Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e274a94d4ee6153833a6db3e5ec7df79886884d.cer
File:                     3e274a94d4ee6153833a6db3e5ec7df79886884d.cer (raw, json)
Hash identifier:          0yc9nB6WRblAnrg+Bmgy2zPrgk0jHeypunipjfv6e4o=
Subject key identifier:   B7:3E:9A:B6:2A:3E:4F:33:DC:51:81:E7:DA:47:37:A4:74:14:DF:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D1F47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9538fd7d-8a93-4aab-bc9f-60e598765461/3e274a94d4ee6153833a6db3e5ec7df79886884d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9538fd7d-8a93-4aab-bc9f-60e598765461/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 19:01:31 +0000
Certificate not after:    Tue 28 Oct 2025 05:00:00 +0000
Subordinate resources:    AS: 273195
                          IP: 2803:c650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17637191 (0x10d1f47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  7 19:01:31 2024 GMT
            Not After : Oct 28 05:00:00 2025 GMT
        Subject: CN=3e274a94d4ee6153833a6db3e5ec7df79886884d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2b:c3:ea:10:6a:c6:78:12:47:d2:a0:b9:77:
                    b5:eb:45:1b:46:84:a5:0e:38:a2:54:ec:47:38:06:
                    8f:bc:0b:e9:36:ba:89:23:27:9b:7f:be:45:7d:35:
                    4b:b4:e2:ff:db:c7:33:92:45:30:55:9a:33:69:00:
                    8c:35:06:9c:0e:67:29:1e:d8:49:24:b7:3a:57:c7:
                    64:10:29:ed:4b:55:7d:66:ad:93:a8:5d:19:cb:ba:
                    9c:63:b5:2d:f7:c8:0a:11:da:5e:10:cc:81:5c:cc:
                    82:d4:06:91:29:d6:09:a6:c7:cb:71:f4:8f:ea:43:
                    74:42:a7:3f:38:19:f6:70:d3:e8:b4:af:54:65:b5:
                    ae:f3:b3:32:a0:ba:cf:bd:3b:20:c3:1e:0b:f0:c2:
                    b6:c2:ba:f0:b5:20:7d:0a:51:a6:c5:c7:fc:a2:cf:
                    9f:b1:d5:ae:3e:28:8a:00:e0:69:53:24:08:0b:92:
                    de:c6:c7:e9:b4:dc:dd:db:4e:bf:7a:28:e0:bc:b4:
                    0f:1a:2c:74:9e:7a:7b:3f:8a:e7:8a:83:c1:72:9f:
                    a9:34:8a:03:88:66:6e:c5:99:61:0e:70:2c:b4:ec:
                    28:b2:49:7c:67:54:f4:e7:10:a8:d3:93:8b:95:52:
                    a2:e8:01:52:89:7e:d6:09:51:36:88:0f:5a:38:21:
                    8f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:3E:9A:B6:2A:3E:4F:33:DC:51:81:E7:DA:47:37:A4:74:14:DF:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9538fd7d-8a93-4aab-bc9f-60e598765461/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9538fd7d-8a93-4aab-bc9f-60e598765461/3e274a94d4ee6153833a6db3e5ec7df79886884d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273195

    Signature Algorithm: sha256WithRSAEncryption
         65:d0:35:04:2c:81:00:0e:29:d6:b2:34:52:ba:92:c1:a6:99:
         e0:22:5b:84:04:22:5d:24:a8:2c:42:ec:1c:5b:16:8b:7c:25:
         4b:d2:8d:67:68:fc:be:b6:50:73:f0:2d:dd:c2:36:53:22:39:
         88:2b:d6:b5:ba:dc:58:c7:7b:b0:ca:98:9c:52:27:d4:39:18:
         dc:d4:56:19:ac:51:29:4e:1e:7d:de:e3:19:cc:54:61:5d:0a:
         d6:9f:97:35:ed:e6:4e:9a:b9:61:ac:29:da:e9:89:7a:90:3b:
         39:60:76:e5:6d:97:dc:3a:0e:5f:9f:e3:3c:17:05:3c:07:09:
         e9:9a:aa:1d:73:25:e3:45:36:21:f0:08:87:cc:69:08:76:de:
         32:81:1a:76:ad:32:ee:bf:29:39:c9:70:c1:0a:34:3b:e0:69:
         ca:71:3e:df:49:6c:95:cd:68:f0:a2:ea:ac:5f:33:29:73:b6:
         2f:05:f5:b7:2f:0f:12:94:50:13:f1:f9:8f:4c:23:d6:04:11:
         87:c6:61:6e:ba:a7:07:48:42:a2:3c:47:5d:d2:1d:56:e5:6a:
         80:8b:c4:40:5d:72:ee:e6:e4:e3:ff:90:71:75:ae:1f:1f:c7:
         18:e9:eb:d2:1a:40:54:3f:96:57:3b:3a:b4:d6:18:eb:cf:50:
         9b:74:27:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----