Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35463bd0e01bcc5832393f73cfd2bf458e009976.cer
File:                     35463bd0e01bcc5832393f73cfd2bf458e009976.cer (raw, json)
Hash identifier:          d631J+0P/BxHhHtHmRnoBXSiDEKU5wWvHkkUik9Ddyg=
Subject key identifier:   CB:1A:69:D8:40:59:60:C6:F7:1F:CC:1A:D7:47:89:44:2D:C9:A4:73
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA5B18
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e63b25d5-f744-4e0a-8807-2f46f417d3a2/35463bd0e01bcc5832393f73cfd2bf458e009976.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e63b25d5-f744-4e0a-8807-2f46f417d3a2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 22:58:35 +0000
Certificate not after:    Tue 29 Apr 2025 23:29:44 +0000
Subordinate resources:    AS: 272816
                          IP: 2803:7f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16407320 (0xfa5b18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 22:58:35 2023 GMT
            Not After : Apr 29 23:29:44 2025 GMT
        Subject: CN=35463bd0e01bcc5832393f73cfd2bf458e009976
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:0b:50:c0:dc:58:1e:30:fe:a0:87:3b:ad:87:
                    6f:b6:40:76:96:d0:69:5e:02:65:6f:93:0c:bc:53:
                    3f:e0:f5:54:64:bb:f1:f4:8e:7d:24:82:29:e3:ec:
                    c1:d7:cd:b4:ab:07:28:cb:48:75:29:fb:a1:0e:be:
                    e3:34:66:ac:04:07:ab:2e:7a:89:2d:8d:59:bb:71:
                    65:90:a3:71:a3:76:4d:83:10:51:eb:49:94:53:d7:
                    f4:bb:4f:6f:e5:e8:88:fb:bc:87:a0:17:af:7b:42:
                    16:39:b5:c5:a4:22:53:93:24:51:2d:7a:71:99:9d:
                    6d:72:00:bf:d5:93:62:7d:8e:8a:e6:93:cc:28:e3:
                    d0:e7:29:a3:e5:af:39:18:94:4f:3a:a3:89:b4:02:
                    38:5a:5a:27:1f:2c:3f:24:94:65:e0:62:d3:a3:f6:
                    80:c1:de:47:47:f4:57:2b:85:48:38:30:ef:63:e9:
                    d6:cf:cd:59:5c:7e:ac:37:6f:48:d8:a4:71:e6:ef:
                    d3:01:e2:de:5d:98:90:96:56:71:9d:b0:fb:6b:1e:
                    52:b3:1c:2c:76:0f:0d:06:13:29:42:a9:09:ad:48:
                    92:ef:72:88:eb:18:f4:1a:46:5d:ee:d1:7e:84:53:
                    d7:ac:e1:fe:1e:ca:da:65:dd:a9:e0:76:18:47:2f:
                    38:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:1A:69:D8:40:59:60:C6:F7:1F:CC:1A:D7:47:89:44:2D:C9:A4:73
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e63b25d5-f744-4e0a-8807-2f46f417d3a2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e63b25d5-f744-4e0a-8807-2f46f417d3a2/35463bd0e01bcc5832393f73cfd2bf458e009976.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272816

    Signature Algorithm: sha256WithRSAEncryption
         bb:ed:b7:53:66:a9:82:2e:2d:18:1f:89:eb:b2:22:94:73:a3:
         ec:71:0b:7b:d6:fe:e7:4e:a9:e5:3b:ac:8d:a0:6b:81:f6:c1:
         2d:1f:91:1d:e6:c2:b4:17:4d:93:6d:1a:96:17:01:53:99:2e:
         16:59:29:40:58:4b:84:12:72:4d:d8:6b:28:30:e8:03:94:68:
         08:e1:1a:76:ed:29:4c:1c:f3:2b:16:ec:19:d4:32:08:3d:9c:
         f6:a3:70:f5:b5:74:16:dc:8e:89:e5:2e:03:70:e8:46:ae:5b:
         b9:bf:73:47:7b:a0:8e:f7:a8:c1:f8:80:24:c4:18:d5:10:13:
         b0:6f:fc:63:4a:a2:c4:b9:42:a0:78:3c:59:44:8c:06:fc:bb:
         e0:11:a7:df:fd:c2:64:35:e8:9a:d6:dd:6c:59:96:c9:15:7d:
         24:e7:7d:71:86:c2:ab:48:00:64:17:e7:74:ae:70:47:bc:5b:
         f5:56:a8:f8:c1:d8:17:a4:5b:96:d6:fa:f9:7c:9c:62:c5:0a:
         a6:da:ed:18:cc:e1:b1:0c:e4:3f:ff:d2:b7:e9:3e:b5:9b:b1:
         c7:88:a3:8f:be:87:5b:7f:ce:9e:27:85:28:00:cd:ca:91:09:
         31:07:bb:b6:ec:94:bf:9f:2e:ef:02:de:0f:42:41:b7:34:15:
         83:a8:31:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----