Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b4f622d7bdbbffb8b3c9b05222293f5915d88e0.cer
File:                     4b4f622d7bdbbffb8b3c9b05222293f5915d88e0.cer (raw, json)
Hash identifier:          mvrabL65s59uyYtlAveeXVEWRYzyr8eLULz5sYOYIUE=
Subject key identifier:   86:33:44:56:F6:27:9D:69:60:59:EC:73:CC:34:70:8D:FB:D7:3B:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103FBA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ee3e07e4-871b-4f9a-9d25-8e70afc615a1/4b4f622d7bdbbffb8b3c9b05222293f5915d88e0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ee3e07e4-871b-4f9a-9d25-8e70afc615a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 19:00:04 +0000
Certificate not after:    Mon 13 Oct 2025 18:54:52 +0000
Subordinate resources:    AS: 273147
                          IP: 2801:195::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17038247 (0x103fba7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 14 19:00:04 2023 GMT
            Not After : Oct 13 18:54:52 2025 GMT
        Subject: CN=4b4f622d7bdbbffb8b3c9b05222293f5915d88e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1c:64:43:b1:86:64:8c:15:8e:3c:69:7a:a8:
                    22:7b:85:f8:e5:a4:28:47:79:22:5e:52:61:16:5b:
                    30:9a:4e:3e:01:5e:d1:a9:57:36:83:d3:c0:ea:74:
                    ef:07:80:75:fb:50:f7:ab:60:c7:71:b9:f9:28:fb:
                    a1:71:d7:29:12:dc:0e:d3:36:78:36:66:f6:4e:83:
                    77:64:12:9b:d7:4a:48:74:48:59:53:bb:4a:ce:c0:
                    36:f2:f1:8a:fb:16:15:d5:6f:a0:a1:63:8a:6c:3a:
                    a9:92:c5:c1:f8:dd:c1:f3:90:eb:41:4d:5d:b5:3a:
                    06:e0:ab:a0:91:af:e7:ca:1b:71:e8:95:47:37:8f:
                    0c:1d:b6:20:1b:9a:52:ef:a6:e9:ca:b3:80:3b:bb:
                    74:d8:47:32:57:c0:cc:f0:89:0e:63:70:ba:4a:b3:
                    47:a3:06:c2:22:8c:e3:b7:9f:6b:4d:eb:ba:cd:83:
                    9c:3b:38:7a:10:fb:52:68:5d:a0:c6:d8:24:80:45:
                    f5:4d:89:a6:29:62:a2:b6:e6:69:17:d5:b5:e1:0e:
                    23:4a:de:ae:db:7a:19:4e:35:79:b2:26:da:04:15:
                    8e:17:8f:bc:a1:e3:a6:87:04:fc:e6:fc:8d:17:81:
                    ae:88:44:e5:29:e9:c1:83:3b:bd:d0:b5:cd:6f:b9:
                    9c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:33:44:56:F6:27:9D:69:60:59:EC:73:CC:34:70:8D:FB:D7:3B:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ee3e07e4-871b-4f9a-9d25-8e70afc615a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ee3e07e4-871b-4f9a-9d25-8e70afc615a1/4b4f622d7bdbbffb8b3c9b05222293f5915d88e0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:195::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273147

    Signature Algorithm: sha256WithRSAEncryption
         0c:d1:90:b4:5d:5f:47:e5:a0:a4:3e:ba:47:61:99:75:17:8e:
         79:b2:66:87:9d:3f:8d:47:17:e7:b6:1e:60:f1:9f:10:29:25:
         e2:3d:01:a2:c0:b8:bb:e5:0e:8d:1e:bd:25:66:20:c6:ad:93:
         ab:84:d3:fc:a4:d4:7b:c1:2c:b6:3c:1d:3f:fe:1f:70:5c:7e:
         6f:a8:bf:99:24:76:b8:af:19:71:90:86:67:3d:3f:bd:91:ad:
         de:2f:e6:50:d2:df:a2:d2:a7:0b:2c:ee:af:ab:70:11:f6:d5:
         db:3a:a1:a9:74:32:a4:4e:6c:32:82:03:b9:af:bd:9e:f3:ec:
         bb:d0:b8:da:84:a2:91:99:32:91:76:45:a8:7e:f0:66:6b:73:
         c0:30:e9:55:4d:a1:dd:8d:3a:20:f1:68:da:a8:01:4c:57:2f:
         41:4a:67:8c:e5:cd:b8:b9:85:58:a2:3c:20:d1:a8:47:c5:07:
         fc:9c:a1:2c:d6:22:2a:5a:92:a7:8e:94:31:c2:65:f2:f3:12:
         2f:ae:89:7f:f4:29:cd:4b:1d:76:56:7e:b7:92:fe:ad:a5:22:
         60:f2:c4:e3:35:7d:d3:37:5c:4a:96:37:00:a2:06:d9:48:3f:
         cd:6b:b5:16:28:f3:e5:dc:21:d1:47:9d:2f:85:f5:69:74:73:
         20:28:95:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----