Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1fc52709f01544bf131850d50279fba648a5b20a.cer
File:                     1fc52709f01544bf131850d50279fba648a5b20a.cer (raw, json)
Hash identifier:          C4r0RXZD0IHAhQm+9zYA+HJ90mYTgqQBUowcKd4ShAE=
Subject key identifier:   51:67:7C:4F:FF:7A:02:56:84:BB:DB:7F:6F:CD:33:17:AE:BF:3F:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C111E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/69e4cc58-10a1-4908-bc26-61b1efb988c3/1fc52709f01544bf131850d50279fba648a5b20a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/69e4cc58-10a1-4908-bc26-61b1efb988c3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 22:08:40 +0000
Certificate not after:    Sat 11 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 27760

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17568030 (0x10c111e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 22:08:40 2024 GMT
            Not After : Jan 11 14:00:00 2025 GMT
        Subject: CN=1fc52709f01544bf131850d50279fba648a5b20a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:12:a0:59:2e:af:c1:9c:34:b1:5e:d8:0b:
                    c0:ac:2f:ca:1e:f2:0f:38:f5:46:6e:39:f4:79:06:
                    c7:6c:e5:ea:c8:d6:fb:09:6b:b9:68:3e:75:d7:3f:
                    05:4f:d6:ae:e0:12:02:1d:ca:de:f1:16:3c:6a:ab:
                    f5:e5:0b:08:24:a4:f0:a8:32:ac:ae:dc:02:6c:6b:
                    4b:bd:67:ac:3e:29:11:29:8b:8a:e7:e0:e6:74:fe:
                    a1:17:fb:bd:49:39:e1:f2:cc:15:3c:97:b8:ed:3f:
                    61:b6:f8:e9:08:cb:6b:96:f7:a5:94:fe:0b:78:6d:
                    58:9b:1f:53:68:c0:7a:1d:3f:d9:8b:c1:89:c2:5c:
                    cf:75:b8:a6:a3:aa:13:1a:76:0c:8d:43:c1:d1:94:
                    59:5f:9a:fb:4b:7e:50:30:fe:ef:3c:c9:aa:f1:d1:
                    5c:14:c1:f8:8c:73:54:59:d3:d2:da:e4:be:ad:e0:
                    86:6d:37:c3:7f:25:42:fc:05:db:a8:db:62:88:39:
                    f9:e6:01:af:e0:27:f9:de:5c:cb:1c:7f:eb:eb:45:
                    ea:ca:03:23:ea:5b:62:a1:ef:0a:5d:19:a6:5a:cc:
                    ae:f7:a8:de:2d:fc:ca:af:17:6d:ca:68:9e:ce:0f:
                    9e:31:e0:e4:28:d9:57:17:d4:81:4f:a7:4e:9b:c7:
                    cb:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:67:7C:4F:FF:7A:02:56:84:BB:DB:7F:6F:CD:33:17:AE:BF:3F:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/69e4cc58-10a1-4908-bc26-61b1efb988c3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/69e4cc58-10a1-4908-bc26-61b1efb988c3/1fc52709f01544bf131850d50279fba648a5b20a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27760

    Signature Algorithm: sha256WithRSAEncryption
         a1:89:41:ec:2c:37:55:dc:32:64:a8:33:e9:2d:67:aa:04:b7:
         c5:ca:21:1c:dc:5c:ba:95:9f:d2:5d:1b:78:46:ed:99:0e:70:
         47:f6:e8:e0:32:e2:fe:5b:a0:59:48:57:b2:f2:b6:6a:63:2b:
         5a:b8:5c:52:f3:93:15:03:bd:d6:7d:fc:9a:d2:34:35:13:f2:
         23:43:7b:c1:e6:e8:b2:9f:bc:bf:09:e0:26:e4:3b:b5:b9:ba:
         d7:2d:47:22:da:32:92:af:54:82:2d:12:ec:c0:1e:6c:b9:b1:
         2e:5b:98:40:a1:a4:53:c1:8c:4c:88:dd:5b:7a:f3:6c:f0:01:
         61:6f:ce:f3:4d:30:8f:7f:d9:b8:1f:ad:19:0d:1e:99:df:d4:
         67:13:6e:f7:48:a3:fc:cd:d7:0e:8b:b2:a9:97:91:94:f3:75:
         3c:26:f6:4e:79:5a:ba:14:c1:c5:db:86:50:b9:bb:31:c3:4d:
         0f:54:bc:7b:df:dc:4e:5d:25:ea:8d:0e:f1:65:ff:e7:da:9f:
         41:17:55:e3:14:f8:5d:84:68:46:9b:2a:c1:64:71:65:b1:5d:
         f3:85:c4:90:87:30:b4:13:59:7f:9b:61:93:8f:cb:0b:db:db:
         b7:73:42:a8:d9:64:3d:18:a0:76:09:9c:f2:bc:5f:b9:63:33:
         ef:b9:9c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----