Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ffddaca75a7a6feac489de7193e7bd9928372dc.cer
File:                     0ffddaca75a7a6feac489de7193e7bd9928372dc.cer (raw, json)
Hash identifier:          7+aOpgYDdWo4MvcbRvMOpbw0zKhVpa/YjUUPfuEtMKk=
Subject key identifier:   ED:2B:25:5C:7A:F5:32:92:48:A8:D7:45:32:AA:47:90:E6:AE:F2:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDDE99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/677e3041-7060-47f2-95cb-bffef4a2667f/0ffddaca75a7a6feac489de7193e7bd9928372dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/677e3041-7060-47f2-95cb-bffef4a2667f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 07:54:25 +0000
Certificate not after:    Tue 15 Oct 2024 16:53:15 +0000
Subordinate resources:    AS: 272922
                          IP: 2803:5e90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15589017 (0xedde99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 16 07:54:25 2023 GMT
            Not After : Oct 15 16:53:15 2024 GMT
        Subject: CN=0ffddaca75a7a6feac489de7193e7bd9928372dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4e:69:9f:58:bd:7e:41:6b:5c:54:f6:a8:3f:
                    ed:18:29:42:b6:41:f0:f4:42:b3:10:c6:a1:75:0e:
                    40:0a:83:d5:0a:d3:53:b1:e0:6b:b7:4a:12:59:aa:
                    e6:64:e7:53:e9:63:36:c6:2f:53:a9:3c:c9:c1:ca:
                    50:ce:67:c6:e8:1a:2b:60:d9:d4:04:4e:c0:10:4c:
                    cd:e3:a7:75:ea:00:06:06:cb:23:9a:e9:ff:c5:fd:
                    37:f0:a4:85:93:d7:02:9e:a3:63:a4:43:03:e3:de:
                    6c:0a:d2:ef:4c:df:4e:01:21:a0:88:ce:0a:34:7d:
                    d5:18:e8:2d:d1:d5:10:b5:41:6b:6b:3d:4c:40:f4:
                    bd:f5:86:31:85:8f:17:73:ad:a9:9f:13:24:71:48:
                    d4:f5:72:24:8f:1f:76:ce:f4:fd:76:05:31:6e:74:
                    04:96:e1:60:e8:3f:02:1f:0c:5c:1b:a1:2d:4b:a6:
                    58:6e:e4:2f:22:43:b5:55:10:2d:fd:22:2d:44:da:
                    ad:06:6e:fc:ec:b1:89:e5:f3:1c:84:21:8d:75:4f:
                    f5:c7:be:cf:07:61:4a:08:fd:a3:ee:95:d9:f3:a2:
                    69:37:49:f9:0d:81:bd:89:96:13:6d:9b:7a:2a:e3:
                    97:f4:f2:11:c0:d9:fe:05:1c:a3:8e:b7:00:c2:bf:
                    d2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:2B:25:5C:7A:F5:32:92:48:A8:D7:45:32:AA:47:90:E6:AE:F2:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/677e3041-7060-47f2-95cb-bffef4a2667f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/677e3041-7060-47f2-95cb-bffef4a2667f/0ffddaca75a7a6feac489de7193e7bd9928372dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272922

    Signature Algorithm: sha256WithRSAEncryption
         15:f2:78:df:d0:a7:1c:81:f2:5e:60:9a:ef:d3:c9:b0:51:77:
         94:1a:c1:17:c0:44:02:67:53:76:b9:8f:9a:cd:1c:02:17:46:
         98:d6:27:b5:7d:bb:fe:5a:1d:2b:9d:dc:69:bb:f2:95:07:ad:
         bb:8e:a4:69:39:1d:b0:e6:02:4a:4e:1b:fc:f8:bf:59:02:b5:
         46:75:09:6a:eb:59:d0:35:41:b4:3a:fd:20:eb:a3:dd:22:11:
         46:71:3e:ba:1d:2c:f9:bf:5d:93:5d:f6:57:fd:cd:29:e1:26:
         13:12:ba:d9:ba:a9:eb:6a:71:90:d0:09:64:90:d7:21:9a:92:
         dc:0b:b9:14:b6:39:a0:da:c4:fc:a3:36:25:dd:c7:bf:e3:c9:
         e5:7d:81:c8:a2:e6:12:d7:6e:f1:02:94:21:ca:94:91:15:c3:
         40:54:96:5e:09:c8:9c:e4:ac:44:e6:26:6f:e7:a0:18:ae:49:
         4f:66:f0:17:b6:8a:67:8e:56:df:4e:4e:d9:43:e7:5f:06:d9:
         2c:ee:98:1c:3e:88:d0:d8:4b:a9:cf:f2:29:bd:09:a5:bb:4f:
         fe:1b:e2:2d:91:d0:68:e1:45:55:34:e6:e3:f3:94:71:34:0c:
         9b:08:f7:f0:77:4e:6e:f0:d2:68:69:42:71:b1:72:5b:ac:7b:
         b8:13:9d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----