Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e3badce5f4eda115831b8ae848e99b2ecccf3e1.cer
File:                     2e3badce5f4eda115831b8ae848e99b2ecccf3e1.cer (raw, json)
Hash identifier:          eyVv9d+f9QcvSw8YcAcztD/fKIUic+ZMJav7FmI/X3g=
Subject key identifier:   9E:D8:28:3A:E3:82:91:3E:AE:C0:71:44:38:E1:C0:B7:79:F7:05:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102B2F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6892bcf4-9b23-483d-ba76-a84301949196/2e3badce5f4eda115831b8ae848e99b2ecccf3e1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6892bcf4-9b23-483d-ba76-a84301949196/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 01:58:56 +0000
Certificate not after:    Sun 03 Nov 2024 16:53:31 +0000
Subordinate resources:    AS: 272930
                          IP: 2803:cc50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16954099 (0x102b2f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 01:58:56 2023 GMT
            Not After : Nov  3 16:53:31 2024 GMT
        Subject: CN=2e3badce5f4eda115831b8ae848e99b2ecccf3e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a6:43:73:c2:a6:07:4a:d2:45:3d:18:68:8a:
                    29:6b:84:03:f6:32:a5:9e:ba:53:08:f7:4e:c6:f4:
                    65:57:76:7c:56:3b:00:9c:19:00:5b:ed:a6:a7:58:
                    d3:ee:f1:c7:94:0b:71:d3:a9:64:26:ce:96:a6:d3:
                    12:c4:a6:09:29:48:bf:09:64:db:6a:b2:2e:e8:5b:
                    7f:74:d8:40:f3:68:80:c7:41:b1:73:df:e1:14:7f:
                    5d:2d:0a:5c:1e:6e:b5:fe:99:1f:15:7c:66:b0:c9:
                    e1:9e:71:36:d2:ee:3b:e9:e5:5c:72:4a:1a:62:76:
                    19:c3:dc:9e:c4:b7:11:88:7e:b8:25:b5:e2:68:a5:
                    69:5c:f9:5b:e3:e7:a1:66:b9:2e:bc:6a:b7:1f:18:
                    99:a8:54:72:25:bd:b5:cd:c0:f9:d6:e3:15:8f:5b:
                    f6:6e:54:57:42:32:ad:9f:2e:47:e7:cb:af:0d:a8:
                    6e:3a:36:bc:44:09:0b:42:fc:6d:59:f2:7b:f3:d9:
                    2a:96:c8:60:e0:ae:d7:56:29:36:ed:6f:5a:d7:ad:
                    4a:12:c8:98:e5:89:12:0e:54:01:2d:81:9b:7b:99:
                    64:4e:a7:1f:3c:70:12:ab:5d:57:1b:05:a2:44:a0:
                    78:0a:9f:02:a9:42:1f:f4:93:5d:ac:8b:c9:ab:f8:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D8:28:3A:E3:82:91:3E:AE:C0:71:44:38:E1:C0:B7:79:F7:05:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6892bcf4-9b23-483d-ba76-a84301949196/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6892bcf4-9b23-483d-ba76-a84301949196/2e3badce5f4eda115831b8ae848e99b2ecccf3e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cc50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272930

    Signature Algorithm: sha256WithRSAEncryption
         48:e9:b4:2a:64:56:c4:e8:eb:03:68:af:76:2f:97:20:fe:ba:
         a6:a0:e9:4e:c5:1d:56:85:b0:ee:28:a2:87:54:d4:0c:1b:97:
         9b:83:64:fa:a3:a7:07:a3:75:89:db:54:40:0b:ae:94:0c:f5:
         f7:3a:18:f3:22:70:01:d3:18:4b:6a:30:19:2e:dd:ea:0c:b8:
         c5:ca:07:42:db:58:3d:75:bf:a8:cf:81:c0:b8:c7:89:69:65:
         87:63:b3:b3:ea:04:19:1e:25:57:ac:23:5f:15:68:73:bc:b9:
         bf:8a:c1:cc:8f:f7:42:2d:9e:55:94:5f:8b:00:00:74:cf:d4:
         d5:51:f5:a4:9f:03:c7:2d:2c:57:a1:3f:69:a8:ba:3e:40:7f:
         21:cf:4d:12:56:37:8d:c4:82:73:d1:7c:89:6d:ce:a7:f4:07:
         df:f1:cd:c7:c4:4d:9d:2c:d9:a4:91:70:77:6e:5a:3f:c0:bb:
         5c:31:8e:5d:2d:92:55:42:11:d3:6c:ce:95:e1:48:9d:05:d3:
         eb:fc:bd:66:e1:c6:f0:77:24:87:0d:ab:8d:a2:46:5a:52:45:
         30:5e:b0:92:ff:04:e3:4c:9a:f8:b3:0e:90:f9:c6:3b:e5:15:
         ed:dd:55:8a:bf:ef:b0:da:ce:65:7f:ab:65:cf:da:04:03:a2:
         3b:d2:e8:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----