Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1698e1659d1478214685d914df575bbe4aa3e71f.cer
File:                     1698e1659d1478214685d914df575bbe4aa3e71f.cer (raw, json)
Hash identifier:          8OFEkxStmv0l/7t2CWPzguap4FV2a1LeDNCcc1cicLc=
Subject key identifier:   C7:72:31:26:F6:88:AD:43:9A:53:D1:C6:6D:F0:C0:4A:98:17:37:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F55955
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8e9287eb-0cc3-41d1-9869-cbc828ff5b98/1698e1659d1478214685d914df575bbe4aa3e71f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8e9287eb-0cc3-41d1-9869-cbc828ff5b98/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 16:25:39 +0000
Certificate not after:    Mon 26 May 2025 15:35:14 +0000
Subordinate resources:    AS: 273046
                          IP: 2803:9b90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16079189 (0xf55955)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 15 16:25:39 2023 GMT
            Not After : May 26 15:35:14 2025 GMT
        Subject: CN=1698e1659d1478214685d914df575bbe4aa3e71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:89:df:13:57:4c:74:74:64:89:19:98:9a:89:
                    10:2b:4d:a4:d1:d4:60:47:d3:2f:fc:a3:24:f1:d5:
                    57:74:bd:bd:0c:ab:e9:00:75:96:48:71:9c:f8:e0:
                    9a:6c:7c:24:d0:0f:72:cd:8c:b5:4a:69:80:ae:4f:
                    da:0e:43:fa:d5:a1:67:32:14:ba:21:72:eb:6c:44:
                    88:ec:ae:ff:c1:60:74:02:a2:e1:99:cf:aa:03:5e:
                    02:bd:c6:56:a7:a1:61:b3:6d:03:79:92:51:b4:13:
                    5e:5d:08:c8:48:17:48:35:2f:a2:18:e4:0c:cf:c0:
                    aa:6c:5c:79:c7:07:d0:54:44:97:72:12:cc:b5:2c:
                    d5:9f:de:6f:8b:03:44:35:06:5a:80:50:b9:cc:bf:
                    1c:6b:3c:23:10:69:56:9a:6d:95:d1:10:b8:55:86:
                    ff:b6:7b:bb:dd:7b:61:f0:1f:a6:a2:75:b9:d2:ef:
                    05:0d:69:e4:89:12:c5:e3:9a:76:0a:02:bd:a4:74:
                    0e:f1:b6:f0:2f:84:6f:bb:b3:3a:0e:e9:d7:5e:75:
                    3f:36:ed:e7:90:b1:9e:eb:fd:b1:84:77:ce:1a:f3:
                    52:24:3c:88:01:75:0e:38:47:be:0e:42:32:b6:4b:
                    c1:86:a9:f4:2a:68:c4:c1:2a:08:74:41:82:8c:e2:
                    c5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:72:31:26:F6:88:AD:43:9A:53:D1:C6:6D:F0:C0:4A:98:17:37:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8e9287eb-0cc3-41d1-9869-cbc828ff5b98/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8e9287eb-0cc3-41d1-9869-cbc828ff5b98/1698e1659d1478214685d914df575bbe4aa3e71f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9b90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273046

    Signature Algorithm: sha256WithRSAEncryption
         5e:b1:34:05:1f:f6:78:a6:a0:e5:8c:42:ca:2c:b3:3b:91:cc:
         68:16:13:d0:8b:04:db:b3:89:9c:3e:4b:eb:b7:6d:5b:e2:0e:
         39:bc:b5:ab:99:b6:71:04:73:84:f1:83:24:8a:e3:60:47:52:
         2b:d6:17:f3:1d:22:c7:0c:70:cd:eb:10:bc:36:4f:57:48:79:
         c7:1f:1d:af:f2:9c:0c:05:32:3e:ee:ac:08:62:11:33:5c:59:
         79:dd:50:ba:02:12:a6:46:f5:1e:a6:36:08:52:b0:a3:1c:97:
         b2:dd:1e:34:ad:12:d4:f2:08:b8:f0:d3:ba:26:c6:ba:a5:ad:
         9d:a5:5a:be:30:1f:33:0c:92:8f:32:e5:ed:05:0a:22:11:36:
         88:25:f1:97:30:fa:5d:ed:f1:15:5b:2c:d8:b9:62:9c:19:e5:
         35:96:ca:bb:ce:2c:17:ce:df:f4:32:a5:f7:91:23:fb:b9:2e:
         ab:4c:c3:6f:3b:da:20:c0:5e:0c:d4:c1:cd:d5:17:bb:ab:ea:
         71:de:cc:63:e1:6d:de:2d:f4:da:6a:f8:93:39:5b:c5:2d:a0:
         93:7e:8b:23:bf:20:37:91:f4:c5:32:7d:a7:9c:0d:00:37:d4:
         0c:a8:23:38:9f:82:bb:6d:56:c5:4b:1f:26:dc:09:b1:ac:c1:
         b7:bc:a1:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----