Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20fda42de1f55dc56a129230e50aa522e4955c5b.cer
File:                     20fda42de1f55dc56a129230e50aa522e4955c5b.cer (raw, json)
Hash identifier:          clJODSPu41GCtVsjGODyeU4prYcFa9fr+doVf0T055M=
Subject key identifier:   D2:77:51:2D:0F:43:A5:F2:78:76:F3:4A:1F:BD:18:45:A4:2D:F4:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FDF128
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/64130009-d422-496e-94f9-88ed67282cc8/20fda42de1f55dc56a129230e50aa522e4955c5b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/64130009-d422-496e-94f9-88ed67282cc8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 23 Oct 2023 22:38:23 +0000
Certificate not after:    Thu 19 Jun 2025 02:47:34 +0000
Subordinate resources:    AS: 270181
                          IP: 2801:c4:37::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16642344 (0xfdf128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 23 22:38:23 2023 GMT
            Not After : Jun 19 02:47:34 2025 GMT
        Subject: CN=20fda42de1f55dc56a129230e50aa522e4955c5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:60:40:b2:22:82:bf:80:de:86:41:62:18:
                    c5:62:f4:6b:5d:20:75:1b:0c:f9:1b:8a:a9:a0:6a:
                    59:25:26:f2:96:b0:e9:b2:67:b4:e0:76:f8:45:33:
                    7e:55:43:41:93:b1:b1:f5:a3:a4:2c:ec:28:e7:c1:
                    f7:70:df:25:68:51:df:2a:df:7e:98:52:6c:13:0c:
                    f4:07:11:3a:55:29:a2:eb:14:d0:f2:be:ed:c1:c3:
                    14:70:1b:e9:4b:f9:98:f7:66:16:79:26:cf:83:f7:
                    c8:10:4f:9f:28:a7:2b:6f:af:c6:86:e5:63:d0:33:
                    90:90:c8:3a:ec:d3:d4:3f:1f:b5:45:58:4d:f2:b2:
                    69:32:ab:ac:54:f9:9f:6e:09:fa:35:0b:32:f7:3b:
                    7d:28:21:a5:1b:fb:30:14:d2:1d:ac:21:ab:26:7f:
                    8b:7d:f5:3e:8b:b4:46:51:1a:b6:af:b0:f2:3f:52:
                    76:75:51:73:ab:69:8b:a1:9a:cf:c3:a5:f7:70:8b:
                    03:72:7d:25:9f:17:65:7c:dc:ca:11:3e:eb:cc:7d:
                    f6:66:e9:70:58:dc:1c:2f:e3:9a:23:50:79:b9:bd:
                    1d:f1:60:7f:05:24:40:5a:57:78:71:ed:68:42:51:
                    76:89:28:f1:aa:35:69:cf:92:74:e6:69:d1:b4:26:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:77:51:2D:0F:43:A5:F2:78:76:F3:4A:1F:BD:18:45:A4:2D:F4:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/64130009-d422-496e-94f9-88ed67282cc8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/64130009-d422-496e-94f9-88ed67282cc8/20fda42de1f55dc56a129230e50aa522e4955c5b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:37::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270181

    Signature Algorithm: sha256WithRSAEncryption
         c2:18:47:c2:e1:20:a0:57:6b:ab:dd:20:d7:81:34:a9:52:c2:
         f8:c8:0c:31:4e:63:39:d4:0e:62:95:7b:ca:28:26:0e:48:01:
         6e:5d:b6:a8:09:e7:48:55:b8:02:92:d7:73:40:89:db:e3:43:
         de:c0:28:b5:21:28:e8:9b:a5:72:30:21:23:28:2c:dc:57:f7:
         dd:96:64:9f:b8:1c:40:34:9f:ba:09:d8:b7:a4:d2:eb:12:b3:
         f9:53:30:86:03:6b:1b:cf:b1:bc:aa:d3:58:f3:f9:48:85:d4:
         63:cc:b1:70:38:b2:c6:0e:fb:6d:1e:75:55:4a:66:67:81:81:
         18:83:04:0a:19:a8:3b:57:79:0e:a2:4b:cf:1b:8b:b1:28:29:
         64:81:6e:b4:56:59:2d:a7:ca:b3:99:92:96:c1:e8:0b:b0:8a:
         1e:88:4e:10:a6:c2:6f:1a:a1:dc:85:f7:02:b5:42:6c:54:13:
         2b:37:49:aa:b4:cd:ce:a7:a1:ed:70:87:b1:74:16:79:e6:55:
         a6:8d:2c:34:f1:84:71:9a:ef:7f:16:94:2b:77:71:eb:db:fe:
         f8:8f:47:ab:c6:38:b4:5e:ea:2a:6b:76:c8:f6:be:1d:4c:55:
         f8:2e:fa:7e:34:cb:d2:e0:6e:f7:f8:fd:27:5a:d5:ed:b2:88:
         b0:58:cd:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----