Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/291cff6f2a1c68893aa8b19f58d9e106e7408074.cer
File:                     291cff6f2a1c68893aa8b19f58d9e106e7408074.cer (raw, json)
Hash identifier:          pej1+XpR2CTTaDy0jPRynmShoh28iQuF6+S4xMnC+Us=
Subject key identifier:   A6:81:F3:1D:15:23:C5:BA:89:44:80:35:CE:BA:48:9E:A4:44:E2:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A9DB7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/60d76541-70eb-45fb-8db9-e6a52e1d7504/291cff6f2a1c68893aa8b19f58d9e106e7408074.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/60d76541-70eb-45fb-8db9-e6a52e1d7504/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 19:56:31 +0000
Certificate not after:    Mon 29 Sep 2025 13:02:26 +0000
Subordinate resources:    AS: 262837
                          IP: 186.251.208.0/21
                          IP: 2804:2c8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17472951 (0x10a9db7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 15 19:56:31 2024 GMT
            Not After : Sep 29 13:02:26 2025 GMT
        Subject: CN=291cff6f2a1c68893aa8b19f58d9e106e7408074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:32:72:0d:7b:52:95:b3:13:8b:14:e5:f7:95:
                    c4:e3:92:6f:70:3c:26:9f:39:13:c2:d9:c6:08:55:
                    8f:d0:1e:16:eb:88:6f:7e:6f:71:46:36:0c:08:03:
                    f8:f7:d3:a8:1a:4d:17:ad:83:c8:d5:cd:b6:1d:50:
                    be:7f:76:5a:3a:9f:97:a4:6a:c2:70:f6:e6:9f:03:
                    35:6c:68:e0:40:e1:d4:fd:d5:62:a9:ac:a1:6d:5e:
                    bb:d4:2b:25:69:29:75:8e:9b:7b:06:a0:6f:7d:e6:
                    e7:60:ae:61:5f:f1:91:0c:01:ba:51:d2:7c:67:39:
                    8c:ac:39:73:2b:96:b7:ad:86:3c:b0:6a:a1:6f:6b:
                    3f:08:9a:ea:df:47:dc:20:98:75:99:70:95:41:67:
                    28:b9:c7:e6:12:00:76:f0:85:d5:4b:9d:3e:76:79:
                    e9:82:68:e1:d8:f2:c8:b9:bb:6b:e6:22:e0:bc:fa:
                    05:d2:3e:f8:54:ef:14:a3:4e:69:f4:eb:cf:8f:f8:
                    36:27:2b:95:b1:22:30:a7:29:c8:cd:ac:54:6a:e2:
                    20:bd:92:f2:e3:d0:58:ad:a3:69:86:60:37:7b:78:
                    fc:72:23:06:1c:dc:0a:e2:ae:73:ff:6e:b6:b4:84:
                    d7:0e:10:62:50:fe:3f:40:b1:72:70:2b:15:33:8d:
                    16:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:81:F3:1D:15:23:C5:BA:89:44:80:35:CE:BA:48:9E:A4:44:E2:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/60d76541-70eb-45fb-8db9-e6a52e1d7504/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/60d76541-70eb-45fb-8db9-e6a52e1d7504/291cff6f2a1c68893aa8b19f58d9e106e7408074.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.251.208.0/21
                IPv6:
                  2804:2c8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262837

    Signature Algorithm: sha256WithRSAEncryption
         8f:80:3d:17:dc:d4:b9:e4:18:82:8b:42:45:94:0c:6a:38:fa:
         4a:20:c4:e3:38:bd:f9:ea:bb:1f:44:cf:db:ce:55:0a:5f:94:
         f1:e5:a7:e3:06:5c:f8:47:fc:53:a5:23:43:32:9a:7d:91:18:
         5f:cd:25:98:4d:04:ea:52:17:a4:46:3d:d2:82:c5:ba:d0:12:
         cf:c7:e7:e1:1a:f8:53:14:0c:90:94:13:b8:5a:e4:5e:4d:7e:
         c9:a9:c4:0e:a1:7c:57:75:90:8d:c0:2f:11:a1:e6:4b:18:cb:
         09:a1:21:39:2f:51:3e:44:f6:00:11:f9:65:72:42:a9:97:ab:
         85:1a:6b:7f:8c:90:50:a9:b7:0a:4f:ff:9a:5c:40:13:6f:99:
         ba:50:63:12:44:ea:65:41:ad:2c:20:87:7a:cf:b5:6f:0f:04:
         6a:70:fb:11:f8:35:ce:c4:22:d4:3c:0f:38:a4:80:24:81:88:
         5a:40:9c:6a:0a:6b:56:e1:dc:a6:a5:73:5f:d8:b0:04:73:1f:
         e0:98:d4:db:51:08:d8:bc:7a:9c:34:1d:a1:c9:12:a7:34:80:
         25:5f:4d:e3:5b:70:56:19:d5:6b:ca:d0:18:61:3b:67:8b:08:
         9d:2f:ef:3d:31:72:08:70:ab:fe:64:df:8d:7f:3e:74:2c:45:
         70:40:a0:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----