Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f709643f75cbea6c0174188b2461ed79344327e8.cer
File:                     f709643f75cbea6c0174188b2461ed79344327e8.cer (raw, json)
Hash identifier:          N5gJ1sx5Zl+/JnaVNUqS4LbCUIzrbdvhcwyDAWwvolg=
Subject key identifier:   34:C0:3D:F4:DB:1D:D2:6E:9D:5C:FA:F3:26:E9:E3:08:4A:1A:BE:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E51750
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/418acc83-83bc-4582-a370-ccfdf254fb29/f709643f75cbea6c0174188b2461ed79344327e8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/418acc83-83bc-4582-a370-ccfdf254fb29/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 13:55:09 +0000
Certificate not after:    Fri 12 Apr 2024 03:16:19 +0000
Subordinate resources:    IP: 190.15.64.0/20
                          IP: 2803:f180::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15013712 (0xe51750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 13:55:09 2023 GMT
            Not After : Apr 12 03:16:19 2024 GMT
        Subject: CN=f709643f75cbea6c0174188b2461ed79344327e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:8a:db:d4:d3:cb:f3:25:24:01:98:50:ef:99:
                    92:86:e1:f3:08:f1:df:70:ef:39:93:f4:65:75:02:
                    e5:dc:7f:6d:d3:c8:7f:7e:07:4c:f3:7e:8b:c9:a7:
                    c5:a7:d6:4d:ea:9c:c4:a0:ff:f4:10:06:ff:16:4f:
                    41:ef:26:59:8e:c9:6e:90:14:bb:50:cd:ce:f2:2b:
                    4f:1f:6f:18:6e:e7:fd:ab:58:2c:15:df:e2:27:9e:
                    e7:b9:fb:25:41:d4:1b:2e:b6:0c:01:e6:02:9c:f2:
                    c7:80:f1:58:7a:80:59:00:57:d5:eb:e2:eb:ef:9b:
                    4c:e0:8d:de:52:d9:59:7d:41:ca:d2:8e:3b:be:63:
                    a9:68:22:44:34:99:25:6a:ad:ab:25:3d:ed:f7:23:
                    10:13:c8:4a:9e:53:bd:c8:8d:c9:2b:e9:25:7f:63:
                    16:27:a2:e9:cb:5b:ba:88:f9:01:7e:92:3c:4d:79:
                    9a:e3:1c:2e:f0:08:f8:3b:1d:53:90:86:0d:61:88:
                    97:45:87:ce:0c:17:84:ad:cc:ba:18:a2:bb:9e:1f:
                    7e:1b:65:ac:cf:dc:f1:a0:52:99:ce:72:b0:09:2c:
                    0e:68:52:43:43:13:de:2d:01:95:a8:2c:cc:c9:b6:
                    d4:22:39:a0:5c:07:16:7a:0b:38:06:d7:d0:31:e3:
                    ab:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:C0:3D:F4:DB:1D:D2:6E:9D:5C:FA:F3:26:E9:E3:08:4A:1A:BE:49
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/418acc83-83bc-4582-a370-ccfdf254fb29/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/418acc83-83bc-4582-a370-ccfdf254fb29/f709643f75cbea6c0174188b2461ed79344327e8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.15.64.0/20
                IPv6:
                  2803:f180::/32

    Signature Algorithm: sha256WithRSAEncryption
         25:a7:b1:e8:cf:77:1e:02:20:8a:c7:a4:8b:e9:4d:b4:64:95:
         42:21:28:f9:21:19:b2:90:d3:50:d7:26:af:d6:4f:da:8a:ff:
         96:7a:43:00:b5:53:b4:a7:9d:9e:57:f0:54:e1:93:ae:03:0e:
         45:83:bb:0b:ae:70:e5:96:28:f6:22:68:89:4a:dd:d4:63:8d:
         2f:73:91:5f:2d:9e:e0:af:2f:52:fc:e7:ce:48:af:09:f6:aa:
         24:4c:9a:3a:47:c0:dc:7a:9b:26:ee:96:6f:17:db:64:06:38:
         18:42:96:79:de:2e:98:9b:fd:19:8b:0a:0d:83:eb:d6:f6:68:
         26:c0:1f:88:26:c0:49:84:28:b1:be:20:19:2d:3f:7b:da:38:
         34:63:9a:3a:8b:0b:9b:25:f3:72:df:d3:79:c2:53:47:a4:3d:
         f3:7a:c0:b5:63:f6:f5:d1:ff:92:d1:a5:48:35:60:c9:ed:d2:
         a8:cf:ac:62:f4:b1:df:20:07:19:2c:21:0f:72:19:b3:62:33:
         ef:30:5f:31:93:dd:62:63:4f:14:cb:d8:4e:61:02:74:d9:59:
         dd:0b:5a:40:35:8c:00:18:d8:f5:1d:23:6f:da:47:a9:4a:e2:
         4f:0e:30:3a:df:e9:f1:08:c8:05:32:6f:bf:84:e9:f0:ea:5d:
         20:fc:eb:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----