Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ccbcf5e0eec3f485df172a3311de0b66ea9a3c4.cer
File:                     3ccbcf5e0eec3f485df172a3311de0b66ea9a3c4.cer (raw, json)
Hash identifier:          2bspyuep3l4aJU2TO04dHH6F6MpyzMxRA83FJmkJmGI=
Subject key identifier:   D9:8A:4D:A9:8D:77:7B:44:BB:25:E1:E3:38:09:70:49:07:3A:86:83
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF34FE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c63bdfee-802e-448a-b7b9-37980016443f/3ccbcf5e0eec3f485df172a3311de0b66ea9a3c4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c63bdfee-802e-448a-b7b9-37980016443f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 23 Jun 2023 15:17:45 +0000
Certificate not after:    Mon 31 Mar 2025 15:00:00 +0000
Subordinate resources:    AS: 21614

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15676670 (0xef34fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 23 15:17:45 2023 GMT
            Not After : Mar 31 15:00:00 2025 GMT
        Subject: CN=3ccbcf5e0eec3f485df172a3311de0b66ea9a3c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:53:ff:25:6d:01:48:6f:23:71:e6:34:8d:ce:
                    12:16:c1:b3:ce:bc:b4:1a:1d:32:95:03:ee:78:84:
                    10:b5:ba:b9:5d:4a:04:63:5b:45:a2:de:cb:94:9d:
                    7c:27:70:ca:27:ff:61:5e:3f:7e:46:fc:b1:3f:24:
                    45:c8:eb:e7:eb:a4:23:5e:7b:1d:26:aa:03:da:00:
                    e9:2e:14:2e:09:e2:94:71:e3:89:af:f2:d9:23:b4:
                    4c:5f:e1:02:6c:58:dd:5c:6a:ff:da:2c:32:67:90:
                    4d:2e:e5:61:59:3d:ce:f2:98:12:6c:68:b4:05:20:
                    06:ef:60:05:f1:c3:92:a1:a6:0f:d8:da:a0:b0:b4:
                    ad:2b:a9:51:2d:fa:f3:0e:c2:83:24:c6:d2:81:81:
                    eb:0f:f2:1b:d0:bb:34:04:9f:a0:b9:1f:0d:4b:d3:
                    58:1a:00:68:af:4e:dd:04:38:d5:2b:5c:e8:16:fe:
                    66:a8:4d:bf:15:b3:b0:62:86:6e:cf:ce:3e:d7:39:
                    3c:79:c5:46:e9:26:e6:a2:dc:f9:a8:94:da:a2:8e:
                    60:e6:1a:ef:6f:b8:7c:79:69:22:37:df:a7:cb:28:
                    ee:69:5e:41:9d:97:fa:a5:d2:70:e0:8c:87:e8:01:
                    f7:25:b8:75:ba:55:a9:fb:5f:c0:ac:35:70:7f:54:
                    b9:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:8A:4D:A9:8D:77:7B:44:BB:25:E1:E3:38:09:70:49:07:3A:86:83
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c63bdfee-802e-448a-b7b9-37980016443f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c63bdfee-802e-448a-b7b9-37980016443f/3ccbcf5e0eec3f485df172a3311de0b66ea9a3c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21614

    Signature Algorithm: sha256WithRSAEncryption
         17:ec:8b:52:c3:a9:c0:d4:a5:fc:41:92:f2:b3:59:3c:46:65:
         1e:c0:ee:0e:7e:ee:98:9e:61:2d:38:b0:da:8b:e7:29:7c:b3:
         1b:f8:e9:a0:b9:10:df:d4:13:36:19:b3:30:84:7d:0f:b1:4d:
         fb:9d:7b:6a:51:c6:a7:da:4d:f6:13:b5:9a:a0:52:33:7a:95:
         aa:03:1e:a3:24:7e:64:1d:18:e7:81:52:87:23:3a:79:33:15:
         f0:c2:c1:17:9f:29:0a:97:c6:36:91:f0:2b:cc:5f:ce:31:99:
         ff:ec:10:76:12:d9:87:51:78:14:49:17:49:d3:5b:ef:6f:49:
         8e:7f:dc:6d:4c:0e:6f:cf:0b:51:73:91:41:33:b6:95:3a:88:
         ec:d3:c0:cd:c4:0b:68:a6:36:58:bb:09:03:fd:45:a3:b7:31:
         7c:f2:7a:16:6b:c3:63:02:07:dc:32:31:a3:af:0e:b6:fc:a7:
         3a:bd:96:07:27:2b:99:c9:4e:3f:2e:5d:fc:4f:b8:b1:77:d2:
         cf:cf:40:88:99:6e:26:2c:59:da:d3:86:ce:35:fd:4a:01:7f:
         ce:a1:a6:5f:42:8e:3d:3e:b6:cf:8c:af:dc:68:22:f4:05:97:
         3d:37:35:a3:51:0a:c2:4d:cf:4d:e2:0e:c4:a0:7b:d6:d4:ef:
         19:c5:8b:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----