Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.cer
File:                     fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.cer (raw, json)
Hash identifier:          gJFRSBHF30wMsa8q6BitQtEg7WPsejv5cyDxAgZ9W54=
Subject key identifier:   51:C7:2C:1D:9D:BC:43:92:CB:27:02:1A:88:CD:11:98:70:EA:25:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3DACC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 17:32:42 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.1.164.0 -- 200.1.171.255
                          IP: 200.1.184.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14932684 (0xe3dacc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 17:32:42 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=fcfdf1d6c55d4bb157af7c46678c6b0722dd3793
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:50:38:2b:fc:6b:95:5f:49:76:af:5b:8c:
                    87:13:dd:6e:35:89:1c:22:a5:9e:bd:1b:f0:94:a7:
                    f5:f0:a1:e3:bd:39:67:7f:f8:20:55:41:ba:9d:e7:
                    92:83:d9:fa:12:e6:fd:a1:35:bb:b0:d3:20:83:a9:
                    c7:1a:85:44:e9:a9:34:c2:2d:54:67:a5:68:9e:9e:
                    32:0d:11:2f:8e:e3:8f:d2:c3:1a:6b:7d:a7:20:74:
                    72:81:9b:c9:51:f6:95:5f:db:40:57:dd:8e:37:29:
                    33:26:6d:8b:ad:1a:65:69:39:e1:26:50:a1:b3:28:
                    fa:22:03:c2:c1:9f:b7:51:50:7a:4d:4b:73:12:93:
                    42:95:b0:b2:d1:48:4c:3b:ba:dd:b6:8b:ba:67:ee:
                    e2:61:3e:32:3b:6c:e2:eb:e8:8b:86:64:0f:d8:32:
                    ca:3b:e4:1c:02:98:25:5a:e9:66:33:73:da:c7:26:
                    9d:32:06:ab:f6:0d:b9:76:20:82:72:ce:65:9d:12:
                    77:ac:a3:54:50:92:0c:e0:3b:58:fc:66:0f:a7:16:
                    1a:b4:92:ec:bd:32:22:d3:93:80:3d:8e:f5:c5:b2:
                    4a:20:f3:b2:5a:fb:54:a9:a1:f7:c9:71:7b:27:74:
                    f6:43:66:d2:33:6c:90:5c:36:4f:8f:d8:7f:13:8b:
                    64:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:C7:2C:1D:9D:BC:43:92:CB:27:02:1A:88:CD:11:98:70:EA:25:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/340dbbad-1922-47db-89fd-e69c8f5f3e62/fcfdf1d6c55d4bb157af7c46678c6b0722dd3793.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.164.0-200.1.171.255
                  200.1.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:7c:4c:59:5c:ac:69:7d:c7:cc:f3:41:b4:e9:9d:27:8e:57:
         ac:85:b8:79:d6:21:8a:11:ea:9c:56:db:86:af:38:90:7f:1c:
         d9:3f:e5:81:bd:25:68:15:1d:40:8b:2a:4a:eb:ab:1e:4e:8e:
         5d:5d:e8:29:15:49:e8:e3:5c:9a:0a:cb:a4:0a:e4:cb:ac:14:
         8d:56:a5:9a:4c:32:78:88:c9:3c:eb:0f:0e:7e:50:e9:ab:8a:
         ae:22:f7:b2:54:e7:2b:18:2c:cd:3f:57:ad:3f:ce:5c:50:0d:
         f3:f3:5f:0c:c2:a4:07:d6:62:2b:e1:c9:fc:a1:21:7e:e7:82:
         4c:1e:3d:ab:57:88:3d:ca:58:37:39:01:ce:0a:58:0c:5e:b1:
         22:39:ff:23:f7:cd:06:f1:e2:94:25:55:07:12:cf:3d:83:f2:
         d0:06:a8:7d:0a:d5:9c:c6:2e:c0:76:8b:86:88:dd:3d:ea:ec:
         28:dd:6f:a8:89:d9:68:da:df:44:1f:11:5b:93:ee:8c:05:30:
         fe:dd:5c:32:13:33:7a:a7:92:eb:6d:0b:3a:10:19:96:81:31:
         1c:a7:cb:15:2c:de:c4:8e:b1:cf:9c:02:cb:bc:8a:18:6c:04:
         96:a8:da:9a:17:86:0b:9d:90:73:cb:71:85:b0:c2:58:53:7f:
         27:9f:7e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----