Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/298baa211045a8e2be05ab2d5f2e3594f5d83707.cer
File:                     298baa211045a8e2be05ab2d5f2e3594f5d83707.cer (raw, json)
Hash identifier:          hDkt2KK588N8eoCWwUJtFhNW5EM9gLHNN/uclrY1e9A=
Subject key identifier:   09:16:10:32:05:AF:B5:2F:CD:D1:6A:9D:C7:EF:4C:C2:9D:DE:53:4D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01066FF6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c20378cb-b6db-464a-b796-71ebb9cdcba4/298baa211045a8e2be05ab2d5f2e3594f5d83707.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c20378cb-b6db-464a-b796-71ebb9cdcba4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Jan 2024 19:53:05 +0000
Certificate not after:    Mon 15 Sep 2025 06:00:00 +0000
Subordinate resources:    AS: 273158
                          IP: 2803:c250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17199094 (0x1066ff6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  9 19:53:05 2024 GMT
            Not After : Sep 15 06:00:00 2025 GMT
        Subject: CN=298baa211045a8e2be05ab2d5f2e3594f5d83707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6b:8a:19:38:64:ca:8b:a5:7c:8f:80:18:82:
                    e0:c9:3a:c0:a3:f6:18:23:48:d9:33:a5:3d:a4:00:
                    e5:1d:11:a7:44:1d:60:08:0c:28:25:8f:cd:ff:37:
                    49:17:6c:d7:9a:5d:d7:aa:25:60:ba:b2:f5:06:44:
                    56:bf:74:39:3d:80:90:e2:3d:d3:2c:60:a1:b9:c2:
                    3e:13:c8:31:89:15:10:44:f4:fd:a1:45:9b:d9:4a:
                    1e:4f:19:0f:ae:22:7d:10:ca:7e:21:75:e4:a3:01:
                    20:57:35:01:13:18:e0:c3:53:8f:26:bc:5d:d3:78:
                    f0:59:26:06:f1:94:fa:cd:e6:51:14:14:c9:b9:8a:
                    8d:10:6e:f8:46:eb:18:61:bc:b6:35:e7:f0:e5:58:
                    3b:26:4f:bf:c0:1c:07:09:38:77:ea:75:76:ca:28:
                    15:9e:60:86:a3:78:b8:b7:99:a2:0c:2f:63:9e:68:
                    4f:8d:c0:46:41:3d:d4:e9:cc:90:bd:89:fb:25:c1:
                    ee:c2:6d:27:2c:6f:fd:f2:42:b7:4e:1b:9d:97:51:
                    81:9e:25:4a:11:0d:db:3b:f1:a1:4d:49:1f:9c:42:
                    a4:7d:da:41:76:51:f5:07:af:ec:c7:42:42:39:69:
                    77:f2:49:5d:c6:b6:91:4d:55:23:b1:fa:65:81:f0:
                    db:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:16:10:32:05:AF:B5:2F:CD:D1:6A:9D:C7:EF:4C:C2:9D:DE:53:4D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c20378cb-b6db-464a-b796-71ebb9cdcba4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c20378cb-b6db-464a-b796-71ebb9cdcba4/298baa211045a8e2be05ab2d5f2e3594f5d83707.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273158

    Signature Algorithm: sha256WithRSAEncryption
         b8:62:27:cf:a9:7e:4b:27:b7:24:1b:a2:2b:f3:88:28:9c:f6:
         5c:e5:a7:6c:fa:a8:c6:9d:e0:d0:1d:7d:84:22:f6:24:ed:51:
         67:e6:ea:27:c1:5e:fb:ce:16:ed:b7:48:36:e7:7f:16:10:ab:
         17:76:19:52:22:52:7f:55:f5:16:55:99:d3:db:c4:fc:a3:f9:
         94:23:06:25:e0:bf:71:eb:22:74:a2:78:26:31:bc:57:5c:37:
         0a:f9:10:61:db:07:95:13:5a:7c:57:d6:3a:7e:70:04:ca:1c:
         e6:d6:72:60:3a:2f:69:a8:ec:3d:82:8a:c7:ff:c5:72:f7:59:
         c5:8c:c6:20:22:bf:b6:e1:96:fb:fd:c8:bf:48:2c:e0:38:c6:
         ef:a3:1b:81:73:52:4c:ea:ac:a0:b5:38:42:07:1a:3b:7c:bb:
         64:57:0c:f5:a2:9a:cf:f5:09:87:f5:03:10:ad:c9:7e:9e:97:
         57:0d:15:e5:72:79:ed:de:da:40:6c:52:07:4a:b3:a0:66:24:
         aa:28:f7:ba:42:10:3a:49:8c:0a:80:dc:f8:6e:83:79:df:24:
         82:29:0f:52:2e:2a:48:0b:05:94:cd:ac:1e:98:8d:8a:dd:22:
         5b:aa:37:01:d3:c3:c9:df:db:8b:af:aa:78:fa:f9:95:8a:bb:
         ec:31:f4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----