Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e87487a12241bffabbc862134402881fb17392f.cer
File:                     2e87487a12241bffabbc862134402881fb17392f.cer (raw, json)
Hash identifier:          E9CYG2VXEN/gBoVRLfz7ZZ9mnKLlXqcN7Lj04taOdVI=
Subject key identifier:   2B:38:E6:75:EF:46:28:82:1D:AE:AA:EF:98:8F:38:1F:B4:F5:1A:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB4521
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/61e622f3-f9ac-4bc3-b607-6d57b3758fbb/2e87487a12241bffabbc862134402881fb17392f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/61e622f3-f9ac-4bc3-b607-6d57b3758fbb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 30 Sep 2023 00:39:22 +0000
Certificate not after:    Sat 26 Jul 2025 21:38:50 +0000
Subordinate resources:    AS: 273092
                          IP: 2803:c050::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16467233 (0xfb4521)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 30 00:39:22 2023 GMT
            Not After : Jul 26 21:38:50 2025 GMT
        Subject: CN=2e87487a12241bffabbc862134402881fb17392f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6a:6c:c6:d8:ef:fb:77:6a:b3:2b:16:c3:03:
                    7d:f0:c2:17:a1:32:49:38:f6:f7:fc:31:78:31:1f:
                    81:d0:23:cf:9f:06:9f:f6:31:77:a4:e3:ca:29:86:
                    16:10:8e:f0:72:99:35:8a:bc:5f:30:7a:7d:d0:c1:
                    81:55:e7:95:19:00:b5:7b:a8:cc:5d:9a:83:42:46:
                    47:27:f3:d9:6f:48:08:52:5f:a0:88:91:86:74:ca:
                    ba:37:65:8b:ef:8d:dd:4e:28:af:2e:55:f3:d4:a7:
                    7e:c7:f1:5e:b4:ce:6b:dc:ac:0f:84:c5:34:9b:34:
                    09:07:9c:bc:7a:33:a8:3b:55:6c:70:78:0e:f5:4c:
                    bb:b5:f1:7a:2d:04:c2:71:af:20:87:f3:99:87:2b:
                    fd:e4:8d:30:ac:0c:76:d6:12:29:49:56:be:5a:57:
                    30:43:22:87:5b:8c:df:0b:63:d4:71:12:42:e7:42:
                    58:d4:9d:01:d6:33:8d:0f:8f:5e:53:50:f7:96:cb:
                    19:67:f2:3c:da:0a:51:7b:39:07:a1:bd:93:6e:41:
                    89:90:c9:56:db:97:ce:84:b2:a0:8b:aa:e8:04:4b:
                    73:4a:d0:6a:88:77:db:1f:c7:f7:1a:1c:5f:b3:32:
                    c2:c8:d5:8b:96:f3:b9:5f:c5:5e:ee:75:3e:4b:d6:
                    9d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:38:E6:75:EF:46:28:82:1D:AE:AA:EF:98:8F:38:1F:B4:F5:1A:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61e622f3-f9ac-4bc3-b607-6d57b3758fbb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61e622f3-f9ac-4bc3-b607-6d57b3758fbb/2e87487a12241bffabbc862134402881fb17392f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273092

    Signature Algorithm: sha256WithRSAEncryption
         17:13:6d:42:a6:86:90:c8:fd:b5:7b:39:91:1b:46:b0:cc:9a:
         7b:fa:35:36:f2:90:79:87:e4:49:ed:09:0c:64:48:cf:36:22:
         5d:bd:ed:66:5e:7a:38:f2:7c:20:3b:0a:68:a3:bb:b5:36:c0:
         97:15:52:0a:e4:1d:1e:ba:73:40:eb:42:cb:66:99:cf:94:27:
         92:b5:15:7d:30:62:b1:93:84:fe:70:6c:e6:fd:99:fd:55:b1:
         6a:14:98:18:a4:67:50:f2:63:b2:48:7e:d7:f0:60:9f:86:03:
         85:51:87:c7:03:29:1b:e0:e1:38:b2:83:0a:76:54:e3:89:fe:
         6c:ab:1f:5a:47:e4:ad:d3:3c:bf:81:85:a0:ac:e8:b5:ae:5a:
         73:e0:07:c0:9b:e3:68:ba:a0:c0:13:fd:c0:4c:2b:e6:bf:27:
         0c:52:b6:5a:3d:9a:b3:55:7f:eb:6b:a7:38:3f:ac:e3:32:d8:
         20:1a:c8:24:0e:ed:cb:07:18:b7:e9:ee:51:f7:2c:2c:dd:f6:
         e9:7d:bc:4a:9f:0d:b0:d7:8b:30:45:9f:51:19:04:62:d7:f7:
         6f:03:81:b4:91:50:41:1e:56:58:24:74:40:8b:60:94:b6:c7:
         34:5c:ac:6b:da:87:dd:ed:0d:99:3b:a7:3a:f8:75:09:6e:fb:
         41:5d:78:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----