4:65:49:6d:4e:1a:3b:f3:96:29:a0:85:5d:1e:e6:
         71:a5:f9:cd:d6:17:df:4b:bd:6c:af:20:6e:f4:a7:fa:9e:5a:
         43:55:ff:51:d9:c5:9a:b9:58:3e:8b:7b:cc:56:8c:3c:ed:d3:
         e6:b7:28:3d:9e:af:95:57:81:eb:85:69:55:bf:65:9f:93:8f:
         96:d9:22:bf:06:bb:9a:f6:e5:e0:d7:a3:82:93:35:1b:d3:97:
         47:32:42:7c:7e:8d:25:e7:53:5f:d8:cd:00:5e:3d:3c:4f:f1:
         91:43:b3:42:44:bf:2f:ba:fe:f5:9b:7d:40:c4:69:b3:4e:26:
         2f:71:09:9d:b9:c1:20:28:cb:7f:38:17:80:1a:56:6d:82:7a:
         40:f7:a9:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----