Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.cer
File:                     474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.cer (raw, json)
Hash identifier:          KR8NPOlqyy9M8xr0gll3w58jCCNwO3uKnBTa351I/O4=
Subject key identifier:   4F:87:B7:3B:3E:8E:01:C8:9E:42:02:E2:1C:90:A8:57:47:D3:08:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B62F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/67d5e32c-e005-455e-9e91-6e0ca7e0daa1/474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/67d5e32c-e005-455e-9e91-6e0ca7e0daa1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 15:13:14 +0000
Certificate not after:    Mon 10 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 273185
                          IP: 2803:5a50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17523446 (0x10b62f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 22 15:13:14 2024 GMT
            Not After : Mar 10 06:00:00 2025 GMT
        Subject: CN=474ef7c6edfa79b5d73f8a63e3e1fe4180b65569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:85:ca:8d:d7:b6:03:a1:b4:f9:b7:e4:30:4a:
                    bd:9e:52:16:3e:ea:cd:0d:09:8c:4a:87:8c:31:0a:
                    ca:a8:8c:ce:6e:64:aa:5e:fe:fa:2b:e5:65:4c:ce:
                    c5:f2:cb:bf:03:a6:c8:9e:14:cd:c5:ae:91:7e:7d:
                    5a:69:17:05:4c:b1:0a:db:c6:65:6a:e8:75:74:0f:
                    b1:c7:9b:30:2f:f9:c9:6f:26:8b:80:b2:86:16:34:
                    c3:b8:e5:66:be:03:5a:4a:f1:ab:81:41:85:4c:77:
                    8d:30:c9:81:66:4d:96:ab:54:f4:2c:49:2c:7e:38:
                    ac:19:f2:be:e9:a7:14:bd:b3:82:b0:46:16:34:88:
                    27:2e:4b:f2:bd:c3:d1:f0:e4:46:3e:2b:9d:f2:15:
                    11:95:d0:d1:4c:5c:cc:40:b9:a5:f8:17:dd:86:ef:
                    1a:39:8d:00:ff:40:d7:83:68:9a:a8:88:01:f3:af:
                    59:5d:3f:41:3c:dd:6d:2b:8d:ba:ab:e9:b2:fb:0d:
                    2e:b1:9b:39:7c:5b:d5:64:56:3a:b2:d1:a2:55:ec:
                    66:73:67:fe:57:32:34:79:ee:f3:0a:a8:e3:ff:07:
                    4a:b9:b9:bd:1a:ec:3a:0c:4d:9f:1a:a2:d5:85:72:
                    05:0b:2f:96:29:a4:a3:f9:d9:8c:d4:21:c0:38:22:
                    d2:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:87:B7:3B:3E:8E:01:C8:9E:42:02:E2:1C:90:A8:57:47:D3:08:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/67d5e32c-e005-455e-9e91-6e0ca7e0daa1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/67d5e32c-e005-455e-9e91-6e0ca7e0daa1/474ef7c6edfa79b5d73f8a63e3e1fe4180b65569.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5a50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273185

    Signature Algorithm: sha256WithRSAEncryption
         2b:19:8a:ab:0f:11:26:a4:cb:19:bf:7d:b9:7e:f5:b9:10:c9:
         15:86:73:b6:d1:30:34:58:51:08:e1:b1:34:0c:d4:d2:32:99:
         a2:7c:01:c9:81:39:08:4c:0c:f7:e6:e8:b6:36:a7:75:ef:94:
         45:63:72:d5:4d:7a:47:3e:f7:07:07:a4:99:df:d4:9f:1d:a5:
         11:cf:94:eb:d5:80:fa:4e:bb:43:4d:4b:83:3b:e4:88:86:3f:
         84:cd:2a:d5:05:e9:8b:28:85:0a:d4:40:9c:81:65:29:57:dc:
         a4:fc:39:9c:00:db:db:c9:e0:12:f2:88:d2:c5:db:83:56:99:
         5d:be:a0:14:42:3a:6a:64:fc:86:72:f8:ae:fd:77:75:b2:e8:
         b0:a3:9d:7e:18:f8:9b:55:8b:8b:25:b6:5a:39:37:3a:86:3c:
         ed:bd:c3:87:78:1a:c3:f0:ab:61:27:31:4d:f9:f1:3f:91:88:
         65:37:eb:6a:45:a0:ba:39:e2:72:68:f8:6c:7c:4e:da:d6:1c:
         d0:aa:ed:4b:fa:bf:fe:92:5a:f3:64:11:f4:ce:30:83:7b:13:
         02:03:d4:59:e0:c7:7c:ab:b1:52:ac:89:5b:0e:b2:89:f6:e0:
         78:97:c5:3c:3f:bd:b3:96:a8:41:8a:d9:74:37:05:cf:22:2a:
         56:f7:48:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----