Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer
File:                     14aa226f3e8286e21bf2ec937c2c6159eabfda4f.cer (raw, json)
Hash identifier:          +2CDPSGrwngOZXMekTbzyU1O4e+LhPct51h9lowqARU=
Subject key identifier:   5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010BE118
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 19:28:32 +0000
Certificate not after:    Sun 03 Aug 2025 22:57:06 +0000
Subordinate resources:    AS: 272373
                          IP: 2806:419::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17555736 (0x10be118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 26 19:28:32 2024 GMT
            Not After : Aug  3 22:57:06 2025 GMT
        Subject: CN=14aa226f3e8286e21bf2ec937c2c6159eabfda4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:40:27:b6:25:ef:2f:7a:8f:ca:b7:92:46:ff:
                    ad:c5:62:48:b4:2c:63:b5:9f:bc:b8:64:1f:cd:a8:
                    8f:d2:91:70:94:f3:7d:a7:a5:bf:a0:34:e8:ae:a0:
                    d0:a8:2b:d0:6f:94:f4:79:55:5c:1c:8a:4f:2e:52:
                    2a:b8:c4:8c:26:9e:9e:ca:04:2f:3b:d9:80:9d:0a:
                    10:2c:d8:75:88:04:73:ff:07:d1:24:04:55:04:c1:
                    ff:b3:96:e5:d9:30:97:ce:4a:d9:dc:93:6c:93:54:
                    ae:90:05:51:28:50:3b:3a:19:a6:c2:3c:35:7d:aa:
                    c1:c7:46:8c:4e:cc:50:51:6b:f1:d9:7b:a3:78:6f:
                    88:3d:8e:49:0d:a9:d1:b0:8c:52:61:2b:62:0d:6a:
                    49:04:83:7b:ed:69:78:87:01:ad:6e:2a:34:f4:36:
                    10:27:13:c8:6c:fb:3e:ab:ff:f2:a8:df:54:0c:64:
                    62:c3:c3:79:72:2d:03:30:cf:ae:df:cf:b1:12:bf:
                    93:a5:b1:1d:02:f2:38:6f:1e:a2:00:ae:93:b4:96:
                    22:71:01:bc:3d:88:45:b1:84:ec:a9:ed:8d:91:f2:
                    66:f6:f8:a4:37:72:06:ed:5a:ff:d4:91:6e:9d:b3:
                    29:71:e0:ba:d7:c2:d3:49:6d:ca:55:2a:68:40:93:
                    ba:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D5:C5:14:F4:A8:BF:0A:7F:F0:E8:35:13:24:59:EE:24:E8:BF:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0f0f7551-1d5b-4474-be12-b014a33770f7/14aa226f3e8286e21bf2ec937c2c6159eabfda4f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:419::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272373

    Signature Algorithm: sha256WithRSAEncryption
         63:51:01:bc:87:0f:71:f4:fd:67:2f:f4:f0:2b:7b:40:0b:c0:
         72:a4:94:ca:42:84:17:29:a2:54:7a:c1:ae:0a:07:a8:88:6b:
         14:92:28:bc:3a:62:64:44:f1:3a:90:2f:8e:11:85:78:af:87:
         a3:e0:04:b7:c9:53:bf:e4:74:0a:99:cb:ee:c9:ba:3d:8d:39:
         e9:39:3e:2c:28:60:dd:37:e5:5b:d4:b5:d5:dc:5f:62:08:32:
         ae:0d:41:a7:19:a6:d2:aa:81:4c:fe:f6:ab:4b:c7:7f:dc:73:
         a6:64:f6:1a:df:cc:2c:81:8a:e4:5f:87:34:3b:56:66:af:c4:
         a9:b9:15:b9:63:f5:9d:55:ae:a0:f2:1a:25:1b:db:c9:1a:e2:
         06:c5:bd:f4:93:5f:16:6b:7f:77:34:0c:10:47:14:98:09:a5:
         43:81:12:9c:6a:6a:3e:a9:91:c1:d3:6c:03:2e:25:8c:f6:39:
         07:9c:60:b0:9d:69:82:8e:60:f0:78:2a:ae:b4:b3:97:90:25:
         db:fd:4a:db:75:78:c3:86:2e:7d:81:c1:33:16:48:42:b8:22:
         93:0d:53:d8:a9:eb:15:a4:c5:86:53:5b:71:91:7b:86:97:72:
         ae:9d:43:4e:b0:0e:69:00:e3:61:bb:23:2c:e0:ff:45:b0:12:
         b1:db:a3:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----