Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac209a38b927093308fba6ae707d0f563216b80.cer
File:                     4ac209a38b927093308fba6ae707d0f563216b80.cer (raw, json)
Hash identifier:          1wdz/l1Mdui63SmTr0QXr/nCQyG9dAYjuYQ86Mkpho8=
Subject key identifier:   35:4F:05:7D:A4:A0:7F:41:8F:A2:45:36:4B:D2:72:17:F2:38:E1:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E481B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/45d57529-2092-4711-8275-74b1593e7f71/4ac209a38b927093308fba6ae707d0f563216b80.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/45d57529-2092-4711-8275-74b1593e7f71/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 13:44:12 +0000
Certificate not after:    Wed 23 Oct 2024 13:54:31 +0000
Subordinate resources:    AS: 272925
                          IP: 2803:fe90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14975411 (0xe481b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 13:44:12 2023 GMT
            Not After : Oct 23 13:54:31 2024 GMT
        Subject: CN=4ac209a38b927093308fba6ae707d0f563216b80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:ae:d1:39:fa:3b:87:09:45:66:4c:90:56:
                    ca:4c:ea:35:67:f8:0f:65:c2:26:2e:4c:fa:6e:49:
                    b4:c5:17:c1:fe:0a:85:f2:fb:f7:f9:c8:83:6c:58:
                    3c:d2:73:fc:8b:db:b0:2b:79:34:87:d7:12:30:70:
                    a9:e3:e1:c3:4d:b4:26:f7:61:a4:82:f6:c7:b2:7f:
                    32:d6:50:04:fc:9e:a1:d4:da:47:8c:96:dd:29:5f:
                    46:81:1c:27:ab:bf:56:0b:ae:30:63:d5:75:8f:dd:
                    c7:d3:a9:e4:e4:3f:be:70:3a:ab:b7:bb:be:69:e8:
                    c0:52:c3:67:67:77:4b:d8:a1:75:83:f1:87:bd:d3:
                    63:1d:47:9f:ee:aa:bf:d5:f3:b9:6d:c2:6d:8f:84:
                    50:a0:72:ad:c9:03:5d:45:81:76:ae:15:0d:f1:85:
                    5d:50:21:05:d8:e3:79:47:ca:7d:8f:00:79:8b:7a:
                    3b:2a:81:c8:46:78:13:52:d2:4f:e8:60:00:85:86:
                    98:67:d9:7c:16:ab:c2:b5:6c:48:a2:70:da:bf:4e:
                    5d:7d:9b:89:69:ee:52:21:02:65:d3:68:fd:86:63:
                    7a:78:7f:89:2a:a0:eb:46:ca:c5:dc:d3:30:78:14:
                    e2:fd:88:61:b5:74:89:53:b8:32:1e:60:da:c8:f8:
                    83:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:4F:05:7D:A4:A0:7F:41:8F:A2:45:36:4B:D2:72:17:F2:38:E1:49
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/45d57529-2092-4711-8275-74b1593e7f71/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/45d57529-2092-4711-8275-74b1593e7f71/4ac209a38b927093308fba6ae707d0f563216b80.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fe90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272925

    Signature Algorithm: sha256WithRSAEncryption
         83:55:88:9f:b6:52:95:fe:00:96:74:b7:21:39:1b:70:e3:36:
         eb:21:9d:a1:68:80:40:c8:ec:82:35:c1:a4:41:2e:9d:4b:f3:
         88:d6:88:43:d2:c0:36:76:11:00:5c:28:d6:d0:81:c6:38:0c:
         91:a1:43:cc:5b:78:55:1e:57:bf:1c:c1:03:9f:dc:ad:0a:23:
         bf:ca:93:b7:38:82:f6:d3:a6:89:c0:ba:2a:45:16:5c:13:ca:
         a3:3c:49:eb:fe:e8:74:0e:a1:64:11:3f:05:af:72:27:24:d5:
         0f:8b:50:07:39:05:d6:96:38:7a:fe:ff:24:74:b1:3e:8d:38:
         80:50:2a:91:3f:e7:cd:e6:5e:1f:b9:88:50:d1:eb:42:b3:43:
         2e:45:b0:b6:fd:1e:44:a6:11:6b:98:2a:9c:7a:93:b4:fa:73:
         33:51:75:80:65:d7:a2:d1:aa:56:62:df:77:9f:77:ae:aa:7d:
         77:c1:06:42:19:f0:39:42:3e:fa:c7:40:2d:61:7d:24:c5:cd:
         31:27:58:f0:31:fd:56:1b:68:96:b1:7d:e2:01:93:b1:1a:0d:
         24:d9:66:23:ab:4f:e9:10:44:e7:ba:8d:f1:31:78:bd:bb:89:
         b5:5a:90:a7:fd:39:2d:49:c1:2e:47:c6:09:0b:64:98:3d:b9:
         cc:f7:dd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----