Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c25067435af0219f4aa213dfdec58f7d04c0367.cer
File:                     1c25067435af0219f4aa213dfdec58f7d04c0367.cer (raw, json)
Hash identifier:          b3B9jYvNSDaiip/+3MxbcrCVpmwiMaa/a7nJmAelKoE=
Subject key identifier:   C4:CE:E0:DC:6A:E7:B3:4B:32:DB:B8:83:A1:05:AE:2C:90:25:0A:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01082512
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6bfca587-7411-4614-a1d9-2ffa8e98e702/1c25067435af0219f4aa213dfdec58f7d04c0367.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6bfca587-7411-4614-a1d9-2ffa8e98e702/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 17:10:40 +0000
Certificate not after:    Wed 06 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 273172
                          IP: 2803:7250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17310994 (0x1082512)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 24 17:10:40 2024 GMT
            Not After : Aug  6 06:00:00 2025 GMT
        Subject: CN=1c25067435af0219f4aa213dfdec58f7d04c0367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:ed:6c:7d:0a:2b:70:cc:04:da:8b:1f:6e:ca:
                    23:9a:06:03:41:f8:34:3f:8c:a5:f1:0f:f4:76:f5:
                    84:e4:f7:64:56:b6:ce:1c:51:f2:59:9c:f5:f9:09:
                    fa:26:44:e1:dd:98:0c:12:51:8d:33:dd:8c:22:ff:
                    8c:b6:e8:97:5b:ca:0c:8b:61:f2:a3:08:23:d5:a7:
                    86:22:21:2e:af:3b:ad:cc:3c:28:60:16:aa:b4:cf:
                    1c:96:ae:cd:3c:53:f6:6c:98:86:44:5e:3d:79:a3:
                    5e:9a:c0:5b:f5:c2:c5:cd:ab:c2:82:fc:1a:f6:cc:
                    ae:89:67:3d:96:c3:be:09:2c:c1:bb:dc:dc:99:04:
                    88:a8:fb:0b:02:e5:bd:06:58:51:9f:1c:d8:c1:9a:
                    eb:39:04:53:2e:cd:bd:8a:ef:02:19:85:b0:1c:8a:
                    ba:9f:f8:61:3c:d1:7c:da:b3:de:b3:a0:08:16:3e:
                    fa:0f:bf:0d:80:01:43:30:ec:aa:38:70:cd:a5:b0:
                    c2:47:cb:eb:ff:05:9a:27:e9:8d:b8:2d:74:df:16:
                    77:b3:d0:93:65:fd:91:11:07:9d:cf:da:a4:6f:fa:
                    9d:36:0a:63:dd:66:e0:0a:6c:32:76:39:8a:05:1f:
                    0a:c8:3d:f6:f5:76:33:45:7b:70:40:e9:7d:29:1e:
                    56:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:CE:E0:DC:6A:E7:B3:4B:32:DB:B8:83:A1:05:AE:2C:90:25:0A:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6bfca587-7411-4614-a1d9-2ffa8e98e702/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6bfca587-7411-4614-a1d9-2ffa8e98e702/1c25067435af0219f4aa213dfdec58f7d04c0367.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273172

    Signature Algorithm: sha256WithRSAEncryption
         ab:1d:49:5b:c3:02:db:88:b8:fc:3e:ef:3a:9b:9b:5f:73:a6:
         e4:53:fa:61:37:38:de:e1:7d:10:60:15:18:a4:eb:cb:12:f4:
         18:39:89:35:ae:40:8d:f5:72:0c:2f:29:19:8d:5b:cf:8d:1c:
         34:85:d1:84:4e:b0:0a:a2:1f:66:0f:2f:d0:60:be:e1:30:7a:
         4e:64:5a:24:c8:68:2c:08:1b:b4:da:bd:50:9d:5c:57:be:c5:
         03:26:6d:30:30:5e:d9:97:96:34:38:b1:9c:17:4e:7b:6f:d8:
         ca:77:cc:67:90:08:2a:c2:aa:91:b3:ed:aa:6a:09:eb:51:e5:
         17:c4:40:d1:08:30:e1:ff:05:9e:3b:dd:d4:75:e5:d3:c6:e4:
         50:2e:aa:4a:11:1d:fa:8e:75:48:6a:b4:20:71:dd:a7:7b:61:
         27:e4:09:da:64:e1:4a:3b:20:e4:98:47:71:cb:53:fa:39:b9:
         95:bd:54:db:25:4b:8e:25:b8:fe:e4:f6:d1:cb:17:f6:03:15:
         68:7c:1c:d1:e3:10:c2:97:62:fd:3b:a4:ec:d1:21:b7:d7:13:
         16:dd:5c:e3:de:c8:19:98:37:48:8e:38:f0:a8:bf:63:94:32:
         00:f5:c3:a3:0c:29:51:92:d2:ee:0f:a7:ce:f4:ab:d8:53:01:
         4b:2a:8c:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----