Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03951c53780ba5cb61cdabc400df1b768f54ca15.cer
File:                     03951c53780ba5cb61cdabc400df1b768f54ca15.cer (raw, json)
Hash identifier:          xHV5n1jSmsSlIz1qXKq8ZRbHveGtjO7SIQq/fKt/aNU=
Subject key identifier:   44:F4:C6:D9:D4:31:2E:35:86:08:71:A0:94:E3:05:73:84:E0:B0:53
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107160E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ec3b1724-3646-45d6-8828-e6202a0db99d/03951c53780ba5cb61cdabc400df1b768f54ca15.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ec3b1724-3646-45d6-8828-e6202a0db99d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 21:02:39 +0000
Certificate not after:    Wed 23 Jul 2025 04:21:02 +0000
Subordinate resources:    AS: 272285
                          IP: 2801:c4:af::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17241614 (0x107160e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 17 21:02:39 2024 GMT
            Not After : Jul 23 04:21:02 2025 GMT
        Subject: CN=03951c53780ba5cb61cdabc400df1b768f54ca15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:96:b6:a7:c7:2e:0c:fb:d5:ee:89:37:97:83:
                    e9:9d:03:2d:1e:c1:5c:a0:d5:fe:b8:d4:7d:93:9f:
                    bb:6a:6c:89:64:5c:bd:46:8e:34:e1:e9:83:55:36:
                    b6:b9:3a:8f:ee:79:c3:a3:4e:3c:45:dd:35:7c:47:
                    d1:7e:df:bf:f2:da:54:b4:0d:f0:15:1a:8c:c0:7b:
                    52:a7:0b:ec:1a:f9:bc:ee:33:c9:f5:de:f2:22:70:
                    e6:50:5f:59:fc:59:0c:c6:7b:68:08:82:a8:66:b6:
                    29:87:3f:bc:dd:a1:3f:88:70:4f:cd:21:4e:61:f8:
                    9f:06:03:4c:86:8e:07:9c:89:ff:ea:8b:5d:6f:3f:
                    4a:c5:80:da:39:00:06:f2:6e:2f:02:42:e8:5d:ed:
                    f2:ed:dd:1a:a9:b6:59:de:7a:2d:62:52:bf:e0:51:
                    8c:c3:c5:eb:1d:21:e5:4d:82:93:f9:1a:3c:fa:48:
                    68:ea:56:da:fb:04:08:9d:5e:49:b5:24:19:9a:28:
                    4f:84:bd:20:03:62:d3:7b:9e:f1:e6:0a:27:d2:35:
                    82:87:5c:8f:a4:ce:85:18:d7:34:8b:ec:d9:9f:85:
                    2e:37:c1:84:d5:22:83:a3:96:7e:b7:96:03:35:1c:
                    84:31:a2:cf:37:5e:3f:29:8a:de:ed:b3:77:04:b5:
                    74:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F4:C6:D9:D4:31:2E:35:86:08:71:A0:94:E3:05:73:84:E0:B0:53
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ec3b1724-3646-45d6-8828-e6202a0db99d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ec3b1724-3646-45d6-8828-e6202a0db99d/03951c53780ba5cb61cdabc400df1b768f54ca15.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:af::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272285

    Signature Algorithm: sha256WithRSAEncryption
         13:bc:69:ac:23:fb:ca:6d:7d:dd:24:87:31:67:00:6b:4a:24:
         1d:27:8a:06:25:ca:2e:6b:61:f3:97:c5:5e:a6:56:f8:f5:7c:
         f3:da:27:64:65:41:50:8c:9e:ae:de:95:44:ca:97:ee:50:f4:
         0d:8b:8e:29:af:89:c0:7a:73:e1:27:8b:88:92:1e:15:4c:54:
         a3:43:46:31:3a:61:6d:86:15:fd:fa:70:3f:06:70:60:5b:c5:
         ff:6c:dc:e0:18:fc:14:a7:e4:19:40:38:18:2f:1b:34:48:f1:
         f5:09:0e:f3:96:07:9b:c9:8c:8c:00:77:89:1b:69:ad:33:3d:
         96:7c:3c:5b:41:03:a8:d8:29:bc:20:33:28:e1:5e:2d:16:62:
         a0:bc:5a:32:d3:71:3b:4e:33:0a:98:91:b0:c2:73:da:38:11:
         73:30:f2:34:00:a4:42:03:52:90:d0:c5:53:1a:66:42:37:cb:
         aa:ee:09:20:0d:a2:bf:20:64:5a:91:b4:c6:7f:bf:cc:10:7c:
         bb:de:fb:45:82:f2:5d:42:a4:ee:c8:d4:1a:51:17:3b:88:68:
         1a:60:9a:71:34:f7:38:23:09:50:17:4c:1c:92:09:fa:47:1c:
         87:8c:8f:df:77:87:a1:a7:6c:52:98:56:40:33:99:8b:12:d7:
         97:eb:b3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----