Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffbe384ce99d0b7d9fec882ef0bde13adae0b148.cer
File:                     ffbe384ce99d0b7d9fec882ef0bde13adae0b148.cer (raw, json)
Hash identifier:          dWit4+iklNVf1c6KHqFwcN67r2KJ1p8ZQ6q0+vCDFBk=
Subject key identifier:   B8:27:D9:A7:E5:07:D5:89:85:66:78:B0:74:85:71:0F:0E:22:0C:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEFBEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/969f85f0-1e6e-447a-91ff-f45f9217c7db/ffbe384ce99d0b7d9fec882ef0bde13adae0b148.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/969f85f0-1e6e-447a-91ff-f45f9217c7db/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:49:56 +0000
Certificate not after:    Thu 29 May 2025 15:31:02 +0000
Subordinate resources:    AS: 263878
                          IP: 138.204.20.0/22
                          IP: 2804:2720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16710635 (0xfefbeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:49:56 2023 GMT
            Not After : May 29 15:31:02 2025 GMT
        Subject: CN=ffbe384ce99d0b7d9fec882ef0bde13adae0b148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:7c:0e:1f:6d:cd:01:cb:91:c8:98:1b:d4:c2:
                    02:85:b9:e9:36:be:d8:f8:db:fc:ef:0b:c2:f3:35:
                    2b:4b:ee:54:cf:cb:5a:a8:82:65:68:14:d9:91:7c:
                    71:18:10:17:39:9c:d6:a4:2b:8e:5a:05:74:88:e6:
                    26:31:62:6c:90:d9:71:dc:8d:db:d1:31:8e:25:95:
                    8e:fd:12:3c:4f:2d:73:88:e7:26:dd:78:50:e9:58:
                    35:20:77:27:90:55:31:52:de:fb:b5:30:f8:5c:49:
                    72:db:05:4a:bb:9d:c0:30:ff:59:df:87:b0:29:20:
                    56:e0:56:a5:a5:15:0a:7c:f5:37:7c:e4:49:c4:34:
                    c4:a0:69:57:c9:a7:79:3c:63:76:ea:b1:ff:cb:02:
                    1b:7a:04:a2:53:2d:96:c9:90:f2:0c:3d:b3:79:bf:
                    af:9a:54:b1:6e:00:1d:af:23:ff:f2:2a:2e:7f:20:
                    f4:c6:b0:a3:c8:e7:09:7c:96:39:28:d8:83:67:ef:
                    e5:33:e7:79:b8:07:86:3f:14:7d:e5:5f:00:11:4e:
                    44:f6:63:64:11:4e:76:3b:12:b3:6e:0f:10:6d:d3:
                    2d:25:89:2f:31:a3:8d:fc:3e:67:be:42:06:eb:2b:
                    78:2b:25:69:cf:2a:07:4e:fb:2c:4f:d9:82:b8:6d:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:27:D9:A7:E5:07:D5:89:85:66:78:B0:74:85:71:0F:0E:22:0C:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/969f85f0-1e6e-447a-91ff-f45f9217c7db/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/969f85f0-1e6e-447a-91ff-f45f9217c7db/ffbe384ce99d0b7d9fec882ef0bde13adae0b148.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.204.20.0/22
                IPv6:
                  2804:2720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263878

    Signature Algorithm: sha256WithRSAEncryption
         2a:48:67:3e:ee:53:ba:48:c9:5b:44:bc:82:8f:51:dc:d3:2e:
         a3:08:37:16:8e:2d:fd:3a:e9:ac:41:b8:20:a4:54:e7:b4:9d:
         f6:f0:d8:d0:d5:cd:ed:2d:87:55:da:6c:aa:ec:ee:02:65:4e:
         39:57:ab:dc:2d:48:7f:94:1a:6c:12:78:c1:1a:89:15:61:23:
         94:6e:52:6b:b5:0a:f8:2b:e0:52:4e:05:d5:fd:f1:0c:01:5a:
         ba:68:fe:76:52:b0:c9:19:84:f9:d8:bd:ef:76:29:e2:ad:da:
         15:40:e8:b2:66:d0:fa:91:08:39:d7:98:33:3a:fe:5d:74:16:
         d9:00:60:c6:a1:62:e7:20:fb:2f:df:4d:24:04:51:64:36:2b:
         ef:1d:8f:1a:1a:0a:83:67:3f:f8:6b:13:91:ac:35:d6:cc:9d:
         5e:4e:e9:e0:9a:6b:94:26:b6:9d:a1:34:7f:9e:b2:b2:93:6d:
         f9:d1:e6:f3:89:18:9f:ce:1d:16:dd:cb:d6:ad:ac:29:1a:08:
         ae:ac:de:e6:59:3e:54:17:86:b4:7d:41:eb:35:64:a8:f9:68:
         23:0e:94:24:da:f5:4a:7a:cd:3c:25:ac:65:3f:87:31:c4:4c:
         70:94:2a:54:91:da:42:a5:d1:29:4e:1e:31:de:d2:51:d4:8b:
         2c:38:6a:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----