Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33e12d1e9aa32d0ab629856e066a511146f372f7.cer
File:                     33e12d1e9aa32d0ab629856e066a511146f372f7.cer (raw, json)
Hash identifier:          7KbEvx1z4av+L9TcU/U/WDXcHjaLh/PGGmg7GOmEcwo=
Subject key identifier:   D0:90:11:69:5C:E1:D2:8C:B9:DE:4F:C7:E2:72:35:69:76:A8:24:E4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01099B27
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/33a9ed5e-9593-4787-b260-e9cac93f45f2/33e12d1e9aa32d0ab629856e066a511146f372f7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/33a9ed5e-9593-4787-b260-e9cac93f45f2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 19 Oct 2023 21:19:19 +0000
Certificate not after:    Mon 28 Jul 2025 16:05:08 +0000
Subordinate resources:    AS: 272880

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17406759 (0x1099b27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 19 21:19:19 2023 GMT
            Not After : Jul 28 16:05:08 2025 GMT
        Subject: CN=33e12d1e9aa32d0ab629856e066a511146f372f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:99:59:03:24:18:57:be:39:47:ce:eb:6e:39:
                    ca:58:08:5a:c9:c3:2e:ff:d5:25:3b:ba:7d:10:0f:
                    5c:c2:1b:e2:b9:02:2f:c0:67:30:e4:4b:7b:1b:5a:
                    9d:56:08:39:8d:49:e6:56:77:f6:ea:64:d2:c9:9f:
                    0c:a7:77:b9:00:c7:8d:54:6a:d5:12:60:75:6c:c3:
                    ac:5b:1e:0f:a4:49:0b:25:7d:83:ac:81:e3:e0:04:
                    68:ea:82:1a:28:6e:5b:ac:e5:cd:72:d3:2d:c3:59:
                    61:42:90:55:b6:b0:ce:1b:b6:71:b4:c0:d4:d1:9c:
                    30:ed:98:b8:5a:fb:5a:c9:ce:be:8b:36:3c:d4:a2:
                    93:0d:02:4b:33:86:17:dd:f6:6f:99:34:79:a6:b0:
                    d0:49:17:46:8f:88:47:c3:34:d0:59:c6:13:20:94:
                    82:e3:3a:75:e4:f8:92:58:95:57:32:9e:43:59:9a:
                    c7:56:90:f4:f5:37:7c:88:4f:a1:56:63:f0:b1:9c:
                    3b:2c:6c:f5:11:4f:f9:73:17:ff:9d:02:1c:fc:8a:
                    22:9c:40:3b:f6:c7:c8:49:c1:18:1b:be:e5:a5:60:
                    b6:12:36:fe:77:81:22:2c:88:3b:8d:e3:6f:e8:17:
                    b4:65:40:f2:65:99:5d:12:5f:94:db:be:45:a9:2f:
                    02:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:90:11:69:5C:E1:D2:8C:B9:DE:4F:C7:E2:72:35:69:76:A8:24:E4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/33a9ed5e-9593-4787-b260-e9cac93f45f2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/33a9ed5e-9593-4787-b260-e9cac93f45f2/33e12d1e9aa32d0ab629856e066a511146f372f7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272880

    Signature Algorithm: sha256WithRSAEncryption
         9f:38:ba:90:26:ba:b1:c0:b6:48:1d:31:50:d0:8c:02:8f:44:
         e2:e4:76:26:41:46:3c:0b:e1:b4:e5:53:46:ae:00:92:41:bf:
         b8:85:24:27:0c:47:28:1c:c0:5e:6b:19:15:fd:8a:f7:29:e7:
         79:69:4c:3f:f2:92:4f:0b:90:0d:bc:d5:3c:bb:32:89:68:8b:
         ed:2e:78:ba:5d:9d:cc:0c:a5:09:25:22:b3:03:5d:b1:cd:7a:
         00:76:27:84:98:80:f3:95:68:ce:9e:3d:c8:dd:c5:ce:53:4e:
         8a:c6:bd:c4:f8:81:d9:db:83:6e:a3:1c:b1:08:69:51:99:a1:
         3a:52:7f:19:bf:bf:1e:43:56:92:36:c9:9e:16:ea:9d:e9:ea:
         a3:9f:7b:cd:df:30:4c:06:e2:6f:a0:2b:51:15:a6:f7:ae:b9:
         aa:d7:9b:30:ae:ee:f2:2a:bc:1e:e8:62:9f:ed:60:f1:6e:fc:
         c6:04:d5:df:cc:76:ff:a1:a1:9e:ce:92:35:0c:be:c8:c1:27:
         e8:38:67:ea:ef:9b:2c:b9:b0:43:29:b6:54:d2:ec:72:4a:e6:
         09:44:cb:9f:9a:6b:f9:ea:40:02:5f:08:8f:37:dd:bf:c3:75:
         65:40:0c:f7:ed:ad:65:60:22:3a:0d:39:2f:5e:12:f4:1a:64:
         22:9b:26:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----