Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0c52d96df726ea79c974679f2004b57e6211c902.cer
File:                     0c52d96df726ea79c974679f2004b57e6211c902.cer (raw, json)
Hash identifier:          g/qNeepPzGvQz3JRzra/LwtUfoU3tD+YoyyPKyxXUXg=
Subject key identifier:   B6:A3:F9:31:3C:0D:2C:59:B0:EA:31:A1:A7:88:AD:1D:0F:4A:1A:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103BBD4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/0c52d96df726ea79c974679f2004b57e6211c902.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Dec 2023 03:47:20 +0000
Certificate not after:    Sun 05 Oct 2025 20:52:28 +0000
Subordinate resources:    AS: 273142
                          IP: 2803:2c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17021908 (0x103bbd4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 13 03:47:20 2023 GMT
            Not After : Oct  5 20:52:28 2025 GMT
        Subject: CN=0c52d96df726ea79c974679f2004b57e6211c902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f5:1e:43:48:c7:80:43:4c:a6:63:87:f9:13:
                    b3:2c:ba:47:ab:19:c3:16:c4:46:de:51:25:b0:d5:
                    00:0e:21:ac:5a:89:9d:b1:af:49:8f:80:6a:ca:4c:
                    d3:a6:32:81:ac:12:72:28:1d:01:06:54:4d:d7:f1:
                    05:4a:e4:f4:08:bb:94:34:f6:7d:9a:92:f0:7c:d1:
                    f3:7e:1a:ea:19:f5:56:1d:00:3d:66:66:b5:12:54:
                    47:98:a3:08:df:c6:3b:80:5b:8a:c5:b1:ca:e9:0a:
                    aa:88:3b:c4:47:57:c8:31:c6:86:52:b6:66:bb:ef:
                    8e:92:44:d1:e1:f0:8b:ca:a2:e5:c4:e9:d2:db:b6:
                    3e:22:ab:36:eb:b6:40:eb:d4:02:36:14:6f:e4:00:
                    1d:71:b3:ec:5e:73:e3:21:b2:09:ed:6b:23:fc:8f:
                    06:45:14:37:12:ed:6b:36:52:39:d6:35:3e:9a:2f:
                    ee:ec:b1:33:a8:f5:8f:f9:f4:57:23:9a:18:a7:74:
                    36:e7:92:01:a3:c5:16:a9:e8:90:29:0d:6a:e4:c3:
                    c1:23:4a:77:e6:78:7d:94:0a:49:3f:6b:0b:47:29:
                    e6:cd:6d:df:f0:04:65:d5:d4:bd:cb:0a:39:6b:79:
                    42:e4:82:78:16:3d:3e:80:7e:d9:1e:86:e6:f1:0e:
                    ea:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:F9:31:3C:0D:2C:59:B0:EA:31:A1:A7:88:AD:1D:0F:4A:1A:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72d2452a-53d8-4767-93f8-b86e0a57a425/0c52d96df726ea79c974679f2004b57e6211c902.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273142

    Signature Algorithm: sha256WithRSAEncryption
         7a:60:99:69:65:e7:4a:46:2d:69:74:2c:f5:b7:7f:01:2c:9e:
         f8:d8:11:6f:ec:26:ae:1c:32:d2:cc:8b:aa:4c:aa:e7:15:c9:
         01:c7:b3:b0:c3:10:ef:44:45:bd:ae:70:a1:a3:61:59:3f:d3:
         4d:3f:c7:d2:84:08:16:8e:76:01:5d:5b:e2:b8:76:8f:19:7f:
         64:58:70:34:df:80:a0:e0:85:cd:82:26:81:93:9d:2e:7b:99:
         94:8e:17:ca:53:ed:a2:78:d4:a8:9a:16:ba:e9:36:54:99:5e:
         8d:bc:f8:77:8c:30:7f:43:2c:65:18:6b:1f:16:a2:2e:89:18:
         46:e1:6d:30:79:41:6c:fc:b6:c7:e4:4d:47:ae:40:a7:c1:9c:
         25:8b:8b:1d:8b:a2:2c:c0:98:9f:c4:c5:d9:3a:b2:ad:0e:26:
         88:46:f2:d4:64:d1:d5:6b:bc:af:2d:45:c6:94:bd:cc:b4:2d:
         aa:dc:e4:eb:b8:f9:36:24:9f:d6:2f:da:0b:92:9f:15:2b:ea:
         cd:98:81:4c:be:69:5c:c7:d1:3f:7e:28:85:4f:16:31:60:bb:
         42:db:57:7a:63:7d:39:34:2d:a2:20:ea:2a:27:b7:3f:cf:b6:
         51:c4:bb:15:6c:04:27:29:e1:fb:5c:6f:4d:01:7b:61:35:46:
         5c:75:94:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----