Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1607d1735043d43378b4a916639fa018c8bbd7b4.cer
File:                     1607d1735043d43378b4a916639fa018c8bbd7b4.cer (raw, json)
Hash identifier:          moRT5LcZj0qFRo/X8WVhPWFXLJmqDE26eNg+LZMLfXI=
Subject key identifier:   2F:40:06:99:41:E5:13:30:83:DA:41:8F:73:3A:81:48:B8:AA:A7:D1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B4B56
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9767f540-064e-4bca-9fa6-43b46a53cb82/1607d1735043d43378b4a916639fa018c8bbd7b4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9767f540-064e-4bca-9fa6-43b46a53cb82/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Feb 2024 23:31:16 +0000
Certificate not after:    Sun 30 Nov 2025 23:47:03 +0000
Subordinate resources:    AS: 272363
                          IP: 2806:414::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17517398 (0x10b4b56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 20 23:31:16 2024 GMT
            Not After : Nov 30 23:47:03 2025 GMT
        Subject: CN=1607d1735043d43378b4a916639fa018c8bbd7b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:6a:b2:ff:f1:a1:c4:40:49:c6:d1:08:d1:89:
                    8c:f9:18:54:d3:3a:b3:ad:fb:5f:d4:f0:3d:66:c2:
                    74:9c:c2:aa:f3:c5:a6:ca:9d:f5:5a:0d:fe:b9:13:
                    a6:a0:fe:be:6c:37:a4:4c:a6:06:e7:96:10:d4:3e:
                    4f:7c:75:ed:36:64:1a:58:3f:17:b4:87:8b:c7:e9:
                    0a:4e:e3:f1:31:eb:72:4b:ab:20:b6:ad:87:fe:73:
                    55:89:89:6b:e0:85:3a:d0:64:1d:95:a7:0f:e1:9c:
                    3c:d4:cf:be:59:98:3d:8e:63:48:a5:06:ea:b4:3a:
                    a4:4c:fe:d4:71:90:5b:c0:f5:16:aa:34:44:44:91:
                    93:10:6b:fc:bb:8f:ea:71:33:0c:94:27:93:ed:50:
                    72:c1:ad:24:4e:3a:49:09:14:59:08:61:cd:59:4f:
                    8b:85:e9:2f:f1:02:5e:0b:88:a4:bf:93:66:1a:8e:
                    f0:90:ee:96:eb:b8:5f:8b:e5:51:ff:02:68:75:6b:
                    49:10:8b:65:1a:90:62:3c:42:8d:8e:5e:7c:7e:3e:
                    69:9d:9a:7f:e8:2b:44:bf:d7:68:2c:27:9f:82:5e:
                    a6:48:4e:fd:d8:b6:c9:1d:15:96:56:e2:7c:78:fd:
                    a3:c3:99:ba:80:dd:00:14:08:a8:b0:d0:d4:fc:93:
                    5a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:40:06:99:41:E5:13:30:83:DA:41:8F:73:3A:81:48:B8:AA:A7:D1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9767f540-064e-4bca-9fa6-43b46a53cb82/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9767f540-064e-4bca-9fa6-43b46a53cb82/1607d1735043d43378b4a916639fa018c8bbd7b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:414::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272363

    Signature Algorithm: sha256WithRSAEncryption
         56:13:3b:41:5a:92:ee:92:dd:ac:3b:de:d6:6e:75:86:fe:82:
         d4:8f:6a:19:3c:52:63:ae:29:d6:a7:38:bf:82:29:11:c9:60:
         22:c3:6e:83:cf:51:88:47:70:d5:a1:25:b9:6e:41:2a:bb:7f:
         e5:97:8b:45:40:2c:0f:cf:e1:ac:a7:d2:2d:ba:12:cb:c0:07:
         87:2e:d1:1b:f5:f0:bc:39:33:fc:22:48:d7:c7:83:54:7c:e3:
         a7:b8:45:6a:b4:15:5a:53:a1:c5:e0:dd:37:c8:cc:69:7b:1a:
         95:fb:4a:2d:78:d3:0f:a4:d3:60:2e:12:63:59:f2:5a:e9:5c:
         fe:63:46:44:8b:5f:24:78:9d:f5:0b:39:48:34:82:63:47:9e:
         34:4b:93:e1:df:a6:cc:73:be:5c:be:fa:82:60:bc:22:31:bb:
         80:05:11:d2:f9:7a:b7:cd:39:fe:c5:72:f3:56:d5:e2:79:5f:
         92:2c:8f:16:78:eb:a0:34:b7:00:8e:0f:c1:7c:58:2c:54:b4:
         71:eb:f3:01:8a:45:64:1b:f2:2a:78:b1:f9:7e:4d:f6:c7:e1:
         47:3a:74:b7:28:11:25:84:50:41:91:54:82:8b:72:85:9f:43:
         9a:7e:27:57:63:71:df:89:65:17:79:45:87:42:2d:1f:38:0d:
         86:6b:5c:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----