Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.cer
File:                     f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.cer (raw, json)
Hash identifier:          BSiFl9bqY9XJGa6vos1Am/dR32+8ZbGVg+vt2qjopOA=
Subject key identifier:   C4:2F:78:89:94:8D:6D:72:61:BA:A2:15:98:4D:A1:B2:32:C3:88:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEEB86
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7223f488-adde-466f-9ad1-b9fe3253c263/f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7223f488-adde-466f-9ad1-b9fe3253c263/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:48:57 +0000
Certificate not after:    Mon 30 Jun 2025 20:06:04 +0000
Subordinate resources:    AS: 52759
                          AS: 262537
                          IP: 177.38.200.0/21
                          IP: 177.72.0.0/21
                          IP: 2804:5c0::/32
                          IP: 2804:b3c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16706438 (0xfeeb86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:48:57 2023 GMT
            Not After : Jun 30 20:06:04 2025 GMT
        Subject: CN=f2cf0606b59dec8fe8f9da677d4580c7944c9f9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:52:e4:14:8f:92:72:48:5d:8d:44:da:4b:58:
                    f7:eb:b4:81:f2:dc:33:d9:db:d3:99:3d:5d:0c:e8:
                    4a:11:35:5e:f7:97:74:14:8e:8c:06:b4:e9:01:c8:
                    d5:6b:07:7a:5a:ce:d5:55:4e:c6:b4:ad:7e:e0:57:
                    42:14:9e:6b:0a:51:af:6c:64:9e:5a:20:a1:86:06:
                    26:7b:33:75:df:7d:98:fc:ab:3a:2b:ea:26:af:83:
                    22:b7:0e:84:ca:3e:de:c6:bb:6e:12:46:05:8b:c3:
                    21:fa:cb:80:ca:54:97:a0:69:dd:f6:c8:8b:32:a6:
                    47:46:c9:28:27:9d:ed:b7:80:82:52:a2:05:9d:83:
                    74:67:e6:55:ac:50:16:66:16:04:32:46:f5:2e:fd:
                    16:30:59:6a:9e:1c:a5:a2:c8:b1:ed:4e:47:ee:d8:
                    e2:1d:9a:72:1c:e3:96:49:a7:3b:e6:e4:0c:f4:78:
                    58:39:b7:0f:c0:81:af:2b:3b:f3:69:b5:e6:60:04:
                    47:13:e7:8f:ab:92:b6:56:00:e9:e4:71:ff:77:26:
                    4a:6c:ac:78:f4:1f:58:93:40:48:44:2d:8b:10:7b:
                    57:5b:d6:7c:25:1f:a0:4b:2d:e4:a6:b5:4c:01:36:
                    bf:6c:74:5b:86:e0:0c:3c:84:0f:6f:97:1f:b5:ac:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:2F:78:89:94:8D:6D:72:61:BA:A2:15:98:4D:A1:B2:32:C3:88:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7223f488-adde-466f-9ad1-b9fe3253c263/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7223f488-adde-466f-9ad1-b9fe3253c263/f2cf0606b59dec8fe8f9da677d4580c7944c9f9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.38.200.0/21
                  177.72.0.0/21
                IPv6:
                  2804:5c0::/32
                  2804:b3c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52759
                  262537

    Signature Algorithm: sha256WithRSAEncryption
         ac:ae:8a:71:a5:7b:a8:13:f8:00:88:3c:6e:50:e2:b5:1d:aa:
         b3:64:86:06:63:e5:88:fd:b1:1d:e9:6f:f6:84:d6:fa:24:26:
         d5:35:a3:f2:56:ef:1c:4c:b0:b4:ff:fb:5f:10:ad:01:a0:58:
         f1:19:0b:87:11:53:68:89:91:b9:00:2b:62:fc:ea:8c:26:a4:
         fd:b1:b7:ba:ae:4a:90:da:f4:1d:f1:9b:45:6e:25:e6:bd:11:
         ae:f6:c5:c5:6a:af:eb:05:26:1c:69:d8:ef:22:f7:0b:0d:4c:
         53:ba:89:f8:31:2d:4a:6c:02:0d:55:28:b2:28:fc:81:dd:f3:
         d0:e6:40:68:fd:99:6a:ce:b0:7c:17:95:e5:b8:5a:49:74:a6:
         1a:ce:5c:d8:62:45:2c:73:4d:dd:be:7f:cb:15:16:24:0a:28:
         c8:4a:36:cd:86:80:73:db:24:3e:b3:76:72:ce:6c:19:0d:7d:
         fd:ab:6b:35:f3:dd:0a:a2:72:cc:8b:d5:76:a2:ac:7a:95:64:
         b9:18:29:80:4b:71:f5:73:34:f0:c6:d5:5a:11:dd:05:f3:7c:
         8a:05:84:1c:22:e4:28:bc:94:27:9f:58:0c:6f:e3:75:59:be:
         07:d9:75:ee:ef:32:ec:f0:84:87:7a:1b:24:c4:d2:32:9e:7e:
         36:e0:6b:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----