Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/005a212c66f97fe3f087cf071bb9878629db5937.cer
File:                     005a212c66f97fe3f087cf071bb9878629db5937.cer (raw, json)
Hash identifier:          U1/zWS4+j3jpvPwb55PP5xqPHx94P0IuHN5d0XhArZo=
Subject key identifier:   5B:3D:D1:C8:20:78:26:5A:F9:4F:F6:D5:36:55:C0:5D:2B:81:65:D4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103B348
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/feaadc82-c0a0-4719-9be6-10978c3f49ad/005a212c66f97fe3f087cf071bb9878629db5937.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/feaadc82-c0a0-4719-9be6-10978c3f49ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 20:48:10 +0000
Certificate not after:    Sat 06 Sep 2025 22:47:37 +0000
Subordinate resources:    AS: 273119
                          IP: 2801:1b:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17019720 (0x103b348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 12 20:48:10 2023 GMT
            Not After : Sep  6 22:47:37 2025 GMT
        Subject: CN=005a212c66f97fe3f087cf071bb9878629db5937
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d9:90:03:3f:74:0b:ea:42:c1:ef:33:97:40:
                    c3:58:4d:84:59:c0:d8:64:fa:63:f4:d4:24:cf:a9:
                    08:4a:0f:01:5b:ef:3f:6a:a5:96:b0:55:61:19:06:
                    67:56:2c:29:73:47:74:a5:99:8a:7d:31:60:f5:9d:
                    0a:84:0f:39:f1:45:f1:af:be:b8:b7:c6:1e:d2:97:
                    79:76:2d:92:b5:52:e0:50:d8:44:a9:06:1d:9b:ab:
                    1e:43:d8:14:3c:4f:3d:97:37:dd:82:c3:45:a7:4e:
                    e9:5d:cd:0e:63:53:44:73:ff:5a:1c:ae:e6:de:ff:
                    a6:64:c8:8c:bd:65:60:bb:54:ff:ce:c9:48:ce:e5:
                    3e:bc:1c:09:9d:e5:f5:7f:f7:8d:40:fe:ce:bd:24:
                    e5:7a:a4:4c:b9:04:f6:91:f2:04:64:a4:72:8a:50:
                    30:bc:26:b3:52:98:ae:bc:b1:ef:4f:58:fd:63:9c:
                    d6:ff:ba:42:3b:22:71:f3:4a:8f:32:9c:2f:79:8b:
                    f0:75:fa:81:82:09:5c:4b:53:ed:c4:73:41:6b:26:
                    14:f9:ad:79:e0:a6:cc:73:81:55:a7:4b:d5:d5:d2:
                    7d:83:eb:8f:b7:22:92:e6:d7:a4:9c:ee:0b:be:d4:
                    65:ec:c5:1f:46:95:1c:cf:f7:65:7e:ff:dd:21:b2:
                    3a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3D:D1:C8:20:78:26:5A:F9:4F:F6:D5:36:55:C0:5D:2B:81:65:D4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/feaadc82-c0a0-4719-9be6-10978c3f49ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/feaadc82-c0a0-4719-9be6-10978c3f49ad/005a212c66f97fe3f087cf071bb9878629db5937.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:b800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273119

    Signature Algorithm: sha256WithRSAEncryption
         15:09:ea:42:c6:67:5a:a2:46:25:5d:02:e7:99:49:2c:55:69:
         b1:57:4c:0c:7a:ca:05:c3:b0:77:d3:c6:5e:67:4d:56:f3:74:
         f7:ba:82:87:5d:34:b2:fd:72:92:a1:cb:2c:c9:81:3e:81:e9:
         32:2f:17:2b:27:b4:54:d4:b6:53:51:92:79:a4:7e:9d:27:1d:
         f4:73:d1:87:63:a5:6b:36:29:e1:32:51:c8:0e:bf:e7:a4:e0:
         03:3c:e0:16:70:b1:e5:11:0c:6b:4a:aa:e0:8f:67:3c:df:b5:
         8f:84:11:b6:ed:ec:8a:68:64:19:3d:06:ad:92:8c:c2:eb:d9:
         19:75:fe:15:51:03:0f:dc:fa:ae:37:2f:61:55:8b:5f:2f:07:
         cc:ec:e2:7d:69:a3:6c:07:93:18:6f:51:40:e9:0d:ec:97:0f:
         c8:e7:3c:53:5b:e3:b2:7c:9a:b5:bb:60:1e:7a:1b:c3:35:d6:
         db:96:1a:f0:83:4c:7f:42:8f:f4:c0:8b:b6:f8:a5:7c:ca:01:
         4d:3e:b9:32:e5:57:01:29:59:af:94:53:88:7c:d8:3b:b1:a2:
         cd:f2:68:14:50:02:6f:03:cd:62:0d:16:3f:71:67:bf:b3:21:
         55:22:ec:ab:fb:85:cb:c1:26:fc:6b:71:c1:d1:0d:d2:98:ef:
         92:55:8f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----