Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06f30332ce3bfc30b16c3c0026db5e0d7604586a.cer
File:                     06f30332ce3bfc30b16c3c0026db5e0d7604586a.cer (raw, json)
Hash identifier:          QOmkkDPiLAcEOvhsNX27bk8tuS5giSah2ud5cWGOcIA=
Subject key identifier:   78:C7:9B:05:B1:F7:EA:D8:16:4D:F8:C3:59:8C:3B:B4:85:30:5B:7D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DB648
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9aa44a25-2f36-4537-a2ba-7ee3c7a07f24/06f30332ce3bfc30b16c3c0026db5e0d7604586a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9aa44a25-2f36-4537-a2ba-7ee3c7a07f24/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 14:45:21 +0000
Certificate not after:    Mon 08 Sep 2025 02:13:02 +0000
Subordinate resources:    AS: 272292
                          IP: 2801:c4:211::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17675848 (0x10db648)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 12 14:45:21 2024 GMT
            Not After : Sep  8 02:13:02 2025 GMT
        Subject: CN=06f30332ce3bfc30b16c3c0026db5e0d7604586a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:93:43:ac:23:20:2f:27:b5:7b:9a:66:d8:cc:
                    98:30:6b:d7:a2:e0:c7:cb:c0:a6:fd:75:4a:cf:b8:
                    a2:fd:72:d2:cd:c3:ae:65:c2:45:15:ad:dc:0c:80:
                    7a:e2:22:e4:7e:39:2a:02:a6:4b:29:60:f1:9c:59:
                    81:8e:44:51:06:55:a6:46:94:47:19:78:83:a5:10:
                    f7:6c:c0:b8:19:83:bc:5d:de:35:b5:5d:f7:da:ed:
                    49:10:0e:f8:3d:11:a0:73:25:22:dd:88:2e:db:d7:
                    1c:66:c6:cc:98:3b:e2:da:0a:2a:23:e4:14:46:fa:
                    3d:e3:7e:c7:f4:53:2c:16:58:95:17:e5:02:4a:9c:
                    ca:36:7c:6f:93:fe:27:d4:92:8e:99:8a:1e:0a:88:
                    32:56:77:91:a2:4a:ad:05:52:57:7f:98:11:74:03:
                    57:c9:f7:ea:40:18:08:68:dd:83:fc:5d:da:61:51:
                    6c:ca:7a:0c:2f:1e:5e:9f:52:ba:48:ab:30:a5:c8:
                    18:d9:91:ca:02:e9:b8:57:84:c2:d8:2f:08:d3:0b:
                    e5:84:4f:07:ca:f6:d2:1b:d8:e4:22:80:f1:67:31:
                    66:38:b0:a4:60:b0:07:d0:22:f9:10:9f:ae:04:8f:
                    e4:03:7f:9f:b3:f9:9b:54:fc:01:27:c7:17:9d:f8:
                    d0:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:C7:9B:05:B1:F7:EA:D8:16:4D:F8:C3:59:8C:3B:B4:85:30:5B:7D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9aa44a25-2f36-4537-a2ba-7ee3c7a07f24/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9aa44a25-2f36-4537-a2ba-7ee3c7a07f24/06f30332ce3bfc30b16c3c0026db5e0d7604586a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:211::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272292

    Signature Algorithm: sha256WithRSAEncryption
         a2:e0:03:66:fc:9a:07:16:0b:85:e8:d6:a4:c4:73:c6:c8:50:
         ea:75:3b:48:58:1b:ac:ce:2a:22:4a:a5:ba:24:85:92:d9:56:
         8a:9c:df:30:0d:85:f4:1b:56:70:6d:14:c7:19:aa:34:d4:2e:
         e3:4b:b3:c4:64:cc:8e:53:86:9b:23:49:77:8b:da:91:d5:14:
         f9:03:30:81:69:26:aa:22:dc:9e:8f:95:7b:d4:98:0b:66:7f:
         e7:74:f9:3f:75:d9:cc:ad:32:49:b4:f5:ab:c3:6f:86:99:ce:
         e6:cd:31:ee:5d:db:3a:db:5c:ff:26:29:b6:05:e4:1e:c6:57:
         fe:e8:dc:8d:ef:29:d8:d7:ac:09:44:db:48:02:87:29:c8:02:
         16:01:a4:de:a2:c4:e8:cf:b6:77:11:f9:80:58:ae:b6:51:63:
         40:cd:e8:91:6c:7d:94:84:b4:38:f0:5e:cb:fb:12:00:b5:52:
         ab:13:e2:98:f1:47:cd:a2:1e:42:78:37:5d:b4:37:4b:d9:ce:
         9f:32:5a:24:e1:cf:8b:3b:3a:5b:60:2d:42:3a:47:33:cb:f0:
         14:61:8c:cb:c2:fc:fc:e0:44:0d:46:19:02:46:cf:36:3e:0f:
         5a:e3:3b:05:41:46:41:bc:38:98:8c:38:34:a4:ff:04:a9:59:
         af:bb:e6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----