Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35b3129c15cf093b69a2e2717a89f501fb6739a6.cer
File:                     35b3129c15cf093b69a2e2717a89f501fb6739a6.cer (raw, json)
Hash identifier:          TLvDl1o7CTRLZ3aQ9k6VpBpf5Lpyu2H6GCzu/U2Qo1E=
Subject key identifier:   F7:D8:EA:3D:90:4D:FC:3D:DA:DE:1B:6E:06:04:C3:A0:7B:63:86:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5139B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/35b3129c15cf093b69a2e2717a89f501fb6739a6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16061339 (0xf5139b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=35b3129c15cf093b69a2e2717a89f501fb6739a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:fe:87:cd:f0:0f:fd:80:ab:02:53:bd:a6:26:
                    3a:d2:2d:1b:ec:de:a5:a1:b0:a3:ff:60:94:88:d7:
                    14:69:37:10:6e:43:eb:5c:c3:cc:f5:76:83:d8:de:
                    ac:e4:b5:5b:04:48:37:bd:ac:f8:26:79:07:1c:04:
                    b9:82:f0:b7:5d:2b:1f:f6:84:7a:fe:66:8f:9b:2d:
                    b0:a2:56:be:f4:fe:7b:27:4e:bb:f5:94:68:24:fc:
                    78:40:85:af:33:42:a6:07:3f:90:ce:ff:12:5a:93:
                    1c:fa:8d:88:a0:07:95:82:10:fc:0a:63:1d:78:f3:
                    3a:ac:a8:2f:8a:0e:cb:5e:96:e1:58:3c:9f:fc:d2:
                    0c:70:7d:9a:28:59:d3:6b:af:e4:fb:db:bb:d6:e9:
                    0e:93:db:f1:40:81:7c:02:d5:17:41:27:29:8b:03:
                    e5:bc:69:52:41:00:35:69:f1:05:2c:90:fd:74:fa:
                    dd:ae:85:b6:21:f7:0d:ad:17:7b:03:34:2a:cf:b8:
                    b3:25:49:47:43:0e:25:38:93:b9:f4:82:43:bb:d1:
                    6d:ac:3c:c9:1a:48:f4:ec:cc:57:ed:81:ec:76:20:
                    b9:b8:be:8f:79:4b:25:39:6d:ba:3d:8b:f6:3c:a8:
                    02:93:ca:b8:7b:0e:5d:64:f0:43:e4:a0:56:7f:6c:
                    06:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D8:EA:3D:90:4D:FC:3D:DA:DE:1B:6E:06:04:C3:A0:7B:63:86:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/35b3129c15cf093b69a2e2717a89f501fb6739a6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         55:b5:c7:b4:05:37:29:18:f7:21:b3:16:3a:6b:48:fb:38:5b:
         ab:6f:e3:fb:e6:07:59:d2:67:30:35:4d:4a:be:17:ed:30:74:
         be:f2:53:68:5f:31:14:c7:85:04:c6:08:e4:5b:74:2f:d2:76:
         46:f9:ef:73:71:a2:8b:3f:50:e6:ab:6f:df:d9:0f:e3:65:09:
         ac:4d:d1:66:92:0a:55:d5:54:22:a6:5d:36:44:07:53:6f:5c:
         db:60:2c:76:29:ee:45:34:75:e1:6a:93:67:75:81:96:e5:a4:
         17:dd:7a:d8:6b:be:ea:74:3a:49:41:b5:c8:d5:bc:2a:e5:e2:
         51:70:22:c5:3c:be:5c:4b:3b:bc:c0:93:15:34:14:6f:4e:4c:
         cf:26:34:6d:58:d8:7c:b6:4b:16:8c:ec:57:b7:4c:9a:90:dd:
         56:f8:1c:db:b3:5e:12:72:e2:75:47:d0:dd:f5:e1:b6:c5:35:
         39:55:da:ab:23:be:d7:29:0c:66:a7:80:2f:3a:0e:7e:c7:02:
         59:77:23:ec:62:c4:d3:1e:9d:62:72:fa:ef:b9:af:84:15:0e:
         c5:8b:3a:41:2d:1a:ce:b2:89:37:31:e6:f5:ca:22:d3:56:9f:
         a8:3d:4b:ed:77:65:c0:4d:e8:15:af:39:c7:29:b8:bc:a1:d8:
         f1:34:2b:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----