Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f42af6d1b88847dce9cfe2e3f5f48d5425cfd7c1.cer
File:                     f42af6d1b88847dce9cfe2e3f5f48d5425cfd7c1.cer (raw, json)
Hash identifier:          xdjrcWgtwQV8CUQ9SBYqOBgFtBGfl2aotQbayBp9Dqg=
Subject key identifier:   28:C7:60:A1:AB:0C:57:7C:00:E3:A4:D7:07:00:CF:10:AB:66:93:47
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD4125
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/696130c8-e3d4-4981-bafd-59b17a0f3fe1/f42af6d1b88847dce9cfe2e3f5f48d5425cfd7c1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/696130c8-e3d4-4981-bafd-59b17a0f3fe1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 23:19:27 +0000
Certificate not after:    Fri 27 Sep 2024 17:19:07 +0000
Subordinate resources:    AS: 269854
                          IP: 45.189.76.0/22
                          IP: 2803:90e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16597285 (0xfd4125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 23:19:27 2023 GMT
            Not After : Sep 27 17:19:07 2024 GMT
        Subject: CN=f42af6d1b88847dce9cfe2e3f5f48d5425cfd7c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:bc:82:92:4c:88:0a:c0:37:7e:61:82:53:dd:
                    13:e2:89:da:94:65:e8:11:5e:b0:85:76:ed:aa:06:
                    5d:f6:f0:56:2d:a9:3d:c7:78:bc:3d:e4:fa:4a:10:
                    5d:12:38:a3:7d:80:ae:86:34:b6:4d:06:3c:72:e1:
                    92:fc:7b:7b:d0:4f:5d:64:6d:ae:4a:30:6b:81:57:
                    da:6d:60:5e:0a:10:25:1b:e4:8f:af:43:0d:c5:ef:
                    39:1e:8e:ea:ee:7b:32:b6:1f:bd:75:0b:b4:94:8b:
                    32:ec:4f:5a:55:be:81:8d:62:a5:da:de:7d:54:cd:
                    36:b2:56:78:b8:a3:6d:33:20:4c:30:6c:e6:34:64:
                    ac:28:be:a6:61:d5:11:2c:06:b4:49:8d:77:17:c2:
                    27:7e:2f:22:35:e9:12:18:64:86:77:0e:b5:80:b0:
                    f0:e1:da:21:e3:f7:e5:ad:c8:6e:dd:75:c1:5a:2e:
                    b0:71:71:fa:d5:68:4f:4e:27:09:01:76:99:e8:e5:
                    36:5d:34:44:16:4a:ec:24:b0:b7:c9:42:9f:ba:36:
                    97:05:24:89:e8:38:59:27:76:a9:d4:f3:ef:f1:c1:
                    c7:40:ea:14:47:8a:35:53:ab:b4:24:5c:ee:58:68:
                    66:35:bb:ba:fe:7f:43:d0:24:48:cc:cb:3b:92:e4:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:C7:60:A1:AB:0C:57:7C:00:E3:A4:D7:07:00:CF:10:AB:66:93:47
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/696130c8-e3d4-4981-bafd-59b17a0f3fe1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/696130c8-e3d4-4981-bafd-59b17a0f3fe1/f42af6d1b88847dce9cfe2e3f5f48d5425cfd7c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.76.0/22
                IPv6:
                  2803:90e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269854

    Signature Algorithm: sha256WithRSAEncryption
         35:20:1f:0e:0d:8a:dd:fe:b2:07:df:a4:f8:f1:07:f6:5f:ca:
         ef:ad:40:4d:c9:a8:5c:cd:1a:30:74:45:db:9a:06:77:68:83:
         42:cb:5f:04:89:da:35:ad:82:67:d0:ab:28:a8:41:35:44:a3:
         55:8f:04:d9:38:1d:bc:1c:f8:85:2e:c3:9b:ac:52:72:05:cd:
         83:b1:9a:95:ef:2b:c0:72:a6:8f:20:67:ad:9d:28:57:81:3a:
         da:e6:ff:ba:6d:08:48:41:69:0d:81:6e:cc:d8:ca:95:7c:da:
         d8:e0:46:0d:ca:9a:2a:dd:99:0c:64:09:42:c4:72:c2:6b:0b:
         e7:f9:d6:44:b9:e8:d8:35:8e:05:c9:2a:e2:34:4d:d5:93:fc:
         77:56:ca:12:3a:9e:2d:38:11:b5:57:e7:7a:fb:82:0f:90:4f:
         60:ee:b7:85:e1:34:c8:ed:14:87:88:5c:87:c8:81:29:c0:cf:
         a9:e9:dc:57:57:da:20:62:9e:0f:fb:83:2d:3b:39:cf:52:8c:
         ad:41:3c:1e:60:73:de:cd:d3:9d:5f:9a:ad:71:b1:bc:16:2a:
         9d:a4:8f:7c:e5:09:fc:83:4a:65:24:a5:9f:18:31:29:42:67:
         db:9d:2c:2e:b1:91:bc:cc:c9:0b:ac:b5:81:40:44:3b:c0:d4:
         d4:39:66:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----