Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24b9fff4ff131441c83d4c5d9eb4c63732c98e17.cer
File:                     24b9fff4ff131441c83d4c5d9eb4c63732c98e17.cer (raw, json)
Hash identifier:          oghx7NwY5btbK1QhcbA6qVccsKYWVCryGvbIDXo6+l8=
Subject key identifier:   3A:4A:2E:62:B0:F3:15:FB:90:10:66:47:66:39:64:62:F3:55:77:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01103E2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a25cdb26-ebe7-4178-ba90-a2633dc22efb/24b9fff4ff131441c83d4c5d9eb4c63732c98e17.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a25cdb26-ebe7-4178-ba90-a2633dc22efb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:15:15 +0000
Certificate not after:    Sun 06 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 273208
                          IP: 2803:3650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17841706 (0x1103e2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 18:15:15 2024 GMT
            Not After : Apr  6 06:00:00 2025 GMT
        Subject: CN=24b9fff4ff131441c83d4c5d9eb4c63732c98e17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:f8:d3:68:35:18:ca:ff:5f:95:a4:ca:ae:17:
                    e7:8c:45:e0:7e:db:80:2a:67:36:0f:c4:e8:5d:50:
                    70:40:b3:cd:55:45:1c:65:ea:12:8f:93:a9:32:79:
                    39:13:d6:5d:f9:e0:8c:cf:5f:ad:26:8f:90:be:3c:
                    f3:a3:d5:50:a5:ef:9e:f8:08:ae:82:b7:df:c0:d8:
                    e1:22:07:f5:2d:42:3a:21:86:f7:01:d3:91:53:bf:
                    74:07:1a:48:2a:27:f0:a7:ba:7f:63:18:3d:76:c3:
                    f9:95:57:9a:b7:82:db:9b:8d:05:78:a6:af:45:2e:
                    fa:e9:60:3f:9c:25:87:02:3b:c4:a3:e4:09:71:d7:
                    1a:f2:48:8e:40:ff:d3:48:15:08:fc:5c:32:7c:2f:
                    b7:4a:29:12:2d:76:49:1b:6f:1a:0d:27:bc:8c:21:
                    5d:98:65:69:50:18:3a:70:23:ec:bc:4b:59:41:e7:
                    be:82:c8:46:e4:ec:a5:df:42:c0:af:06:e1:74:bf:
                    30:a7:3a:e6:8b:37:e3:83:13:10:60:3e:aa:f8:c8:
                    46:5b:d5:af:c7:27:66:2a:2a:72:ba:a0:ec:cd:e8:
                    b0:cc:34:3b:e8:5b:82:39:72:25:38:79:84:6c:aa:
                    a5:8c:c5:e7:09:6b:20:02:05:aa:9e:d0:57:94:0b:
                    d0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:4A:2E:62:B0:F3:15:FB:90:10:66:47:66:39:64:62:F3:55:77:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a25cdb26-ebe7-4178-ba90-a2633dc22efb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a25cdb26-ebe7-4178-ba90-a2633dc22efb/24b9fff4ff131441c83d4c5d9eb4c63732c98e17.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273208

    Signature Algorithm: sha256WithRSAEncryption
         67:2c:b0:45:cf:c6:cf:93:0a:29:41:de:cb:ae:58:93:b8:c7:
         58:fc:41:b7:71:fa:d5:d1:de:4f:2c:f1:40:6f:3c:d7:e6:44:
         72:4a:cd:92:aa:1d:65:90:c4:6e:89:09:22:26:2e:10:79:aa:
         93:0a:68:0a:f0:91:c7:63:85:5c:39:72:1d:d1:ef:6d:cb:09:
         f4:b9:c6:ab:2b:bb:45:ba:72:56:cb:2e:ba:63:99:83:97:b4:
         94:01:89:da:66:69:42:de:e5:28:ba:98:55:dc:94:41:3b:d6:
         20:91:63:10:c7:91:47:26:e7:26:b0:fe:f4:7d:8f:44:e9:24:
         45:d7:8d:48:0d:8f:ed:2f:7d:cb:84:fb:3f:b7:fb:63:a9:d5:
         75:e6:a5:51:27:60:49:45:45:11:87:27:3f:a0:90:b2:48:57:
         6f:5b:7f:0f:32:f6:a6:a5:9c:14:0e:27:31:f8:86:14:c5:10:
         be:87:3c:9a:2c:79:9f:bb:2e:f9:78:ff:0c:10:a6:34:ff:9c:
         0c:b3:2e:73:ad:2a:73:22:d6:fd:ba:8d:04:52:b9:9f:12:b1:
         5b:7f:e1:ac:92:04:3f:14:bc:f5:26:64:b0:66:75:43:26:22:
         40:c2:3e:68:91:36:e1:f8:00:e7:9b:08:cf:8b:ab:12:53:22:
         a4:0e:9f:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----