Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3d9c94c2d3f85fc3893b09a77052c5c4d8a18657.cer
File:                     3d9c94c2d3f85fc3893b09a77052c5c4d8a18657.cer (raw, json)
Hash identifier:          YfmtEUKh9SM+QhVeNlaJEqwYWeAnfWQm6/C8Q+mAbww=
Subject key identifier:   47:EC:02:CC:04:4C:29:BD:CC:D9:56:41:4C:85:45:F1:FF:49:12:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107B61C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6e36472b-ac24-462c-9a6d-de3be5d138f4/3d9c94c2d3f85fc3893b09a77052c5c4d8a18657.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6e36472b-ac24-462c-9a6d-de3be5d138f4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Apr 2023 18:02:16 +0000
Certificate not after:    Sat 23 Nov 2024 18:28:22 +0000
Subordinate resources:    AS: 272940

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17282588 (0x107b61c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 28 18:02:16 2023 GMT
            Not After : Nov 23 18:28:22 2024 GMT
        Subject: CN=3d9c94c2d3f85fc3893b09a77052c5c4d8a18657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b6:8a:f5:55:9d:87:a9:a7:cd:59:9d:36:d9:
                    2b:b0:a9:48:76:a2:cc:ef:69:b6:6b:07:5f:77:65:
                    eb:15:93:66:74:35:7f:be:46:f0:14:74:26:24:01:
                    42:70:89:16:f4:56:eb:68:7f:e9:00:a0:b6:31:78:
                    ad:f4:ca:40:e0:26:e1:1c:a3:a4:bd:e8:02:e9:23:
                    58:c5:80:c6:2c:09:a5:74:aa:56:66:55:f7:62:9b:
                    ea:d0:94:18:56:e2:e8:81:c0:72:55:da:e2:00:81:
                    f9:85:90:b3:7a:b8:93:b5:a0:d3:7b:a4:aa:d6:52:
                    21:35:05:12:9a:20:b8:ca:cf:c4:b4:2f:2e:e7:14:
                    96:35:a9:0e:4b:5b:a8:e7:bd:3f:b0:ad:75:fb:66:
                    19:5b:9d:9c:35:ba:3b:d2:21:17:8c:6b:e2:30:ff:
                    a1:57:ea:58:00:1f:dc:5b:ff:c0:0b:a4:11:7b:b7:
                    e5:06:82:a4:2e:8b:11:6d:0c:cc:04:e9:68:af:52:
                    2a:c5:d5:ce:a4:31:45:4f:a0:ce:4a:02:31:49:e4:
                    59:f8:ad:4a:ff:f0:64:f0:fe:b2:46:e0:4e:b2:c4:
                    ef:49:85:73:f2:27:dd:3d:b8:42:e3:4c:77:98:92:
                    41:9e:a1:f9:18:ef:44:70:31:4c:b5:82:c6:76:a5:
                    98:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:EC:02:CC:04:4C:29:BD:CC:D9:56:41:4C:85:45:F1:FF:49:12:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6e36472b-ac24-462c-9a6d-de3be5d138f4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6e36472b-ac24-462c-9a6d-de3be5d138f4/3d9c94c2d3f85fc3893b09a77052c5c4d8a18657.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272940

    Signature Algorithm: sha256WithRSAEncryption
         76:2d:45:03:ea:36:6a:2a:25:6c:44:ab:54:9b:ca:3a:65:06:
         53:3f:3a:6d:ef:9e:97:13:ed:63:43:2b:4f:82:4f:88:c7:3d:
         fb:5d:8a:20:b5:e6:0f:6e:b2:d8:81:60:a9:b3:98:ad:c8:1a:
         ba:fe:d8:ac:90:81:96:ac:dc:27:71:99:c1:04:28:ac:a3:03:
         c8:00:f4:45:29:c5:be:72:47:13:69:ea:3a:ee:61:ae:f5:cf:
         4a:75:38:f6:c5:e4:68:8b:2d:47:ad:41:62:39:ce:6b:68:78:
         d1:e0:84:2a:be:be:f3:8d:19:50:5b:ca:0a:27:0f:b3:52:5d:
         da:88:23:bf:86:cd:27:c9:ba:8b:60:19:0e:1c:e3:cb:b0:e8:
         dc:6a:4d:b7:f0:f2:8c:3d:2a:b6:fb:d1:67:76:40:b6:c3:ea:
         d1:42:83:8c:6b:9a:fe:df:0e:41:be:39:7e:13:60:12:ce:77:
         56:86:9f:e9:ec:34:30:3b:a0:e4:bc:f5:ab:93:74:4a:6f:b8:
         a8:3a:e8:93:cd:59:21:04:1b:84:e1:30:3a:86:d1:d0:d4:3d:
         e2:e6:89:c8:9e:a0:cc:fc:b8:ba:8b:a4:54:b8:3c:a0:e1:e9:
         a7:1e:1b:91:b9:0d:ec:db:12:a1:ec:87:43:34:43:e8:11:4b:
         80:a5:f2:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----