Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4aab80852dc84b8ea50f3994a255df3399eed03a.cer
File:                     4aab80852dc84b8ea50f3994a255df3399eed03a.cer (raw, json)
Hash identifier:          FkWNxmIvPDgchkorSbOcoG6KoWCEyiTQhhwdHCrvEeU=
Subject key identifier:   66:0D:F1:C0:68:43:60:79:D5:65:91:0F:4D:27:6E:B7:86:91:72:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E8CEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/638febd2-8c35-4776-9cac-c531f5230e5d/4aab80852dc84b8ea50f3994a255df3399eed03a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/638febd2-8c35-4776-9cac-c531f5230e5d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 18:54:13 +0000
Certificate not after:    Wed 14 Jan 2026 20:39:49 +0000
Subordinate resources:    AS: 273198
                          IP: 2803:a650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17730798 (0x10e8cee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 19 18:54:13 2024 GMT
            Not After : Jan 14 20:39:49 2026 GMT
        Subject: CN=4aab80852dc84b8ea50f3994a255df3399eed03a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:cd:24:34:78:2c:9e:bb:4f:c1:6d:27:ef:0c:
                    73:c7:74:e3:28:35:05:02:3e:7c:7c:71:09:09:dc:
                    32:15:16:07:fb:6b:9d:cf:ed:48:30:47:8f:2b:3c:
                    49:e3:ff:8e:4c:03:22:72:30:12:f4:1e:d3:1f:db:
                    3d:74:c9:e5:16:77:93:cc:9e:07:16:39:77:50:34:
                    7c:2a:1d:5c:ae:d1:aa:4c:d3:c7:4c:3e:10:d1:60:
                    8b:c8:06:85:d7:78:20:b1:ca:c6:cd:ea:b8:52:6b:
                    c5:97:44:b7:a9:d0:2b:02:7d:d3:a8:7a:aa:61:75:
                    61:bd:fc:7a:21:ba:b1:9d:d2:3b:ba:60:21:57:a4:
                    a3:b5:94:fa:67:0d:be:d6:0a:d1:2e:ab:0e:f3:c6:
                    fd:81:43:33:db:f6:88:d6:03:5c:6a:c7:f4:38:73:
                    e2:82:0c:a3:fd:ba:dc:a8:46:f5:7c:96:43:6c:9b:
                    5b:e5:56:53:61:9d:88:a2:38:41:66:ea:c3:7b:1e:
                    d0:07:47:f0:af:56:6e:ca:c0:76:4a:f3:71:2c:d7:
                    76:14:a8:d0:32:8e:b7:40:a9:ad:38:d0:e0:4a:36:
                    04:ae:55:fc:ef:65:10:18:7e:a5:4f:5d:5b:fb:57:
                    7d:b4:db:cc:6f:f0:be:7f:ae:6a:51:bd:21:05:eb:
                    d1:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:0D:F1:C0:68:43:60:79:D5:65:91:0F:4D:27:6E:B7:86:91:72:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/638febd2-8c35-4776-9cac-c531f5230e5d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/638febd2-8c35-4776-9cac-c531f5230e5d/4aab80852dc84b8ea50f3994a255df3399eed03a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273198

    Signature Algorithm: sha256WithRSAEncryption
         a5:d5:74:28:b8:dc:23:37:71:cd:59:f2:4b:6a:8e:3d:e5:66:
         ec:6b:2e:04:fb:30:a8:70:cf:f8:81:db:14:01:1f:7d:0e:d6:
         6b:bc:12:d0:91:56:d3:7b:b8:ef:bf:5e:6e:96:a5:bc:cb:0b:
         85:9f:fe:da:f7:aa:0b:3c:5d:e0:3e:a1:d9:c0:6b:a1:11:96:
         f3:ce:1d:e4:f3:98:91:4d:76:71:38:bf:96:cb:2f:a1:9e:23:
         de:74:ff:73:73:e0:ea:3b:46:1c:01:4e:b0:68:0a:95:8e:09:
         69:4e:c6:3f:48:41:43:b1:80:d3:ba:e4:60:8a:e1:03:66:f0:
         2f:aa:dc:ae:c6:d1:73:0e:b2:c1:49:91:1b:e3:dd:c7:18:c0:
         fa:45:2c:29:36:3b:fc:2c:46:de:6d:64:6d:b5:2f:00:d4:22:
         6a:10:93:d2:4a:d9:c9:15:15:4b:75:50:19:79:ba:49:40:3e:
         bf:fa:18:c3:c1:80:1e:76:ae:cf:1b:d1:2c:02:db:ad:b8:05:
         be:71:5e:c4:24:5f:0e:66:66:7e:63:d6:4e:8a:0f:d2:47:22:
         61:15:17:94:42:9c:18:10:b5:48:f5:b8:65:2e:84:12:3a:db:
         54:5d:c2:d6:67:ca:a9:21:24:98:2b:9e:18:32:bf:6d:22:82:
         76:71:ff:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----