Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/400903df95d315313e60ec950c16cbe68b5c99aa.cer
File:                     400903df95d315313e60ec950c16cbe68b5c99aa.cer (raw, json)
Hash identifier:          EXzjqDwOPzWqWb4CUhs9e5gxxVIWw5ZD1mDTzwYjWb8=
Subject key identifier:   56:AC:50:10:DD:6F:39:BF:8F:1C:4E:DF:83:CF:D9:CA:B2:1D:31:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9D84D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aadd2b5c-52f4-4349-b877-beed95753331/400903df95d315313e60ec950c16cbe68b5c99aa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aadd2b5c-52f4-4349-b877-beed95753331/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 17 Dec 2022 21:57:12 +0000
Certificate not after:    Mon 22 Jul 2024 20:44:13 +0000
Subordinate resources:    AS: 272878
                          IP: 2803:aa90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14276685 (0xd9d84d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 17 21:57:12 2022 GMT
            Not After : Jul 22 20:44:13 2024 GMT
        Subject: CN=400903df95d315313e60ec950c16cbe68b5c99aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:1e:a6:9d:c9:93:64:db:dc:74:97:45:7b:12:
                    08:6a:d2:f5:be:4f:b1:45:d5:b4:13:8b:0c:17:8b:
                    7f:82:85:da:1b:0c:90:49:e6:b0:2d:a1:9b:aa:e4:
                    fe:0f:13:cd:d8:51:37:f5:e2:a0:69:76:c0:78:fc:
                    66:70:55:96:2d:d3:82:ad:c1:4b:34:72:3c:fb:37:
                    09:7a:41:36:a8:b9:e2:e9:dc:a2:c5:02:b3:3d:df:
                    9e:94:96:a3:35:53:71:a7:3c:f4:25:4e:c9:57:f9:
                    41:b1:29:3e:ee:b4:59:48:36:ef:22:0e:ff:c7:96:
                    31:7d:ec:14:44:88:20:50:90:09:fa:b3:a8:2a:56:
                    27:d4:98:5b:58:2b:35:b3:0d:e4:0b:80:b6:69:81:
                    9f:f6:a8:14:86:d7:f5:c5:95:1c:d1:a5:81:41:e1:
                    20:21:14:f3:9c:3a:43:a7:51:44:8d:1e:12:e2:66:
                    08:21:70:30:a9:3d:3d:a3:5e:27:fb:d5:df:cb:7a:
                    25:60:ca:04:17:a3:9e:07:dd:81:02:83:f7:ef:7b:
                    4c:f0:ba:00:94:05:0a:d5:e5:85:e6:94:11:24:41:
                    95:4f:ef:d1:3a:b5:01:bb:6e:8f:37:ab:80:42:9a:
                    52:2b:db:63:56:f7:29:c0:25:15:33:b0:f5:2b:5b:
                    94:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:AC:50:10:DD:6F:39:BF:8F:1C:4E:DF:83:CF:D9:CA:B2:1D:31:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aadd2b5c-52f4-4349-b877-beed95753331/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aadd2b5c-52f4-4349-b877-beed95753331/400903df95d315313e60ec950c16cbe68b5c99aa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272878

    Signature Algorithm: sha256WithRSAEncryption
         73:66:a2:60:09:e3:70:a9:90:76:fc:1f:1d:2f:8d:d8:e4:ab:
         77:d5:9f:de:7c:3a:57:f7:25:e3:ae:8e:5b:dc:0d:e5:ff:67:
         93:1f:66:b4:23:c0:78:3f:9c:2e:00:6d:f6:40:80:09:7e:0f:
         ec:42:eb:55:a2:f3:a9:a4:a1:ac:b0:1d:4f:bf:72:41:18:48:
         c1:50:ab:a9:9c:75:6a:41:b2:63:08:42:6b:7d:aa:ed:0a:ae:
         74:fd:89:28:a9:87:42:83:a0:d3:8e:0c:dc:8a:f8:8b:66:ea:
         ef:d2:58:f2:36:4a:f1:1d:cb:fd:0f:6f:46:36:47:3e:2d:4b:
         61:cf:4c:37:64:88:89:dc:42:fd:fe:03:a9:81:50:bf:85:70:
         cd:42:50:e1:76:11:ca:2f:2c:59:d2:bd:91:e6:a3:f0:72:06:
         cc:14:a1:4f:e2:6b:86:35:bd:2b:0e:29:42:10:1a:c5:55:ce:
         d6:fa:e3:07:72:42:bc:63:9f:ed:a9:11:78:4e:2a:fa:40:7f:
         6a:04:29:42:ed:fa:24:6d:8c:9e:8a:2c:c2:09:30:53:d9:74:
         9d:3c:ab:94:d2:49:ff:0c:26:6a:71:1e:67:c3:65:ca:64:2f:
         c4:f2:79:d3:38:ff:e5:2c:23:c7:f0:d2:99:c8:94:eb:9b:4a:
         9b:74:c7:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----