Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dc2f56aba4f2885de86b98a40999ce82d8d0cef.cer
File:                     2dc2f56aba4f2885de86b98a40999ce82d8d0cef.cer (raw, json)
Hash identifier:          MzEqRBLAzGIAO4o5DkoAX35datEb0QmzCZ1DkektlgU=
Subject key identifier:   09:F1:6E:C4:91:A3:4A:BB:1B:1D:2F:74:BD:23:8C:18:98:D8:2A:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01013E82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/2dc2f56aba4f2885de86b98a40999ce82d8d0cef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 16:37:00 +0000
Certificate not after:    Wed 05 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 273131
                          IP: 2803:e450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16858754 (0x1013e82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 16:37:00 2023 GMT
            Not After : Mar  5 06:00:00 2025 GMT
        Subject: CN=2dc2f56aba4f2885de86b98a40999ce82d8d0cef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:17:49:a1:b9:f7:eb:6c:a3:8c:ca:d7:bc:23:
                    01:28:cd:e6:b5:12:62:27:d9:cf:32:5c:c2:35:c1:
                    8c:c0:d2:5d:8a:0a:6b:17:89:a7:26:37:d9:c6:8a:
                    d2:1b:0c:f1:7f:31:5d:58:bb:6e:f9:ad:e4:a5:7b:
                    09:b1:f7:a2:2d:d7:fd:4b:72:d9:22:92:72:41:30:
                    a2:b4:7c:00:ad:42:64:7e:db:db:6d:9d:44:2b:89:
                    7e:98:a8:2f:d2:d5:c3:81:cb:7d:2a:cf:db:05:48:
                    49:a1:2b:b0:22:e2:a0:14:de:84:d9:aa:45:66:72:
                    a6:7d:e0:85:8e:a6:b8:51:b5:60:21:c4:e9:0f:fd:
                    13:12:59:58:8a:47:fc:9f:90:92:d5:91:47:61:93:
                    7b:5d:68:0b:f9:82:35:e9:c0:79:35:c8:3d:c0:2f:
                    0b:6e:1a:74:52:ce:37:2e:53:cf:17:99:7d:8a:1a:
                    9d:44:08:89:c2:ae:b2:41:30:08:b8:1c:c3:5a:ff:
                    04:40:96:f5:9e:f6:37:de:6c:bc:ae:c1:ec:e4:c5:
                    ea:be:06:16:ec:1c:df:f7:8b:69:8e:86:73:03:95:
                    8a:8d:c7:e0:4d:57:23:eb:d4:21:8a:9d:0a:f8:35:
                    15:c0:e9:94:81:de:d5:88:d0:6e:eb:cf:45:95:30:
                    ef:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:F1:6E:C4:91:A3:4A:BB:1B:1D:2F:74:BD:23:8C:18:98:D8:2A:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fad740b9-e90e-46d5-aade-a05c983ba195/2dc2f56aba4f2885de86b98a40999ce82d8d0cef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273131

    Signature Algorithm: sha256WithRSAEncryption
         96:33:9d:83:b2:ff:81:96:6c:3e:87:ec:59:14:54:94:64:ef:
         e8:67:47:eb:0b:24:89:6c:38:82:4a:0e:82:33:ee:e2:cb:be:
         8f:4c:30:21:a2:55:9b:54:d5:82:57:d9:14:f3:c5:2b:a6:67:
         27:84:76:3a:cc:fa:dd:63:0e:a0:1b:d6:f9:28:12:a4:ec:c5:
         a0:1e:e8:a3:b3:ca:7d:48:5d:a4:3f:8d:e4:7e:18:c7:13:14:
         e9:61:c6:b3:7c:dd:73:b4:f5:27:58:71:26:5f:68:b0:8d:22:
         e2:ce:05:4e:78:bd:5a:40:53:72:44:ed:f6:c4:4c:01:ff:71:
         2c:ed:cd:df:2e:2d:0a:c3:f7:db:f5:5e:6b:dd:84:52:a6:9f:
         50:e8:dd:5b:67:f2:b0:79:6a:fa:9d:03:73:68:8e:34:4b:88:
         60:a8:fc:8f:55:e4:31:a8:5f:8d:ae:5e:8b:3d:07:7b:11:70:
         a5:8d:c3:17:28:4f:b8:da:a3:1e:5f:17:5d:1b:03:12:6b:22:
         ed:92:db:20:98:0c:0a:7f:fd:80:e4:8c:81:82:0d:07:b8:af:
         ae:00:72:46:6f:0b:dd:fe:91:bc:a4:75:82:80:8a:2a:21:71:
         b9:fe:c8:fa:d2:2d:4a:2d:27:d3:7f:2c:c1:d8:b3:25:85:bf:
         df:3b:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----