Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b3c4f9bc08709a766cdbcb07f3bad691a619546.cer
File:                     1b3c4f9bc08709a766cdbcb07f3bad691a619546.cer (raw, json)
Hash identifier:          6GLt7p7AuTecKCWLcqLAC1aHL9Alpd/QpOKNq5TVW/4=
Subject key identifier:   FA:76:26:A6:A0:12:41:CE:55:99:2E:65:20:75:A7:8E:5B:E4:BE:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01009B55
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1d108852-8196-47a5-98bd-6db4ddcd95f2/1b3c4f9bc08709a766cdbcb07f3bad691a619546.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1d108852-8196-47a5-98bd-6db4ddcd95f2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 23:22:08 +0000
Certificate not after:    Mon 30 Jun 2025 15:16:32 +0000
Subordinate resources:    AS: 273068
                          IP: 2803:b790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16816981 (0x1009b55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 23:22:08 2023 GMT
            Not After : Jun 30 15:16:32 2025 GMT
        Subject: CN=1b3c4f9bc08709a766cdbcb07f3bad691a619546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:21:1e:3c:49:11:0b:b5:d5:09:eb:60:2b:ed:
                    97:2b:30:a5:88:3e:24:38:ec:7e:8e:df:bf:15:b1:
                    96:4c:e6:d7:41:7f:3c:90:53:b5:0d:b3:07:22:4f:
                    44:99:b1:4f:bc:4a:e2:e9:39:eb:1d:29:7f:c7:2b:
                    e7:b4:4a:54:2a:ef:0a:c3:34:31:8b:94:ef:cb:45:
                    3c:89:28:36:da:46:55:5f:65:7b:77:56:6d:f6:6c:
                    18:87:33:09:ae:e0:7e:53:f0:37:e1:02:73:2f:cb:
                    79:0e:c2:fb:ec:8d:3a:3a:a0:e5:1e:aa:fc:ce:dc:
                    bb:23:0a:9b:63:d9:c7:c9:24:77:4f:ad:37:46:b8:
                    68:8f:c1:d6:9e:cc:eb:f9:7b:2b:a1:93:ed:6d:2b:
                    9c:e4:85:0a:38:16:74:f7:49:3d:75:0a:90:b6:5c:
                    f0:16:b4:e2:c0:65:97:62:e0:58:62:df:a5:bc:5e:
                    dd:fe:7c:d9:c5:2e:b8:72:fe:cf:72:e1:a0:4a:04:
                    78:9b:6f:f0:bd:95:3e:10:fc:cd:db:c5:90:d3:42:
                    ca:95:f2:31:5f:25:24:99:9f:48:4b:4e:4a:ab:c3:
                    e7:16:1d:48:3d:8b:51:9e:84:14:5c:8a:aa:cb:b8:
                    19:b3:56:ec:0c:81:2a:4a:7c:93:fe:36:e5:d4:2e:
                    83:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:76:26:A6:A0:12:41:CE:55:99:2E:65:20:75:A7:8E:5B:E4:BE:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1d108852-8196-47a5-98bd-6db4ddcd95f2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1d108852-8196-47a5-98bd-6db4ddcd95f2/1b3c4f9bc08709a766cdbcb07f3bad691a619546.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273068

    Signature Algorithm: sha256WithRSAEncryption
         44:be:d6:fd:ac:d2:60:e8:8c:97:41:8e:e7:01:dc:4e:9e:e0:
         06:b4:1b:ab:c0:f5:bc:94:03:be:9b:e9:22:a3:87:09:d0:87:
         f5:8d:ba:d1:07:92:7c:b0:c9:84:2f:7e:a2:1b:30:d6:a1:51:
         40:27:48:e3:42:81:ee:e2:a7:fc:67:31:83:88:62:24:14:cd:
         05:95:03:12:fb:2f:4e:96:ee:a5:92:55:60:45:38:78:67:e8:
         5d:47:11:54:68:3a:0c:6d:d5:62:7c:d8:93:7f:21:68:4c:7f:
         24:2e:8b:2d:9a:af:d9:49:44:e6:0e:d8:39:a7:8c:de:aa:b6:
         fe:e2:c0:fc:ed:b7:68:24:80:0e:db:0d:bf:e8:01:1f:8a:44:
         82:be:73:13:aa:c1:d2:ec:95:e2:23:f8:af:22:e1:d0:a0:12:
         d4:63:c3:39:05:47:2d:76:75:21:c0:40:8b:16:9e:e8:2a:aa:
         fa:a5:d6:a6:85:9e:1c:96:a6:d2:f7:8f:74:66:fa:65:37:e0:
         bd:18:df:ef:ad:a5:13:96:46:7b:1e:e6:79:8c:c2:cb:8e:3f:
         f0:99:85:9d:b5:46:1c:7b:0d:fa:25:d7:10:1f:fd:a8:d4:c7:
         c2:91:0a:62:79:57:ce:db:42:1c:dc:0a:4f:78:0b:7f:68:2a:
         59:0c:1b:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----