Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ea4f82ff331c4111693db00c43f87f2361e57a9.cer
File:                     0ea4f82ff331c4111693db00c43f87f2361e57a9.cer (raw, json)
Hash identifier:          snSPvqlE7gGjch/mbkIjaaUCk+aXzxYjwT6p0QfqjIg=
Subject key identifier:   10:BF:69:C4:19:5D:9D:C8:BF:A2:E4:5A:F6:D7:CB:93:21:22:96:86
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01105D4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dd4fb257-d511-4a8a-b27b-8051c3760c38/0ea4f82ff331c4111693db00c43f87f2361e57a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dd4fb257-d511-4a8a-b27b-8051c3760c38/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 15:07:45 +0000
Certificate not after:    Sat 27 Sep 2025 21:29:03 +0000
Subordinate resources:    AS: 272356
                          IP: 2801:c4:2a1::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17849675 (0x1105d4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 15:07:45 2024 GMT
            Not After : Sep 27 21:29:03 2025 GMT
        Subject: CN=0ea4f82ff331c4111693db00c43f87f2361e57a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a4:02:f5:74:30:32:cc:4b:32:75:b5:c1:87:
                    c6:75:45:24:b1:e1:3d:9b:b0:ae:8f:97:56:b1:ff:
                    53:7c:86:45:1d:3e:9b:d0:c6:60:b7:e2:e0:1b:54:
                    4f:8a:96:be:a7:48:88:47:5d:4a:69:b9:59:44:9b:
                    d7:0d:27:e3:3b:63:16:21:53:b7:eb:54:23:69:ce:
                    77:9e:6a:4a:e7:68:48:05:29:fd:5e:ac:14:66:7d:
                    c2:ad:b1:85:60:d4:26:d3:68:8d:e7:8e:48:80:19:
                    a4:1c:45:08:57:9e:f5:b9:95:6c:c0:2e:fd:df:47:
                    2f:9d:83:9e:f5:7e:37:1e:f8:f1:74:dc:84:59:50:
                    11:dc:f0:b0:79:26:85:2f:2e:34:db:41:28:70:11:
                    b8:a8:69:64:68:25:c4:ec:20:4c:d2:53:d1:85:0c:
                    84:cc:55:9c:80:ac:9d:a6:86:16:b8:77:a5:5d:97:
                    62:42:15:5f:c4:07:38:90:eb:1b:bc:82:22:12:19:
                    e9:07:f4:d6:f3:c5:c0:cc:82:5b:9a:63:fb:a2:8e:
                    4c:a9:8a:86:90:88:e3:ab:86:47:61:fb:1a:da:f4:
                    18:b3:6c:0c:ac:c6:de:e8:cc:9e:e0:25:52:3d:e8:
                    17:73:c8:8a:fb:79:a7:f4:05:d1:ec:ab:bb:af:43:
                    05:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BF:69:C4:19:5D:9D:C8:BF:A2:E4:5A:F6:D7:CB:93:21:22:96:86
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dd4fb257-d511-4a8a-b27b-8051c3760c38/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dd4fb257-d511-4a8a-b27b-8051c3760c38/0ea4f82ff331c4111693db00c43f87f2361e57a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:2a1::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272356

    Signature Algorithm: sha256WithRSAEncryption
         ac:f8:e0:e4:ea:ae:cc:d7:8c:2a:f2:7c:32:4c:e2:41:2b:e3:
         d9:18:2f:21:97:9e:45:49:d3:90:a9:2c:3e:96:c7:93:a2:55:
         83:44:8b:2c:32:f1:49:e5:63:20:b0:57:46:f5:df:42:f0:e7:
         28:25:20:30:8d:9c:34:8c:e5:bb:86:cc:e7:7f:a7:1b:fd:1b:
         d6:ba:e9:0b:71:3d:f7:4f:b7:28:6c:19:6e:07:57:d7:65:02:
         30:ca:ff:09:86:3d:85:46:c2:b3:5b:d4:bc:0e:f8:d6:f4:6f:
         e9:86:a7:15:15:14:fc:06:1d:84:6c:5d:d0:6d:01:51:55:71:
         ad:47:87:db:ff:55:b3:78:8b:0c:dd:81:02:6e:8b:89:20:8b:
         bb:40:66:2c:4c:bb:bb:db:b3:c9:8d:87:9b:13:e2:86:aa:1c:
         07:1c:00:a0:73:ec:51:5a:b5:0b:15:a0:9e:b4:59:21:02:3b:
         c3:b1:cf:69:98:1f:57:42:b9:31:83:44:a7:fd:b4:cc:70:99:
         03:c6:f0:ca:dd:c6:fb:77:49:3b:e7:44:b8:21:4f:32:29:a7:
         45:3a:4d:2f:3d:88:9a:14:18:49:59:a9:1a:35:b9:44:91:50:
         9d:02:0d:56:bd:47:c9:f6:97:37:b5:60:b3:a3:54:f0:e3:84:
         c2:ce:65:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----