Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35b7ea943c2fb9ad4d0ea5ef6c0ea67c3a25c932.cer
File:                     35b7ea943c2fb9ad4d0ea5ef6c0ea67c3a25c932.cer (raw, json)
Hash identifier:          PTWF7l81Vu1A+PHex5mfqdscmafe2BbSvSWqG0n/fJc=
Subject key identifier:   B2:2B:21:FA:25:37:E2:35:DF:C2:28:3C:57:46:F9:1B:44:E0:79:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F87E67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/35b7ea943c2fb9ad4d0ea5ef6c0ea67c3a25c932.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16285287 (0xf87e67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=35b7ea943c2fb9ad4d0ea5ef6c0ea67c3a25c932
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:bf:bc:f4:c1:3a:9c:36:9f:94:83:33:3e:28:
                    60:e1:39:a1:82:b3:f3:98:da:c0:8e:0a:47:cf:12:
                    8d:ff:9f:33:36:e4:b2:ff:50:d0:2f:47:08:64:d1:
                    77:5e:97:84:e2:1e:78:56:b5:05:38:24:e4:b4:71:
                    e7:93:01:c5:de:58:8c:f9:ad:d6:97:8e:ff:2f:15:
                    86:e2:b8:f5:51:c4:91:b5:9b:40:9e:95:27:0f:a7:
                    81:c2:b3:05:ea:a9:35:99:e7:8f:4d:c9:67:62:ce:
                    de:10:44:44:77:91:12:27:80:5e:30:c8:01:e5:83:
                    53:8d:31:06:eb:2b:8e:dc:b8:70:5c:9f:0d:d7:18:
                    8f:ba:70:4c:c9:c1:81:55:2d:45:29:cc:7e:a2:00:
                    c5:69:33:8e:07:e5:d3:c2:62:ed:dc:4b:8f:86:bc:
                    b8:3e:fb:08:fe:cc:22:c3:73:ce:33:f8:f3:18:82:
                    7a:21:7f:c0:69:7f:91:4b:44:50:75:50:bf:88:c3:
                    34:00:bd:fa:31:b5:43:d8:4b:3d:d1:19:c0:a0:44:
                    c2:ee:ae:47:8c:d1:90:ca:2e:d8:92:ef:57:2c:ab:
                    bf:e7:1e:8f:91:58:5d:df:79:cd:fb:cc:f7:5d:74:
                    65:e5:9a:0b:27:7d:6d:7d:68:91:0c:05:d6:e8:9b:
                    af:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:2B:21:FA:25:37:E2:35:DF:C2:28:3C:57:46:F9:1B:44:E0:79:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/35b7ea943c2fb9ad4d0ea5ef6c0ea67c3a25c932.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         3d:aa:1e:1b:2d:78:68:d0:eb:e3:db:27:c4:af:90:c8:73:f8:
         0e:db:6b:a8:d4:88:38:25:0a:bf:ac:95:97:be:ed:f9:2b:ab:
         fd:25:4d:02:ee:2d:20:5f:3d:52:2a:c1:2f:f8:72:77:ed:e3:
         f7:af:45:4b:df:2f:68:a3:32:ed:5d:ec:3b:5f:90:2c:f8:17:
         0c:e0:f3:91:3c:f3:52:0d:aa:29:8e:79:dd:72:8f:77:76:5a:
         00:5d:03:33:ef:0f:7c:12:8a:f3:79:95:f5:5b:8e:1a:01:0c:
         52:65:18:48:4c:89:b2:86:1c:df:f8:00:9e:16:6a:42:e9:2f:
         70:fc:a1:55:16:0e:92:ab:16:81:31:70:25:25:52:6e:9e:28:
         0d:38:92:7f:6f:7f:3b:9b:73:78:51:ee:aa:8d:51:37:28:83:
         b2:f4:fd:09:b1:2d:f8:f6:84:12:78:c2:69:ce:64:81:8d:46:
         6c:4b:19:30:b7:be:63:24:f8:2b:40:e5:4a:8d:b0:21:bd:ca:
         6b:cd:2f:f2:34:70:02:5c:bd:e5:0d:0b:98:08:31:4e:0f:73:
         a4:4d:2f:52:78:da:1d:7b:66:83:8d:36:5b:68:67:13:75:77:
         58:ab:2b:1a:b6:60:1a:29:be:47:6a:d2:ed:87:da:ef:20:1f:
         82:97:69:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----