Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00faadd10905519bfa360a9f7c172679227705e3.cer
File:                     00faadd10905519bfa360a9f7c172679227705e3.cer (raw, json)
Hash identifier:          FX5BkaBTSetucF75ZFo7Qw5qd61beWJNyQ/unwkeXGI=
Subject key identifier:   0C:8C:A9:C9:78:CF:6F:FF:8E:97:AD:43:24:0F:CD:39:FA:94:7D:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F775F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/95c29f8b-f86d-47a1-ba73-c486c0f915f2/00faadd10905519bfa360a9f7c172679227705e3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/95c29f8b-f86d-47a1-ba73-c486c0f915f2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 Aug 2023 16:31:34 +0000
Certificate not after:    Tue 11 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 273066
                          IP: 2803:d790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16217588 (0xf775f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 16:31:34 2023 GMT
            Not After : Mar 11 06:00:00 2025 GMT
        Subject: CN=00faadd10905519bfa360a9f7c172679227705e3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:eb:77:d3:b1:b4:f1:b3:6f:c5:66:dd:9b:4f:
                    47:c4:02:db:93:6b:f5:3d:db:aa:61:02:e4:19:9b:
                    62:41:63:fa:dd:11:71:68:85:a8:85:b9:95:67:d1:
                    e7:fd:31:b4:cb:c7:0b:38:1a:bb:aa:4f:38:96:9e:
                    64:dd:c2:6b:f0:d2:89:c5:36:1b:f5:e1:5b:b2:09:
                    48:2f:87:4f:f8:a0:79:7d:c1:e4:8d:a5:3c:9a:d0:
                    7a:bd:44:8a:7a:73:19:33:70:72:79:46:9d:bb:4d:
                    8b:0f:49:7b:b8:31:6c:90:eb:ab:5d:35:7f:a9:6d:
                    28:2f:b2:52:e6:8e:8f:5d:89:8c:69:8b:c5:db:26:
                    5f:53:0f:0e:0c:3e:73:7c:51:99:4a:b2:36:d9:db:
                    99:33:35:36:7f:2d:d4:e0:cd:6d:ca:22:80:f9:87:
                    cb:af:cc:57:c0:c6:9d:15:20:a2:a6:73:cd:e5:e0:
                    f1:b8:c3:e9:a4:87:57:de:41:9c:24:bb:bc:2b:6c:
                    75:a8:eb:2f:11:ae:8c:01:68:7a:81:f1:2e:d9:a6:
                    25:36:04:de:c4:a3:67:40:3f:8a:99:fb:61:bf:c6:
                    bc:54:c6:12:63:91:4b:34:6e:48:9f:be:82:6f:19:
                    bb:f6:5c:ef:26:e6:96:80:71:b6:67:d4:e0:d9:72:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:A9:C9:78:CF:6F:FF:8E:97:AD:43:24:0F:CD:39:FA:94:7D:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/95c29f8b-f86d-47a1-ba73-c486c0f915f2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/95c29f8b-f86d-47a1-ba73-c486c0f915f2/00faadd10905519bfa360a9f7c172679227705e3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273066

    Signature Algorithm: sha256WithRSAEncryption
         2d:dc:3c:05:8a:04:f5:14:fc:5b:eb:90:df:94:d5:28:77:dd:
         20:98:89:40:ab:c6:55:e1:6b:ea:5c:fc:c6:05:36:54:51:08:
         d3:5a:14:79:2b:6d:3a:61:f7:18:c7:4e:da:36:d7:0f:04:52:
         cc:6d:f4:00:2b:98:3e:4c:6f:13:23:e3:42:1d:cd:b5:05:e1:
         38:27:e1:9d:b8:38:65:68:57:e2:54:19:c7:ef:62:34:6c:f4:
         fd:69:66:99:0c:4b:0f:02:f1:eb:2b:90:6a:f7:88:fa:73:29:
         36:10:0f:80:73:7c:8a:be:3e:b9:52:92:43:d6:55:68:03:04:
         39:df:05:48:a3:22:1a:ed:55:71:ee:85:b6:77:3a:cc:42:76:
         42:57:ed:08:40:ff:8d:0c:76:96:86:89:0d:aa:04:ab:b6:e6:
         ab:c9:04:20:f0:01:64:af:06:18:84:52:43:eb:2a:02:cc:53:
         6d:30:f0:db:1c:c9:cf:18:26:27:47:7d:72:08:56:e1:e4:27:
         6c:47:31:c7:5e:76:2f:5a:d9:0d:d3:7f:24:c6:54:e5:c1:65:
         56:38:85:a6:70:a4:49:b9:01:42:a2:7d:32:b3:93:31:32:a7:
         12:8e:f0:29:b9:7b:c3:a2:cb:bb:8a:da:4d:fe:f2:ae:f3:51:
         89:37:22:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----