Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa00761ad5cdb6c7221a923f00da8df0f602d14b.cer
File:                     fa00761ad5cdb6c7221a923f00da8df0f602d14b.cer (raw, json)
Hash identifier:          xWwQhhL+SAWsB8Y+stYKJ8GSiVjRRV69UwgYZCIvSSY=
Subject key identifier:   8E:BF:93:E4:8B:3B:CB:DE:7A:C9:6D:84:C7:C4:00:BF:8F:DD:CE:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6D96E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d1d0d203-8b59-4692-b722-96f12fb844f4/fa00761ad5cdb6c7221a923f00da8df0f602d14b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d1d0d203-8b59-4692-b722-96f12fb844f4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 28 Aug 2023 14:58:23 +0000
Certificate not after:    Sat 28 Dec 2024 13:40:36 +0000
Subordinate resources:    AS: 266744
                          IP: 45.232.12.0/22
                          IP: 2803:eb20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16177518 (0xf6d96e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 28 14:58:23 2023 GMT
            Not After : Dec 28 13:40:36 2024 GMT
        Subject: CN=fa00761ad5cdb6c7221a923f00da8df0f602d14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:74:55:5e:19:14:e8:df:81:5d:2d:0f:eb:ca:
                    29:83:98:50:87:f5:3e:0d:d2:83:9c:37:dd:45:7f:
                    d5:fa:2e:4e:ad:eb:7b:dc:3a:e9:5a:e6:0f:29:bd:
                    7d:4f:cf:2b:4b:3f:9b:70:a4:67:2f:f4:bd:75:6e:
                    db:ff:1f:d1:7e:9c:a1:9c:38:d2:37:4f:05:e9:e2:
                    22:26:73:04:36:a7:d4:27:25:1f:dc:71:42:e9:b3:
                    ce:72:9f:a5:ae:cf:b2:81:44:5c:e8:77:0a:06:28:
                    00:21:3e:20:31:48:87:ec:ff:90:6b:0c:2a:07:0d:
                    6e:e9:11:f7:42:92:2b:9b:49:16:1d:7b:55:c7:80:
                    83:5e:af:cf:37:04:c3:f3:92:8c:12:be:f0:53:0d:
                    28:67:3b:c2:5e:75:31:f3:9b:cd:ec:ab:4c:0d:d4:
                    02:a9:71:83:7f:ce:b5:02:89:a1:2e:6a:f6:82:81:
                    52:76:cb:c7:90:4d:11:e2:1c:24:b7:3d:8a:11:67:
                    97:d3:ef:04:d4:34:94:9e:76:0a:13:96:e4:2a:75:
                    55:be:ab:0a:56:ea:7d:88:01:7c:e7:22:45:f1:b8:
                    2a:bf:96:dd:1f:a3:42:42:c1:58:ce:37:fe:1a:ab:
                    66:13:7a:06:42:2d:0c:cd:87:49:c4:42:33:65:ce:
                    78:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:BF:93:E4:8B:3B:CB:DE:7A:C9:6D:84:C7:C4:00:BF:8F:DD:CE:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d0d203-8b59-4692-b722-96f12fb844f4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d1d0d203-8b59-4692-b722-96f12fb844f4/fa00761ad5cdb6c7221a923f00da8df0f602d14b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.12.0/22
                IPv6:
                  2803:eb20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266744

    Signature Algorithm: sha256WithRSAEncryption
         0c:ff:ee:3a:54:bf:85:fd:47:87:23:da:f1:36:92:06:90:11:
         e0:f1:e9:31:69:ca:8e:d8:76:04:67:01:07:2d:50:e7:53:99:
         43:cc:c9:98:7c:94:cf:7d:5b:b0:b2:01:58:14:26:3a:a3:4f:
         c8:fa:6a:5c:87:8c:48:be:cf:22:a5:34:1a:8e:0e:f6:e7:46:
         7b:75:79:9f:17:bd:fc:27:fa:4f:2b:93:06:22:43:68:03:6b:
         27:fc:9d:c2:3c:a1:f6:61:11:07:5b:6e:d8:73:04:fa:d6:7e:
         fc:66:97:d5:3d:8f:1a:96:05:40:0e:2c:f2:3a:23:70:52:55:
         4a:a1:f0:f7:76:7c:ab:28:d1:73:64:0c:2d:00:00:4d:e7:ab:
         5d:99:71:10:45:4e:5f:08:c9:e9:31:01:f8:b9:4a:fe:99:8c:
         4f:cf:ac:b7:27:db:ac:80:3d:70:92:3a:1c:68:00:9c:17:5c:
         77:69:b6:bc:57:4e:c5:75:50:6b:51:fd:3d:73:ec:7f:e5:f3:
         38:22:98:17:9e:3f:a0:7f:2e:9a:c1:6b:44:79:fb:53:74:22:
         00:61:fb:1e:33:b3:58:d7:5c:c2:ec:cb:b6:75:ec:c6:3a:70:
         27:27:b2:34:04:9d:96:69:e9:62:d1:17:24:4c:cd:16:4c:0a:
         43:c7:56:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----