Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/24c7728922714ea904047c39751b560db2631b8f.cer
File:                     24c7728922714ea904047c39751b560db2631b8f.cer (raw, json)
Hash identifier:          f/ptqhCeO8/SjuNNR6FG/p8WnvL4MHpIfSuV6JOKdhQ=
Subject key identifier:   6A:AC:52:20:B5:F3:09:28:E4:F8:B2:EA:E6:6A:AD:E0:2F:3A:53:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F16110
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f9a0c603-5af4-41f0-9d1d-0169159f6f09/24c7728922714ea904047c39751b560db2631b8f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f9a0c603-5af4-41f0-9d1d-0169159f6f09/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 16:17:27 +0000
Certificate not after:    Sat 29 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 273034
                          IP: 2803:cb90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15819024 (0xf16110)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 16:17:27 2023 GMT
            Not After : Mar 29 06:00:00 2025 GMT
        Subject: CN=24c7728922714ea904047c39751b560db2631b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1e:8f:32:10:ce:97:bf:e9:7e:9a:74:0c:1f:
                    3e:da:cd:96:6a:a2:bc:f7:fa:50:22:e1:d8:5f:4a:
                    01:fd:dc:24:9b:1b:25:7b:f5:d5:a6:c6:06:02:26:
                    81:6c:1b:d0:69:44:aa:be:46:46:8b:18:37:c4:5c:
                    96:94:31:36:1c:55:f7:6c:66:5f:12:44:d4:32:d6:
                    2e:d0:83:f9:82:41:6c:50:82:8a:02:dc:7b:dc:3a:
                    7a:37:34:5b:19:de:96:bb:56:dd:5f:6a:e6:d1:49:
                    6d:62:9e:c0:ea:b2:5d:0d:a2:a9:2f:7e:2c:7a:83:
                    cd:2f:c0:4e:34:b5:91:65:a3:d8:c4:5b:0d:bc:95:
                    34:66:94:c7:2c:3f:02:9d:89:9b:39:49:8f:5b:c8:
                    d9:e2:06:78:46:77:2a:98:70:16:17:e1:ea:8d:13:
                    a8:44:0b:81:aa:2a:d3:c5:ee:ac:79:5d:8f:bd:b3:
                    56:2e:94:b7:e8:4f:9e:81:87:81:91:d2:b5:63:d7:
                    09:3c:b5:b6:9f:3b:32:0a:6b:21:8a:d4:b6:f8:70:
                    d0:8a:c1:32:91:a2:e5:4f:9e:8f:f5:a2:97:28:c5:
                    f4:dc:9b:a3:0f:1a:38:19:1f:9c:69:3b:63:a2:8c:
                    79:5c:9a:55:8b:02:69:6b:80:9a:a0:15:f1:47:db:
                    d4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:AC:52:20:B5:F3:09:28:E4:F8:B2:EA:E6:6A:AD:E0:2F:3A:53:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f9a0c603-5af4-41f0-9d1d-0169159f6f09/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f9a0c603-5af4-41f0-9d1d-0169159f6f09/24c7728922714ea904047c39751b560db2631b8f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cb90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273034

    Signature Algorithm: sha256WithRSAEncryption
         00:d5:3f:92:1d:ff:8c:4a:d2:ce:53:1c:6c:09:e4:ef:4d:29:
         46:e5:28:58:a6:1b:e9:fe:cf:e1:4b:0a:f6:70:07:06:20:2e:
         84:56:84:96:50:ff:bd:33:60:c2:6c:d3:45:c6:9d:2f:ad:2e:
         e9:1a:6c:97:af:28:30:e7:1d:c8:40:34:ce:51:52:dc:09:23:
         93:ea:4f:04:0e:29:d2:17:ac:ce:fc:f1:8d:52:af:a2:23:6d:
         fc:23:f4:dc:f3:52:23:97:15:75:93:b1:c1:75:60:f7:26:5e:
         03:9f:52:76:84:e1:d4:ac:d0:f3:76:a5:c4:3f:6d:db:34:f4:
         72:3e:02:82:13:50:5d:16:6a:74:22:3b:f4:7c:23:fd:c0:39:
         35:f9:29:24:1e:34:c1:15:6f:8a:f6:f9:0a:f9:bb:59:85:68:
         5e:8d:00:3c:49:d2:9c:ed:03:36:f0:f6:d5:99:85:1c:cb:40:
         a9:f4:2a:5e:89:15:c0:08:ce:51:92:d9:3a:41:4f:e7:ba:72:
         7e:21:bb:a2:12:98:69:e5:07:a1:46:ca:b9:f8:24:0a:6d:fe:
         e6:e1:e6:55:5c:09:f5:81:cb:9b:3d:07:c5:20:c7:ba:b7:1a:
         79:b8:30:9a:3a:e1:67:b8:2f:88:51:15:81:c6:21:96:e5:d5:
         b2:15:83:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----