Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa120909414973eeadc2b7772a99dfb00250a1e6.cer
File:                     fa120909414973eeadc2b7772a99dfb00250a1e6.cer (raw, json)
Hash identifier:          IudH+PBIHsWNQAF7XOC51YPQ+q7OAEGyhs5haRM3ZWk=
Subject key identifier:   9D:C4:53:A7:8C:FF:93:F7:5C:B0:B7:52:35:D4:F8:68:91:3B:8A:61
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E77A53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/fa120909414973eeadc2b7772a99dfb00250a1e6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 10:14:03 +0000
Certificate not after:    Wed 12 Feb 2025 17:27:51 +0000
Subordinate resources:    AS: 262229
                          IP: 170.239.88.0/22
                          IP: 186.5.240.0/20
                          IP: 2803:7400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15170131 (0xe77a53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 27 10:14:03 2023 GMT
            Not After : Feb 12 17:27:51 2025 GMT
        Subject: CN=fa120909414973eeadc2b7772a99dfb00250a1e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b7:c4:b8:d1:01:4b:ff:e0:7c:e8:d6:36:a8:
                    c3:6b:63:51:61:22:01:cc:3e:ec:f2:15:a7:43:89:
                    30:97:6b:fd:16:26:6a:2b:3f:ff:c1:7f:46:b4:2f:
                    1e:be:af:4d:16:0c:eb:5e:c8:b8:49:4a:29:88:cc:
                    ff:33:4e:20:25:0d:0b:86:74:ca:46:58:e0:ff:8b:
                    85:0a:ab:7f:47:25:0f:b4:b6:39:08:12:80:c0:9c:
                    d4:c3:5e:9a:c8:c6:26:92:fb:e8:05:3a:57:a5:f6:
                    1e:1d:43:4a:14:05:2f:9f:66:26:ac:64:79:96:9b:
                    c2:90:6e:b3:ac:6b:77:eb:d1:d7:d2:ab:8c:a1:7a:
                    3c:88:20:4a:99:c5:c4:f6:66:37:d1:b9:14:d3:95:
                    13:d5:dd:83:31:3c:e5:d3:4a:48:c2:5e:55:7f:31:
                    c6:cc:e6:c7:75:bc:23:8b:95:58:34:c4:52:a3:55:
                    8e:60:e8:11:a9:c3:6d:2d:35:09:86:9f:e3:9e:72:
                    ab:a3:a6:05:8e:ea:9f:9a:33:b9:8a:63:ca:eb:c8:
                    9e:27:aa:15:da:b8:35:be:4c:c6:67:64:ca:11:e4:
                    cc:a8:9a:05:98:33:9b:ed:82:05:4a:e3:2d:8d:c0:
                    39:df:31:54:6d:8a:6f:86:29:8b:23:e9:0c:85:e9:
                    16:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C4:53:A7:8C:FF:93:F7:5C:B0:B7:52:35:D4:F8:68:91:3B:8A:61
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c58524a6-d497-4034-b7e0-b0875ced2f4e/fa120909414973eeadc2b7772a99dfb00250a1e6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.88.0/22
                  186.5.240.0/20
                IPv6:
                  2803:7400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262229

    Signature Algorithm: sha256WithRSAEncryption
         09:4e:a1:20:08:8f:ae:30:9b:22:2a:43:aa:60:2d:53:a9:08:
         7b:6b:7a:87:b9:97:b5:b4:22:8b:3e:44:c6:18:47:e7:d3:7f:
         3b:be:16:f8:56:03:2a:15:9f:18:cb:bf:ed:f3:6c:0c:24:8e:
         52:bd:03:5b:df:f7:5a:17:af:a3:55:2e:59:69:78:f5:c6:74:
         a1:64:31:38:45:22:2c:12:ea:5d:ad:47:2d:46:36:4f:e3:46:
         67:45:48:73:55:c7:72:11:e7:8e:d6:c5:20:be:b5:77:3e:5f:
         e6:37:d8:e7:ba:87:24:c3:bb:b3:56:3a:61:88:a5:c1:39:70:
         6b:e7:89:76:93:56:6f:e4:e5:b9:f4:e4:3a:a8:62:c5:f2:5b:
         71:26:00:01:68:a6:d3:b3:db:4a:6d:9a:74:c4:71:1c:75:28:
         db:42:98:4c:63:d9:94:3e:4c:18:76:af:a9:95:b0:78:d1:ca:
         53:1e:7f:05:cf:f3:97:44:46:44:fa:dd:f1:a2:45:78:25:87:
         93:01:91:39:1d:d5:ba:95:63:14:ca:96:fc:fd:18:b3:a7:c9:
         06:e0:aa:55:56:dc:a3:e6:fc:fb:68:00:88:30:c6:e8:ad:56:
         a9:3b:0a:cb:ac:36:0b:8b:ba:25:32:bf:61:23:5c:94:2b:10:
         4a:83:7f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----