Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb9943902f740e6857b6f9b99362832ca9005239.cer
File:                     fb9943902f740e6857b6f9b99362832ca9005239.cer (raw, json)
Hash identifier:          6FKFtu3qRaCNNVGnMxGCcKn9ljF6qGQgwLmaBezKLws=
Subject key identifier:   97:7A:D8:C4:AD:55:9E:EA:2D:A9:DF:7E:8A:03:CB:AD:04:E6:C4:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF1663
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fe4d9688-c1e9-4f24-b4d6-9f1e5134996f/fb9943902f740e6857b6f9b99362832ca9005239.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fe4d9688-c1e9-4f24-b4d6-9f1e5134996f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Jun 2023 12:52:16 +0000
Certificate not after:    Thu 04 Jul 2024 19:00:03 +0000
Subordinate resources:    AS: 265813
                          IP: 192.141.228.0/22
                          IP: 2803:d820::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15668835 (0xef1663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 22 12:52:16 2023 GMT
            Not After : Jul  4 19:00:03 2024 GMT
        Subject: CN=fb9943902f740e6857b6f9b99362832ca9005239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:13:49:95:a3:91:8a:40:7f:6d:d5:19:28:70:
                    72:da:e2:6d:5c:79:4e:73:7f:fe:ee:a2:08:b3:8d:
                    ab:a3:a2:47:10:a7:2e:2b:28:f2:63:33:d0:b2:79:
                    11:25:f1:5e:26:c1:67:0c:ae:aa:cb:c9:1c:fb:12:
                    03:2e:73:54:b6:27:e8:42:c3:bc:79:e9:69:39:93:
                    00:e2:6f:c3:5a:7c:40:6b:72:fb:8d:13:aa:5a:12:
                    e8:d2:5a:54:6f:b4:c0:cd:59:1a:c7:f4:a9:f0:a7:
                    c9:1e:b4:42:b3:e3:e0:df:ad:0f:9d:42:28:fe:12:
                    41:42:50:88:2c:9e:9a:59:81:95:99:f8:de:57:d9:
                    cb:77:7e:58:f0:c1:7a:5e:55:c1:bb:69:19:5e:e7:
                    53:9b:cf:ee:2b:76:e3:1b:67:d4:2d:69:ef:6f:ef:
                    95:44:80:cc:26:33:78:90:6f:b4:8b:d5:77:1c:f3:
                    c3:ee:95:09:29:5f:66:52:61:61:9c:54:1a:fd:0b:
                    68:27:e3:3b:e2:3d:8c:a6:51:c7:a5:3f:1b:de:e4:
                    71:3d:e8:a8:ac:06:8f:a5:91:eb:61:87:a2:d7:1e:
                    cd:e5:f7:0b:7b:7f:58:2c:02:71:21:ca:ab:b3:28:
                    fa:8b:c2:6e:1f:c6:71:d6:5d:68:38:c0:20:fe:4c:
                    a5:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7A:D8:C4:AD:55:9E:EA:2D:A9:DF:7E:8A:03:CB:AD:04:E6:C4:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fe4d9688-c1e9-4f24-b4d6-9f1e5134996f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fe4d9688-c1e9-4f24-b4d6-9f1e5134996f/fb9943902f740e6857b6f9b99362832ca9005239.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.141.228.0/22
                IPv6:
                  2803:d820::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265813

    Signature Algorithm: sha256WithRSAEncryption
         b1:5a:d1:89:5f:75:9c:86:a9:96:a5:34:28:21:11:58:8c:c2:
         99:79:2c:74:f6:09:b6:4a:1a:1a:9e:9c:76:65:ff:72:60:3e:
         5a:dd:5f:67:79:a4:8e:7f:7d:aa:ae:60:47:10:6f:5e:22:c6:
         ec:57:53:dd:21:27:96:69:bb:09:03:ee:9f:0a:22:a7:da:62:
         d9:b6:6b:4f:9f:a2:e4:89:c9:aa:f3:d8:3a:59:c8:c3:f8:30:
         96:ef:fa:3a:15:68:41:7c:0f:69:50:19:1e:cb:0d:d6:15:39:
         4e:8e:43:15:91:ec:b1:be:94:e9:9c:7a:c4:a4:6b:8b:cf:88:
         95:e6:b3:07:93:8a:85:58:53:69:b3:64:2f:36:1a:87:fe:fc:
         e1:83:c7:c8:fe:dd:ee:18:93:79:9c:87:ad:92:2d:5e:ed:c0:
         1c:37:d4:97:41:45:5d:65:6c:c4:60:c5:3f:87:9a:97:19:6a:
         b6:02:56:36:51:00:8f:19:e1:e2:7a:8f:00:c9:4f:d0:df:9f:
         9a:f4:b3:b2:7f:a2:2d:0f:28:94:e7:6d:df:bc:ef:e3:f2:9a:
         12:44:8d:e0:5a:c9:de:70:25:24:8a:c9:46:54:06:73:e0:60:
         35:d0:67:34:2f:58:c8:17:7a:bf:80:3e:84:57:1b:7e:d1:6b:
         6d:e8:bd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----