Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/450bbc83c51a6fad7ea2f483b9775e79097879ed.cer
File:                     450bbc83c51a6fad7ea2f483b9775e79097879ed.cer (raw, json)
Hash identifier:          zDKr80S0FrjUPvezWQfFj4GZVFJoekXUPQpMPAY7+f8=
Subject key identifier:   57:3D:22:F4:66:8D:85:06:5A:B2:0B:C8:F8:62:82:BE:75:73:E4:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101ABC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d3272a6b-8aaf-42e4-b0f8-8ded45898b8c/450bbc83c51a6fad7ea2f483b9775e79097879ed.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d3272a6b-8aaf-42e4-b0f8-8ded45898b8c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 19 Nov 2023 16:24:40 +0000
Certificate not after:    Wed 17 Sep 2025 21:12:04 +0000
Subordinate resources:    AS: 273134
                          IP: 2803:5450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16886722 (0x101abc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 19 16:24:40 2023 GMT
            Not After : Sep 17 21:12:04 2025 GMT
        Subject: CN=450bbc83c51a6fad7ea2f483b9775e79097879ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:b8:72:8b:df:91:15:7c:60:1c:bd:c6:bd:c2:
                    ab:a1:fb:4f:b0:e7:c1:23:80:1d:4d:0b:7a:00:46:
                    d1:f1:87:36:61:f4:53:0b:ea:08:45:fd:1d:d5:c4:
                    61:35:57:f2:19:1d:db:b3:56:65:ef:b0:c8:9e:d9:
                    be:33:53:98:53:68:c1:a0:2f:c4:06:77:7a:5f:91:
                    41:72:f3:70:a8:92:f7:2e:ab:3d:ab:80:38:0c:a3:
                    6d:56:8e:c6:f9:e0:96:a3:57:e8:57:93:d6:c5:e9:
                    99:e2:b0:78:14:57:46:4d:24:60:7a:e5:df:68:88:
                    68:b9:f9:ce:ca:ce:0c:7a:0d:55:79:f4:f2:b3:61:
                    a2:4b:4c:0f:8a:3b:83:d4:98:66:2f:62:b9:b4:55:
                    1e:b4:be:55:ee:ff:99:15:5b:77:37:9a:65:cf:d1:
                    c3:33:31:d5:aa:32:59:58:c6:8a:21:c1:e6:7a:fb:
                    55:0e:b0:82:14:3d:a7:96:1b:e5:e4:e7:c6:fa:c1:
                    5a:cc:39:38:a8:20:dc:21:b0:d2:6b:f7:93:25:d4:
                    bb:7d:d9:2f:72:27:22:ab:2f:10:a7:9d:a4:0f:f0:
                    0c:e6:99:10:5c:85:6a:b7:f2:aa:44:b0:9c:b2:54:
                    e9:b0:41:03:a0:29:a4:4d:cf:b6:2f:9d:ad:8c:1f:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:3D:22:F4:66:8D:85:06:5A:B2:0B:C8:F8:62:82:BE:75:73:E4:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d3272a6b-8aaf-42e4-b0f8-8ded45898b8c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d3272a6b-8aaf-42e4-b0f8-8ded45898b8c/450bbc83c51a6fad7ea2f483b9775e79097879ed.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273134

    Signature Algorithm: sha256WithRSAEncryption
         9e:e2:f1:49:38:cd:54:96:57:f0:4e:34:69:aa:c3:60:e4:c2:
         bd:9f:dd:9d:7e:3f:96:b7:89:f8:46:63:03:5e:cd:d5:9b:e1:
         1a:dc:bd:53:4f:c7:be:74:53:27:43:f2:f4:9e:15:3d:15:10:
         04:2e:ac:ac:24:ab:d6:63:ed:60:f6:8d:08:99:e3:3b:c8:c7:
         9e:a9:8d:9c:d0:ec:86:19:77:47:1d:56:7f:ba:e5:be:a4:be:
         5e:eb:61:b4:b9:73:f9:70:b2:9f:d0:a6:0e:a6:1e:72:da:85:
         c1:84:6f:01:8d:95:81:27:46:28:ec:b2:17:03:22:ae:5b:32:
         6c:7f:42:ac:18:4d:59:a6:1b:6e:fb:70:4e:8a:60:79:ad:1d:
         0c:54:d5:76:fa:c2:26:31:d6:74:b7:5e:b1:42:c7:5a:20:40:
         ed:63:ff:ac:af:12:93:00:1c:8c:62:b4:57:0f:ee:6c:f8:ce:
         47:85:b7:e2:b6:6f:e0:14:75:d4:5d:d9:af:0d:de:c6:c0:6b:
         5f:9f:72:f7:10:af:48:7a:24:08:11:87:d7:f5:cd:8e:58:e2:
         c3:2d:1c:91:45:89:17:d0:2e:0c:93:17:32:c3:45:81:db:a0:
         f5:f3:48:cf:17:4c:96:7f:5f:e1:bb:bc:ba:95:f5:74:d2:00:
         37:55:61:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----