Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2ff7745109fe095009a43e9a848bbfa188931b7b.cer
File:                     2ff7745109fe095009a43e9a848bbfa188931b7b.cer (raw, json)
Hash identifier:          +r7DMrSg9J6Gb6Q+2/3eDWfYP9CObFgJwNwMQPWi6KM=
Subject key identifier:   E9:86:E9:74:B8:57:30:23:51:6B:E3:C6:1A:85:3E:75:9F:08:EA:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB524D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1b2e0c1e-2f6d-4d55-9ee9-87b7e6ca102f/2ff7745109fe095009a43e9a848bbfa188931b7b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1b2e0c1e-2f6d-4d55-9ee9-87b7e6ca102f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 15:37:12 +0000
Certificate not after:    Sat 25 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 27675

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15422029 (0xeb524d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 25 15:37:12 2023 GMT
            Not After : Jan 25 14:00:00 2025 GMT
        Subject: CN=2ff7745109fe095009a43e9a848bbfa188931b7b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0c:e1:4e:a5:71:19:11:2a:d6:f8:e5:6a:b9:
                    fa:f2:34:28:c5:fa:fb:88:cf:fa:de:bc:3f:13:8f:
                    10:f8:be:95:b1:1b:9e:4c:3b:f4:60:bc:02:ac:ea:
                    fe:26:ec:86:51:97:cb:bf:2d:71:47:c4:fa:28:87:
                    ff:fd:5b:4e:28:b0:37:6b:5b:24:a2:9c:9a:c4:b2:
                    8b:de:5f:b0:a6:d7:e9:ea:d4:7b:e7:96:55:f3:e7:
                    bf:87:1a:f3:5e:79:24:29:b9:24:57:7a:b8:ea:40:
                    c4:6f:fd:a9:46:4c:d5:f7:58:0b:e3:e0:23:d2:e4:
                    34:e3:bf:f1:c2:a5:d3:59:70:88:cc:dd:09:ce:b8:
                    27:8c:4b:7a:2a:fc:c1:f6:b0:17:78:f1:f4:e1:38:
                    6e:6b:37:d0:fc:be:6f:09:5c:ab:c1:14:02:7b:2b:
                    c0:04:3f:0a:db:f9:43:a8:cc:2d:43:06:72:93:4c:
                    08:cf:32:7d:5f:81:fa:a0:f8:c3:e3:44:33:bc:8b:
                    f1:cf:39:56:7d:e6:8a:4e:8c:33:bf:eb:84:ca:28:
                    14:91:e0:58:a1:f3:90:85:02:c3:4f:65:aa:f6:ab:
                    98:c2:84:72:19:9d:9b:ba:91:2c:17:b0:84:1e:ca:
                    1c:78:8e:a3:4f:58:3a:aa:b4:ec:76:02:92:ae:eb:
                    14:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:86:E9:74:B8:57:30:23:51:6B:E3:C6:1A:85:3E:75:9F:08:EA:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1b2e0c1e-2f6d-4d55-9ee9-87b7e6ca102f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1b2e0c1e-2f6d-4d55-9ee9-87b7e6ca102f/2ff7745109fe095009a43e9a848bbfa188931b7b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27675

    Signature Algorithm: sha256WithRSAEncryption
         a7:50:d7:c0:b5:64:d2:e3:14:d7:c7:64:2f:6d:58:48:5d:a6:
         28:99:0d:1b:87:29:56:49:ce:ca:46:46:ea:c0:21:69:3d:ce:
         20:15:51:a2:46:61:42:a3:c1:36:ca:04:0a:46:2e:d6:cf:a9:
         ec:d1:28:b1:9f:75:6d:fc:c9:1b:bd:bf:b2:93:03:77:be:d3:
         d2:02:dd:50:cd:d6:5f:65:68:62:3c:04:bb:1a:bb:de:28:54:
         6a:0b:1f:78:f5:e1:d4:34:0b:cd:f3:d4:3d:76:97:ed:e2:b9:
         2b:e0:0a:42:37:b1:1f:39:e5:02:90:75:83:a9:08:67:c3:fc:
         0c:ed:d4:96:b9:91:fb:84:cf:03:70:34:8d:f1:29:9e:e0:5a:
         e0:8b:d8:cc:23:19:8b:d2:37:43:6e:2a:a4:ec:f2:7d:71:a1:
         63:d3:d1:56:46:83:48:31:75:26:64:78:ac:8a:71:65:85:a4:
         b2:10:6f:2d:cd:28:f9:7f:73:a7:b2:86:b6:91:cd:b8:18:0c:
         00:41:f0:46:7f:cd:dd:32:84:d1:87:5d:fc:77:22:a4:98:2f:
         08:d0:1f:17:cd:29:6b:50:2c:02:9b:e3:c0:97:fe:e1:21:3f:
         d6:57:01:96:c5:22:23:b9:20:a0:58:f4:db:31:31:9d:01:c5:
         09:06:d3:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----