Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer
File:                     c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.cer (raw, json)
Hash identifier:          aTDyL1a5rmmBd8btVV7GLyiPogMD9vRJQeXxuBZ9LD0=
Subject key identifier:   4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD8EFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 10 Jan 2023 21:08:50 +0000
Certificate not after:    Wed 20 Nov 2024 17:26:15 +0000
Subordinate resources:    AS: 270152
                          IP: 177.124.84.0/22
                          IP: 2806:3e3::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16617213 (0xfd8efd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 10 21:08:50 2023 GMT
            Not After : Nov 20 17:26:15 2024 GMT
        Subject: CN=c1e38cbcb318a6c50f4577b142d66a8cd370a5e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:f0:09:85:11:c1:91:6e:e2:d7:e6:55:c4:
                    ee:eb:26:c8:2e:3c:cd:63:98:29:4f:8d:ae:5a:85:
                    84:71:70:e9:8a:bb:84:3c:9c:5d:da:e2:88:4b:29:
                    6f:0f:11:b6:a0:c6:70:cc:45:f3:5d:8b:9c:be:3c:
                    1a:85:08:77:62:fc:d1:06:63:1c:ba:9a:2f:01:b0:
                    ce:10:b4:95:12:ce:c8:34:d5:8e:e1:02:ae:3a:f6:
                    42:7d:ed:d9:e0:96:8e:11:91:e8:76:50:7a:52:e4:
                    b0:79:23:8d:81:64:4e:8d:b4:bd:90:4c:8d:ac:be:
                    5a:27:42:40:95:b4:26:27:68:c6:60:c9:1d:47:4f:
                    da:36:9f:c6:53:8a:52:9c:5a:52:c5:6e:92:93:62:
                    07:8c:59:37:9a:aa:0b:8a:5c:c9:b7:5d:bc:51:29:
                    1e:91:af:48:62:f6:b5:05:e7:ac:d2:9e:cb:5b:f3:
                    55:ec:51:e0:4b:32:1c:b7:3e:ba:d1:4a:aa:6f:2a:
                    f6:ea:83:bf:fd:4a:07:42:b8:87:44:f1:b7:6b:51:
                    d5:91:14:f3:66:84:60:89:34:18:d0:7e:0f:a9:ba:
                    55:5f:4a:b4:e0:ab:97:fe:e7:88:df:5e:4d:1e:2e:
                    a1:0b:af:23:41:f0:3c:ca:55:3e:03:c9:86:93:cb:
                    ee:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:85:CB:EE:6F:82:F1:57:9C:AE:7C:DB:E9:99:D1:31:89:31:FB:AD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8178a0e1-ac11-46c8-aaf8-24c07ef396f6/c1e38cbcb318a6c50f4577b142d66a8cd370a5e7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.124.84.0/22
                IPv6:
                  2806:3e3::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270152

    Signature Algorithm: sha256WithRSAEncryption
         58:46:ca:c7:b2:57:e5:fb:db:80:c4:30:f2:0b:08:3e:a9:d9:
         de:6e:e9:eb:a5:c6:ac:71:a6:54:0e:c8:41:ea:3d:98:65:05:
         a3:94:f3:cd:25:8c:f0:6e:bb:13:4f:65:f3:05:59:28:e9:e8:
         29:6c:dc:e0:dc:e2:cc:77:d3:68:5e:a1:90:6c:c9:3a:8a:80:
         d3:92:f8:3f:65:6c:91:9a:72:31:67:8a:f8:8c:64:8d:5e:4c:
         d7:73:fd:c2:db:3e:4c:c2:46:dd:0e:16:ce:3d:d5:3e:6e:fc:
         4f:12:d4:e8:73:9f:74:3c:73:e1:6a:fa:08:ae:14:af:79:16:
         7b:4f:69:32:e6:5d:64:7c:ce:6d:85:71:16:6c:bb:d5:07:94:
         56:3a:ef:69:f2:92:66:5d:44:2e:67:2c:03:e7:82:6d:67:cd:
         e3:0c:8e:0f:00:ce:42:92:aa:e7:19:81:ac:96:0b:9f:61:16:
         8c:22:6a:57:a7:5a:a2:2b:dd:67:8e:0a:fb:2e:31:69:67:b8:
         a7:f0:cd:cd:0c:13:9a:c9:fe:b1:d7:be:0b:9e:5d:76:c7:94:
         ac:a9:35:7d:32:d2:27:b3:67:c7:65:5b:46:8f:68:34:72:61:
         e7:38:d0:c0:de:08:e6:e1:82:27:c2:d9:fd:f9:a0:4f:c1:02:
         bb:58:9a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----