Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ec688cb67c8b1cce5783e28b8459fc54678394d.cer
File:                     3ec688cb67c8b1cce5783e28b8459fc54678394d.cer (raw, json)
Hash identifier:          KRFArc6dAF42fjUlu4VXTRnqbj2/oeFWpGwgs9D46ts=
Subject key identifier:   A6:B0:43:1D:EE:B5:FB:19:01:63:4F:2C:59:E1:43:1D:CC:59:BF:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8A101
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/3ec688cb67c8b1cce5783e28b8459fc54678394d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16294145 (0xf8a101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=3ec688cb67c8b1cce5783e28b8459fc54678394d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:3a:12:c4:12:95:8f:76:3c:87:d3:c3:10:fb:
                    b9:d2:79:57:71:f3:2f:fb:c4:3e:e8:99:93:d0:6f:
                    e6:a5:cb:04:fa:fb:31:03:54:a2:ce:8a:b3:0c:b0:
                    3e:42:01:f0:1e:5d:50:91:4f:5c:fa:ae:57:31:ad:
                    72:a3:ca:0d:19:4b:1c:94:53:ea:92:8b:81:65:cb:
                    54:bb:64:9f:f6:10:95:2d:f8:b1:90:c2:bf:b1:be:
                    3c:55:28:6c:53:2b:e2:8c:0d:d4:36:8d:ac:f4:08:
                    3a:b5:cb:b2:54:07:e3:f7:8b:09:33:b9:57:ef:96:
                    58:ea:a9:a8:7e:cd:5b:ef:10:62:5a:be:0b:4c:db:
                    6e:66:f6:33:92:b6:3f:f0:f2:80:b1:1d:9a:01:95:
                    18:ae:e0:07:a2:75:51:b1:94:28:48:9c:f1:8f:b2:
                    5f:ef:a8:35:bb:22:72:1f:2e:84:67:c0:cf:cd:44:
                    c2:09:52:b1:54:d9:8d:8d:26:68:95:2b:f5:21:12:
                    f5:2d:19:37:4e:9b:18:3a:89:f5:72:0c:c6:6a:b6:
                    99:77:b6:79:d8:a4:6d:53:e3:d5:95:e9:ae:06:d2:
                    23:19:c2:b2:b4:72:3a:ab:5c:af:21:76:e1:eb:6d:
                    e2:ed:98:8a:8b:ae:29:46:83:6e:b4:8e:76:54:24:
                    2d:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B0:43:1D:EE:B5:FB:19:01:63:4F:2C:59:E1:43:1D:CC:59:BF:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/3ec688cb67c8b1cce5783e28b8459fc54678394d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         92:a7:49:22:77:41:39:6d:33:32:ac:38:4a:ad:6e:0d:64:79:
         cb:62:5a:3b:ca:f9:90:56:c4:51:cf:4a:64:f0:57:8d:71:60:
         f2:4a:46:2e:9f:a2:39:fb:dd:85:e8:e7:06:61:9c:03:6d:52:
         56:87:e2:99:5d:02:b4:b6:0f:38:af:f4:13:f0:52:3a:15:2b:
         7f:d2:15:8b:b3:56:00:36:d8:77:67:fc:e6:97:27:72:d3:7c:
         f0:72:de:38:52:eb:7d:ca:06:23:d7:bd:fc:ee:79:0d:76:0c:
         8f:d8:1c:27:c9:d5:16:9d:31:21:7f:0b:4e:1d:c4:ea:03:e2:
         a4:26:b5:68:f3:c5:b8:db:3e:a9:34:59:41:43:39:a3:25:8e:
         a5:26:ec:39:7a:5a:1e:09:63:d5:90:bd:a9:50:a5:9f:dc:28:
         ea:f5:6e:46:56:a9:6b:bc:1f:49:d5:6a:38:fa:bd:45:c4:a3:
         b6:b7:b9:1a:97:a3:1f:73:99:04:08:12:07:80:b7:8c:0c:6c:
         53:cc:fe:28:4c:a5:37:c9:d6:b7:09:3c:f6:ce:ff:dc:b0:a8:
         bf:b9:57:7d:6a:30:73:54:72:19:2a:37:fb:bd:a7:1c:67:a7:
         9a:f2:8e:a9:4b:eb:15:b3:af:f8:c2:bc:ab:28:1c:9b:57:c9:
         5b:ec:a2:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----