Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb20cd8bba4d18d2ca1096908d0d930e7d52c5e0.cer
File:                     fb20cd8bba4d18d2ca1096908d0d930e7d52c5e0.cer (raw, json)
Hash identifier:          FVefuBApTw414f7EFskhcy1qtgdvypN57VelTi0BtRU=
Subject key identifier:   F2:ED:58:9E:80:4B:D1:50:DF:73:E2:92:CE:31:28:B5:94:C9:9A:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEAD9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ab6618f6-e854-4c14-b8d6-9abdd613298e/fb20cd8bba4d18d2ca1096908d0d930e7d52c5e0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ab6618f6-e854-4c14-b8d6-9abdd613298e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:05:28 +0000
Certificate not after:    Fri 28 Mar 2025 17:50:58 +0000
Subordinate resources:    AS: 264265
                          IP: 138.118.196.0/22
                          IP: 201.49.244.0/22
                          IP: 2804:2530::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16690590 (0xfead9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:05:28 2023 GMT
            Not After : Mar 28 17:50:58 2025 GMT
        Subject: CN=fb20cd8bba4d18d2ca1096908d0d930e7d52c5e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1c:a8:11:7e:14:b4:7a:b9:3b:06:18:7d:b8:
                    8c:53:06:41:56:9c:f6:5d:e5:50:35:c0:a7:99:3c:
                    ae:26:35:d6:52:76:34:86:bd:f9:dd:71:1d:3e:30:
                    42:21:9b:9b:cb:00:09:ca:0e:54:ea:8b:13:a7:ac:
                    89:9c:28:85:3c:44:6c:f4:43:f2:f5:68:0a:e0:70:
                    0d:e9:60:1f:b4:52:0a:40:6b:b5:37:12:a9:2b:7c:
                    12:38:a9:66:96:f6:4b:61:0a:9e:88:0f:35:97:dc:
                    0e:e9:59:9a:b4:ba:b9:58:9e:4f:b3:79:20:0e:4c:
                    5f:b6:ac:48:1e:30:91:33:18:03:cc:1e:ae:ee:11:
                    e5:cd:8c:30:73:22:62:91:5c:53:f8:21:bf:67:16:
                    96:77:0e:95:51:ca:5f:db:85:df:82:18:8a:79:02:
                    fc:41:49:5f:a6:71:84:6e:ee:a3:b9:ea:a8:48:61:
                    93:b0:4f:af:e5:d4:1a:85:e4:9e:10:89:49:d2:bc:
                    d0:bc:f2:c1:eb:11:85:d7:0e:09:6b:d5:da:48:99:
                    09:d5:59:58:c6:e7:6d:01:03:cf:74:d4:7c:b3:3b:
                    69:7a:12:06:41:40:e4:21:29:7f:d2:66:63:14:b6:
                    36:f6:52:c7:0f:92:56:41:0f:bf:68:66:c2:b7:07:
                    b2:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:ED:58:9E:80:4B:D1:50:DF:73:E2:92:CE:31:28:B5:94:C9:9A:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ab6618f6-e854-4c14-b8d6-9abdd613298e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ab6618f6-e854-4c14-b8d6-9abdd613298e/fb20cd8bba4d18d2ca1096908d0d930e7d52c5e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.196.0/22
                  201.49.244.0/22
                IPv6:
                  2804:2530::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264265

    Signature Algorithm: sha256WithRSAEncryption
         4c:e6:71:be:fc:a7:67:4e:9f:0a:c4:cf:6c:28:cb:4d:92:bb:
         ca:ed:27:f1:2f:52:4b:d0:06:54:87:eb:e2:81:4b:82:19:71:
         17:04:f0:f6:b3:eb:0c:b8:5c:5c:a1:71:f7:29:ae:24:44:8e:
         a7:18:81:7b:f4:8f:ae:a3:de:b2:f3:3b:b2:51:16:9c:19:a7:
         41:6f:fa:c8:4b:bb:f6:90:ca:ba:67:6a:90:70:f1:1c:5c:94:
         22:be:90:ca:18:fd:9d:28:b6:d7:6e:00:2f:78:84:d8:80:0d:
         a8:38:a4:c8:65:f8:ac:e7:51:e5:e1:23:17:c0:99:02:87:77:
         0a:93:b8:89:9a:55:64:ba:b1:d4:fe:2d:6b:7e:81:f0:cc:1c:
         79:cf:c5:53:91:3d:98:8e:f7:f1:88:40:e2:b8:58:19:96:db:
         63:61:90:c1:27:44:da:e4:7b:49:3e:3e:60:50:44:34:59:9e:
         82:5c:ec:82:92:4a:31:aa:bc:15:78:35:24:87:50:16:88:fb:
         d7:e5:37:e6:9b:b5:75:31:a0:fd:04:86:92:39:e1:82:ae:59:
         d2:88:d8:8d:6b:7f:e8:31:cc:74:ef:36:b5:7a:ce:08:53:44:
         f2:d7:3b:2b:8d:a0:11:b2:82:c7:96:eb:7f:21:fb:8c:9a:23:
         66:f1:af:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----