Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/15ce1e4a802b68fb6ef631c4549e2242aea0a8a0.cer
File:                     15ce1e4a802b68fb6ef631c4549e2242aea0a8a0.cer (raw, json)
Hash identifier:          JsD3WgXLAavfb6t6NHkL4iIKIw3mDc/+GadPJ1GPHv8=
Subject key identifier:   D0:75:DF:98:D0:B1:01:C9:4A:56:AB:58:25:B4:DD:44:AC:98:D0:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01113004
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/697e24d6-7bec-4be9-818a-3a19a8fb65ba/15ce1e4a802b68fb6ef631c4549e2242aea0a8a0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/697e24d6-7bec-4be9-818a-3a19a8fb65ba/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 13 Apr 2024 04:32:28 +0000
Certificate not after:    Thu 12 Feb 2026 21:48:28 +0000
Subordinate resources:    AS: 273219
                          IP: 2803:4e50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17903620 (0x1113004)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 04:32:28 2024 GMT
            Not After : Feb 12 21:48:28 2026 GMT
        Subject: CN=15ce1e4a802b68fb6ef631c4549e2242aea0a8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:2b:3c:78:8b:bb:a7:62:1a:10:36:8c:61:0d:
                    69:09:17:bb:35:3f:b5:3c:17:77:f4:92:fe:92:d2:
                    f1:f3:73:0c:65:04:4d:12:38:62:d7:34:11:b8:94:
                    da:c5:aa:63:e9:bc:35:6e:59:2a:e7:aa:ad:ce:21:
                    9d:44:cb:29:d4:21:03:32:af:1a:26:aa:6f:2a:72:
                    f6:c1:75:91:8d:d5:ce:b5:75:9a:07:d0:2d:42:4f:
                    dc:ea:70:9e:c0:25:f6:20:c3:b3:0b:43:63:f0:0c:
                    76:39:9b:3d:e0:3c:9a:b3:47:62:1f:05:89:e6:f4:
                    da:58:46:fa:d8:2b:ca:70:88:c8:f6:fd:14:9e:0d:
                    6d:bf:73:93:cf:76:1c:f5:70:bc:4b:c5:32:f5:e3:
                    74:3d:fa:a7:ec:6b:0a:37:c0:8c:c2:60:47:67:08:
                    dc:a1:06:2e:f6:c2:9e:61:7c:df:2a:c0:2a:57:54:
                    e5:c4:94:c5:a3:cc:2f:ca:fd:b7:da:69:2c:14:3f:
                    d5:29:6f:61:20:9e:cd:b4:1a:0b:28:0d:dd:3e:09:
                    f1:af:5f:83:d9:2c:f9:75:2b:3e:8a:c7:47:e0:e2:
                    37:84:c5:8e:ce:83:8b:e2:b3:d4:7e:af:17:64:97:
                    68:1f:ea:90:4f:69:ba:ca:94:9d:a1:49:dd:63:f6:
                    6d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:75:DF:98:D0:B1:01:C9:4A:56:AB:58:25:B4:DD:44:AC:98:D0:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/697e24d6-7bec-4be9-818a-3a19a8fb65ba/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/697e24d6-7bec-4be9-818a-3a19a8fb65ba/15ce1e4a802b68fb6ef631c4549e2242aea0a8a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273219

    Signature Algorithm: sha256WithRSAEncryption
         6b:5e:b5:be:c9:d2:2f:35:99:c8:4f:30:76:7a:f5:aa:45:43:
         e1:8d:41:fb:ad:62:b8:c6:48:49:33:83:e1:5c:3a:d8:b2:f1:
         4f:6a:ff:cc:5f:49:d7:e8:16:df:53:85:c0:c2:a3:0f:cb:20:
         7d:5f:da:a8:16:6e:d7:23:fa:13:ea:f5:06:cf:5e:d7:ca:a8:
         5b:3f:fc:94:91:35:4b:df:2f:7b:17:d9:29:97:ef:b6:49:4b:
         a4:cc:0c:e5:85:b6:6d:32:b0:58:b5:7b:f4:5a:f0:12:82:b6:
         41:c2:d6:ae:98:88:39:04:b5:f6:fe:c4:97:94:75:69:b7:a5:
         06:be:1e:29:21:5d:fc:85:c6:cf:33:af:d1:79:26:09:9e:ea:
         24:95:64:a5:1f:9a:e7:c8:0d:f7:f5:a9:86:22:b8:e9:ac:5c:
         19:f5:16:44:fc:f1:0f:42:fb:4d:5b:1d:50:1c:e1:09:2f:a2:
         a6:9b:21:53:2f:74:44:70:ac:e2:82:9b:f5:74:86:3a:df:83:
         db:71:59:0c:c3:18:2f:11:97:3a:51:db:ca:a4:7f:4d:b0:f5:
         e0:a4:b4:cc:4a:dc:fb:87:13:76:b3:7a:9e:d6:3f:a9:b0:cd:
         57:36:d0:ee:e1:92:87:a3:c6:97:ce:ea:78:5e:3a:67:11:ef:
         40:2e:e9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----