Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32c740cfaa71933f529582375faad45f2fef932c.cer
File:                     32c740cfaa71933f529582375faad45f2fef932c.cer (raw, json)
Hash identifier:          MEYrzTKF/Pg6TuLUEJFasXHhCEXOwXiOU+OUVs5x1FQ=
Subject key identifier:   29:AC:5E:DE:9C:3D:80:88:E9:64:83:4E:DB:27:99:DA:1F:96:A9:46
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE7AA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d89d5c5b-3e4c-4148-a893-fe7417ab7339/32c740cfaa71933f529582375faad45f2fef932c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d89d5c5b-3e4c-4148-a893-fe7417ab7339/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 15:16:30 +0000
Certificate not after:    Fri 10 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 27811

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15628963 (0xee7aa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 15:16:30 2023 GMT
            Not After : Jan 10 14:00:00 2025 GMT
        Subject: CN=32c740cfaa71933f529582375faad45f2fef932c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:eb:ea:eb:c1:2f:31:ac:b5:d1:54:66:e9:62:
                    1f:36:d9:f8:ad:75:71:8f:af:c0:31:a9:77:27:c4:
                    b9:2f:5f:35:bf:da:3f:6a:fd:4f:d8:28:3e:14:53:
                    1b:5a:2b:23:42:20:22:89:c7:a6:fa:5a:e7:13:4f:
                    17:a8:f2:38:70:86:72:04:59:0d:37:36:3c:cd:18:
                    22:a3:5f:22:89:11:6c:6a:27:b8:4c:f0:bc:29:00:
                    1a:4c:ff:12:ac:ad:2e:de:14:99:c3:86:20:31:9c:
                    aa:61:6f:a9:7b:61:cd:c3:15:00:fa:e5:83:e7:50:
                    a3:d2:5a:17:c6:c1:77:3b:62:ec:9f:dc:84:09:aa:
                    f1:bb:ea:fc:d3:52:d6:9e:8f:44:b0:43:bf:0a:6e:
                    2a:72:cd:28:fa:41:48:89:34:04:e7:63:b3:70:9d:
                    ef:74:be:bd:b8:41:a9:bf:31:22:56:af:c1:44:ea:
                    c6:13:3c:92:20:47:7c:e0:c0:dc:ed:86:de:a6:22:
                    59:56:45:18:b7:7f:2d:2e:35:10:fb:f5:8a:6a:68:
                    30:b4:ad:a9:01:c0:95:2f:7e:fc:92:de:85:ed:59:
                    4a:d4:ac:8e:87:5f:1b:fe:42:f5:c0:ba:70:eb:98:
                    0a:24:36:72:61:5f:fd:87:0d:a5:ef:c6:bf:e0:21:
                    68:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AC:5E:DE:9C:3D:80:88:E9:64:83:4E:DB:27:99:DA:1F:96:A9:46
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d89d5c5b-3e4c-4148-a893-fe7417ab7339/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d89d5c5b-3e4c-4148-a893-fe7417ab7339/32c740cfaa71933f529582375faad45f2fef932c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27811

    Signature Algorithm: sha256WithRSAEncryption
         b0:45:aa:a6:f4:e0:b3:a4:f7:2c:ca:54:87:f8:ed:ab:3b:4d:
         65:9c:cb:04:3b:24:5f:60:2c:fe:18:a7:0b:f5:29:26:89:f8:
         0e:71:ad:dc:69:6b:40:4b:cf:d0:ef:70:f6:c6:68:df:bd:0c:
         73:f7:f8:89:7e:a3:8f:8a:9e:2f:a2:19:18:75:75:96:88:26:
         1a:09:e4:2f:4d:9b:1c:bb:42:6e:85:d8:c6:1d:0d:22:d0:f7:
         b1:0d:ef:3a:60:85:16:f7:74:86:d4:2e:64:6b:fe:e0:6e:c7:
         38:80:4c:93:80:5f:21:28:a2:42:91:bb:49:c4:bb:5a:10:3d:
         19:88:2b:cd:c1:7e:51:e1:20:7e:2e:95:0f:14:f6:0d:ac:3d:
         10:4b:90:d3:84:8d:80:e4:aa:9c:39:e5:c4:28:92:45:10:3b:
         73:fa:94:3f:c2:6f:60:17:da:98:d6:39:5e:16:bf:57:44:35:
         fd:d2:2e:52:6c:67:bb:b9:67:5f:65:4a:6c:cf:80:26:55:49:
         29:cd:f9:7e:de:c2:e2:1d:c9:9d:fd:ad:cf:5c:dd:0f:fb:3d:
         65:19:d6:b7:a6:13:3f:37:c8:32:c6:0a:b5:81:be:6b:51:9e:
         56:8c:f6:34:ff:4e:61:0e:5b:93:a8:a4:fa:4d:49:e5:5c:8c:
         24:21:06:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----