Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff2a657644dd273fead31212ddb5a6f34442b953.cer
File:                     ff2a657644dd273fead31212ddb5a6f34442b953.cer (raw, json)
Hash identifier:          pvP/UthnpxGXveIwZMbo7MoTQTuPkVd/jGq4JYam6pc=
Subject key identifier:   62:9D:F9:FE:15:38:02:FD:75:B6:D9:74:6C:D1:B6:FB:3C:C6:58:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E975EE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/536fb19c-42a6-49bf-8f83-e7202476d3e3/ff2a657644dd273fead31212ddb5a6f34442b953.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/536fb19c-42a6-49bf-8f83-e7202476d3e3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 May 2023 12:00:23 +0000
Certificate not after:    Thu 22 Aug 2024 20:19:48 +0000
Subordinate resources:    AS: 263741
                          IP: 131.255.12.0/22
                          IP: 2803:9b80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15300078 (0xe975ee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 11 12:00:23 2023 GMT
            Not After : Aug 22 20:19:48 2024 GMT
        Subject: CN=ff2a657644dd273fead31212ddb5a6f34442b953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:1c:36:51:15:76:04:be:1d:b1:16:ec:ee:14:
                    db:bc:ef:d9:63:eb:96:6d:b0:64:0e:38:d0:71:ef:
                    ae:8c:a5:ea:86:3a:25:7f:8b:7c:91:3c:a2:13:e6:
                    90:d4:f1:2a:52:4a:f8:be:95:50:30:5a:65:d3:81:
                    e2:0a:00:d9:90:1f:3e:61:d8:37:9d:d6:2f:48:fb:
                    46:3b:9f:6a:9d:04:50:06:a1:f0:51:44:85:75:36:
                    c5:45:c8:12:02:95:2c:c5:19:22:f3:30:0d:72:ac:
                    c9:77:31:3e:e4:85:3d:37:66:90:35:8f:4f:d4:14:
                    d4:89:45:7b:a2:2e:41:de:a6:cc:71:22:17:e6:8b:
                    3f:65:22:a1:53:39:b7:cf:16:bb:bf:49:69:a0:72:
                    03:64:79:93:9c:2d:05:d1:ff:a7:02:58:f5:86:d4:
                    17:ae:94:88:fb:38:06:d8:fe:1a:ae:b5:37:00:91:
                    0a:eb:61:2a:dd:e9:89:fc:27:fc:71:07:1a:55:54:
                    15:a4:e0:7f:99:d2:e3:b1:99:09:f0:45:2e:d0:3f:
                    99:35:10:53:93:5b:68:e9:76:0d:65:17:c8:17:74:
                    b6:e4:44:06:f5:6a:98:9b:c0:a5:02:f0:02:21:49:
                    64:60:1f:9d:a6:45:01:dd:7b:39:b1:c4:21:21:b3:
                    df:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:9D:F9:FE:15:38:02:FD:75:B6:D9:74:6C:D1:B6:FB:3C:C6:58:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/536fb19c-42a6-49bf-8f83-e7202476d3e3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/536fb19c-42a6-49bf-8f83-e7202476d3e3/ff2a657644dd273fead31212ddb5a6f34442b953.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.12.0/22
                IPv6:
                  2803:9b80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263741

    Signature Algorithm: sha256WithRSAEncryption
         ad:67:71:5c:8d:44:3a:3e:b7:e6:bc:4e:d8:4c:3e:b8:db:e2:
         ca:31:34:4a:7d:c7:38:86:21:58:39:d9:91:da:31:84:d6:28:
         79:37:a2:63:83:6d:6d:c8:c4:07:3d:84:fa:d8:d6:98:15:d2:
         ff:61:70:29:30:25:0b:f7:1f:ff:88:a1:77:3f:1e:7b:8c:d9:
         ba:1d:7a:6e:87:38:ec:74:da:8e:9e:ee:cd:66:de:1d:2d:e4:
         4f:be:76:1c:61:64:1b:de:f7:58:e8:1a:f0:9a:88:f8:88:00:
         de:1a:f8:82:2c:17:ef:77:d9:f0:f1:95:2d:85:f1:bd:f7:ab:
         f5:a6:64:71:a4:49:4d:c5:25:cd:e4:13:03:7f:8f:f6:4c:7e:
         cc:b3:9e:6c:eb:f7:aa:f8:4f:04:1d:bc:50:e6:06:20:90:af:
         bb:be:ec:03:9d:e6:04:bc:34:66:10:26:f3:0d:1b:6a:71:24:
         20:1e:3f:cb:d0:c1:1c:be:15:11:18:6d:09:fc:b2:2f:73:60:
         e2:fa:22:39:05:e5:cd:69:c4:f3:c9:6b:d2:63:c7:20:c4:14:
         4b:e5:aa:4b:b4:2f:a7:6f:ee:f2:ce:18:c3:27:0e:e4:6a:a3:
         15:60:84:c0:fd:9e:35:56:37:13:00:30:21:5c:0a:a6:af:f4:
         8a:36:eb:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----