Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1cac943e7394d4cb27271bd00d23de9190f57fb5.cer
File:                     1cac943e7394d4cb27271bd00d23de9190f57fb5.cer (raw, json)
Hash identifier:          TzyEyHdfhniHAmcO8Chc/46AYNV/TfotzWK4Zecbne8=
Subject key identifier:   A7:5E:FD:DA:76:FD:EB:3A:91:9C:C7:EF:9B:03:F1:37:91:48:30:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01020C9E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a9e9e943-4629-4840-b58b-10bdc6fcfff9/1cac943e7394d4cb27271bd00d23de9190f57fb5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a9e9e943-4629-4840-b58b-10bdc6fcfff9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 19:57:07 +0000
Certificate not after:    Tue 14 Jan 2025 14:51:45 +0000
Subordinate resources:    AS: 272959

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16911518 (0x1020c9e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 22 19:57:07 2023 GMT
            Not After : Jan 14 14:51:45 2025 GMT
        Subject: CN=1cac943e7394d4cb27271bd00d23de9190f57fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:58:92:5b:b6:9a:7b:d3:11:58:51:df:b2:d3:
                    8f:c0:66:33:c7:da:58:c3:e5:92:22:0f:99:44:a9:
                    13:c2:bd:ca:95:3a:97:8d:1a:02:8f:64:b6:cb:1e:
                    5b:9d:fb:fb:f2:12:55:b2:da:dc:15:09:b2:0c:88:
                    3e:00:ad:20:f3:bc:93:87:f2:21:f0:27:58:a4:36:
                    f5:22:1a:de:ae:66:a1:59:d4:db:94:8a:7b:a3:71:
                    97:08:df:ae:2c:02:2e:5a:c2:7c:43:5a:79:2b:2d:
                    42:81:d9:35:d8:75:e8:db:6d:56:c8:2d:5c:ec:cf:
                    d1:cd:eb:1c:20:ba:80:c4:b7:02:48:50:02:8e:d1:
                    a5:61:8f:25:bc:a9:4c:50:67:cf:b5:17:94:6a:6b:
                    4a:9f:08:8d:6f:b6:81:72:76:32:4c:84:05:98:45:
                    fd:90:f0:2d:1f:36:77:6d:29:68:89:a3:92:2f:32:
                    47:9d:d4:6e:63:82:b0:8f:d0:e6:10:c5:25:e4:a3:
                    68:61:43:bd:62:3a:ba:22:d2:25:78:ee:21:00:a2:
                    0f:bd:fb:09:b6:0b:68:81:35:37:13:60:45:5b:59:
                    fa:5f:d7:a3:44:d6:49:8d:37:d4:d2:ed:7e:db:c4:
                    3f:3e:5c:e0:2f:bb:e7:22:44:2a:ff:1d:ed:d1:0e:
                    bb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5E:FD:DA:76:FD:EB:3A:91:9C:C7:EF:9B:03:F1:37:91:48:30:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a9e9e943-4629-4840-b58b-10bdc6fcfff9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a9e9e943-4629-4840-b58b-10bdc6fcfff9/1cac943e7394d4cb27271bd00d23de9190f57fb5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272959

    Signature Algorithm: sha256WithRSAEncryption
         bf:aa:31:24:09:63:05:5d:d4:f7:44:a6:1f:1a:c7:ba:e8:62:
         fd:87:d7:5c:3f:a5:42:1b:5b:21:57:98:eb:78:5c:ac:32:ab:
         f8:e6:bb:bc:06:50:5c:ec:0f:1a:a8:82:cd:a9:bc:95:61:2b:
         2d:39:bc:7a:69:86:03:81:55:e5:33:11:72:77:ed:32:f5:49:
         6e:15:f5:b4:c0:bb:d9:cd:f8:43:6a:78:35:82:96:e8:a3:e7:
         e6:9a:b8:cd:a8:fb:1a:13:6b:db:e1:5f:32:ea:54:b5:2a:9a:
         08:f9:91:94:16:83:70:e3:57:f6:70:da:13:4d:0d:b3:89:0e:
         ac:77:f7:50:03:c0:c1:7e:39:4a:d7:60:4f:f4:53:a5:49:ee:
         4f:5e:95:ae:84:71:45:f0:d6:1d:16:88:01:58:0a:2d:3c:75:
         c3:62:56:66:8a:a8:c4:db:13:be:b3:48:6a:5e:2c:04:6e:89:
         8c:c0:65:e0:2d:40:fe:9d:17:ad:64:56:d6:46:87:da:3e:b3:
         3b:89:6d:b1:ae:ce:b7:5f:59:de:54:ea:f2:54:72:40:fe:09:
         0f:ea:43:4e:80:b3:d3:db:44:94:cb:38:b6:40:6f:1e:12:78:
         6d:17:68:a9:92:c0:69:0b:00:3f:06:23:86:2c:57:19:b6:0d:
         af:9d:32:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----