Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/355af88fa4f3e2d630d41a10b66471fe52008b1f.cer
File:                     355af88fa4f3e2d630d41a10b66471fe52008b1f.cer (raw, json)
Hash identifier:          d+hPIailIXaZQsDldrGWk3Wv+YV9x0RvrY9RRflUZ5k=
Subject key identifier:   14:70:76:48:03:F8:2B:10:FE:A3:89:DD:E5:49:2B:A6:2E:7B:C2:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEE221
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7a560f4d-e52b-4754-81b6-2622a8f78596/355af88fa4f3e2d630d41a10b66471fe52008b1f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7a560f4d-e52b-4754-81b6-2622a8f78596/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:48:13 +0000
Certificate not after:    Fri 30 May 2025 15:00:00 +0000
Subordinate resources:    AS: 53136

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16704033 (0xfee221)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:48:13 2023 GMT
            Not After : May 30 15:00:00 2025 GMT
        Subject: CN=355af88fa4f3e2d630d41a10b66471fe52008b1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a7:f3:6f:12:b9:cd:d2:86:24:36:6e:25:6b:
                    b1:ba:55:7a:29:2a:c0:24:b0:a3:a3:32:22:83:20:
                    7c:04:77:df:7e:85:49:9e:48:4b:b7:5b:76:b8:7b:
                    18:24:e4:c5:04:66:cf:81:d7:91:3d:43:d7:94:a4:
                    3a:cd:86:35:d4:a0:9a:55:09:23:79:ab:e0:5c:1f:
                    7c:63:40:b8:f5:be:b7:77:6c:9e:71:88:14:42:4c:
                    dd:b3:96:cb:e4:cc:46:78:57:43:75:92:6f:1e:3e:
                    fc:85:10:35:8e:40:4f:6b:62:ac:34:b5:bb:41:4f:
                    63:c7:0d:60:76:2b:87:e7:a4:69:0e:d8:f8:f5:c3:
                    7b:41:87:71:18:32:c7:28:1b:17:6d:c9:69:9c:3a:
                    82:93:98:96:01:b7:10:ae:b1:9d:ab:0c:91:ad:62:
                    e6:42:8d:e3:de:ae:72:b0:16:9e:04:82:a2:f7:2f:
                    3b:99:7a:e6:5e:71:c7:d6:8b:59:ea:e6:cd:09:06:
                    e8:3a:24:0d:ea:5c:6a:ac:7d:80:2d:2f:a7:81:cd:
                    3c:b3:0a:e3:81:c0:5d:19:7e:25:58:da:60:a6:cd:
                    51:a1:b7:e8:a4:bc:e2:e1:f7:96:31:e6:28:09:bd:
                    0a:e2:35:6f:91:4a:09:60:55:69:aa:b0:cd:31:6c:
                    a8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:70:76:48:03:F8:2B:10:FE:A3:89:DD:E5:49:2B:A6:2E:7B:C2:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7a560f4d-e52b-4754-81b6-2622a8f78596/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7a560f4d-e52b-4754-81b6-2622a8f78596/355af88fa4f3e2d630d41a10b66471fe52008b1f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53136

    Signature Algorithm: sha256WithRSAEncryption
         68:59:9f:b3:b6:39:c0:4c:7e:27:06:c7:8a:56:8d:33:ba:5c:
         be:0c:43:bb:01:09:dc:3d:47:dd:99:20:02:4e:2c:a2:50:18:
         9b:91:7e:7c:0f:88:02:60:67:de:5c:db:3f:a9:23:27:ad:15:
         a7:72:80:1a:33:a5:f8:06:ad:05:a9:26:74:c6:f0:f8:ee:31:
         db:30:f5:b5:3d:6e:13:e5:1f:52:d2:8a:d1:2b:49:f1:44:51:
         fb:90:d5:24:c3:94:94:62:37:1f:a7:d8:cc:d6:8c:f7:46:07:
         b0:f3:bc:ed:7a:b8:08:41:79:7e:8c:86:32:ce:bf:ae:00:6a:
         5f:7d:b7:db:b6:05:95:ea:d9:1a:a9:3b:1b:9b:88:a0:be:06:
         75:60:46:cf:43:17:00:29:c4:2f:40:68:28:28:b0:58:a8:e5:
         cb:57:33:88:05:6f:dd:5a:e6:0e:f3:c5:d3:de:9d:d9:22:b0:
         b9:bc:32:fd:40:c7:ff:61:c1:e2:9f:82:eb:6f:0a:42:84:3e:
         9f:01:c8:af:83:4f:0a:f4:3e:75:63:b4:91:94:c8:eb:fc:45:
         6a:74:aa:f2:8f:58:35:15:3c:b4:5d:85:a0:32:4c:d0:46:44:
         c2:13:82:3e:50:97:bf:3f:68:d3:8c:94:f2:26:52:2c:ad:65:
         14:d5:7d:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----