Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33fd8bc7e8cf979666f672e5155bf98f1cd386f5.cer
File:                     33fd8bc7e8cf979666f672e5155bf98f1cd386f5.cer (raw, json)
Hash identifier:          rqfRl+V4bihdRieZSRdnOO8Ot37EAp1M3jLC4adLuxg=
Subject key identifier:   20:5E:3E:A4:0C:0F:A5:58:CC:23:96:52:34:90:52:D9:55:0B:92:2A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01104A6E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bfa1a142-0917-479f-a668-83c08c3c2007/33fd8bc7e8cf979666f672e5155bf98f1cd386f5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bfa1a142-0917-479f-a668-83c08c3c2007/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 19:14:08 +0000
Certificate not after:    Sun 23 Nov 2025 05:00:00 +0000
Subordinate resources:    AS: 273210
                          IP: 2803:7650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17844846 (0x1104a6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 19:14:08 2024 GMT
            Not After : Nov 23 05:00:00 2025 GMT
        Subject: CN=33fd8bc7e8cf979666f672e5155bf98f1cd386f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:de:91:dd:21:24:55:dd:30:42:9e:d2:fb:77:
                    6e:77:b1:b9:03:7e:bd:36:7c:39:ed:29:bb:7b:1a:
                    68:54:e5:27:54:0b:dc:11:f7:23:e5:1a:22:7b:5a:
                    a1:e4:29:85:ef:25:a8:37:c6:a2:f3:fb:a9:85:fc:
                    c3:5f:95:a2:f4:1e:80:53:08:8d:fd:b1:c8:04:eb:
                    1e:c7:c3:2c:f3:d2:8e:84:0e:53:d4:f1:f0:41:5e:
                    a9:c1:d2:3b:5c:53:af:51:f5:dd:d1:a0:15:44:15:
                    15:72:b4:47:8e:b2:9e:8d:d4:63:04:7a:5d:15:ac:
                    03:5f:a0:ce:2c:28:96:16:56:7f:e7:15:86:18:51:
                    77:a8:f3:51:71:29:5d:61:d4:d5:c1:b7:aa:54:d6:
                    ac:3a:20:9f:a9:b6:4e:e4:85:ae:48:68:51:53:51:
                    d6:23:d6:83:86:87:66:87:02:9e:75:0d:3e:c5:d9:
                    9c:95:ee:ea:7d:23:ee:02:13:b8:de:e1:00:28:86:
                    a2:e7:e5:d5:ae:a6:45:db:a2:fa:be:b4:c9:f1:45:
                    e3:f2:68:cf:95:2e:2e:81:54:2c:4c:b1:8f:d9:63:
                    d5:81:f9:8e:46:af:32:ee:96:a3:4c:f1:b3:7e:8c:
                    c5:a3:8b:58:83:0d:3d:ca:84:85:2e:cb:3e:f6:fc:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:5E:3E:A4:0C:0F:A5:58:CC:23:96:52:34:90:52:D9:55:0B:92:2A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bfa1a142-0917-479f-a668-83c08c3c2007/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bfa1a142-0917-479f-a668-83c08c3c2007/33fd8bc7e8cf979666f672e5155bf98f1cd386f5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273210

    Signature Algorithm: sha256WithRSAEncryption
         bc:13:47:e4:41:e3:8e:4e:c0:b2:bb:0e:be:cb:29:01:87:8a:
         16:d4:5f:92:14:e1:a8:59:fe:14:af:0b:5a:5f:59:7f:4a:7a:
         13:9b:62:33:df:ed:22:15:ea:70:4b:aa:75:1f:da:48:df:99:
         00:80:4a:e0:46:e2:d4:31:f9:3a:68:e5:2c:30:f8:5b:4b:46:
         36:94:0f:fd:b1:c0:22:30:09:c9:22:fb:f7:dd:47:4c:a8:3c:
         e0:3e:3b:a9:49:71:cd:ca:b4:30:50:81:8e:c4:5c:ad:e2:53:
         a1:b0:de:98:d0:43:42:60:8d:17:d8:e5:e4:59:43:80:4f:94:
         59:b9:39:87:5d:29:5f:4e:50:66:3f:14:54:37:3d:48:9e:dc:
         d7:c5:13:aa:37:65:49:7e:0f:28:00:8e:af:dc:a6:fd:57:eb:
         e7:cf:b2:39:3c:87:c9:6f:a5:83:d4:ca:a3:dd:6a:46:af:6c:
         2a:9e:04:8a:54:72:92:1b:06:72:68:68:35:36:ae:da:2f:19:
         6b:3d:0d:49:7f:cb:bc:8d:6b:22:2f:8e:c3:87:26:3f:d1:57:
         17:07:da:dc:6a:c6:d1:b9:b9:4d:d9:21:12:e6:53:fd:5d:fc:
         5a:25:54:6e:d6:49:46:ab:3d:3e:1e:67:6b:76:12:19:2a:e7:
         10:3a:7b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----