Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ddd1e7777b0c830cb541f1af4c33ac533d826ee.cer
File:                     4ddd1e7777b0c830cb541f1af4c33ac533d826ee.cer (raw, json)
Hash identifier:          JSqCFM1XptSAsGJGqJSxQFTgDCfnKnei2wpZC3zq0nQ=
Subject key identifier:   58:FF:C6:18:AE:76:BE:3B:D1:9E:72:1C:0B:0D:78:32:50:D0:CA:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E759D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bf8cc743-d24c-45e6-a76d-865563748918/4ddd1e7777b0c830cb541f1af4c33ac533d826ee.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bf8cc743-d24c-45e6-a76d-865563748918/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Apr 2023 14:55:26 +0000
Certificate not after:    Sat 31 Aug 2024 18:10:45 +0000
Subordinate resources:    AS: 272899
                          IP: 2803:1690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15161813 (0xe759d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 26 14:55:26 2023 GMT
            Not After : Aug 31 18:10:45 2024 GMT
        Subject: CN=4ddd1e7777b0c830cb541f1af4c33ac533d826ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:16:41:aa:8e:08:17:44:89:a9:c8:87:64:43:
                    2f:4c:6f:88:b0:2f:4a:c0:e0:5c:ad:bb:19:38:c2:
                    1b:26:51:e2:e5:5e:5a:23:dd:c5:2c:a6:cf:77:8e:
                    54:65:31:0c:f9:bd:f4:7d:c7:36:fb:6a:4e:11:91:
                    bb:d6:2a:47:4a:a3:09:e7:ce:a3:38:df:e8:ab:4a:
                    d1:fc:2f:09:7c:45:7c:6f:fe:a1:c0:cf:3b:6d:c8:
                    be:da:57:a3:76:45:63:e2:54:a2:10:32:c7:c0:7c:
                    c3:19:e6:2a:d0:5f:48:56:e6:e3:04:33:4b:f6:bb:
                    e5:dd:07:a1:c4:61:07:8f:ba:e5:d4:16:9f:14:7d:
                    de:e5:39:8d:1f:d9:fb:d1:29:81:b8:e6:e2:7d:fe:
                    5a:50:97:60:3d:0d:b9:e0:d9:fb:0e:65:5a:f9:f4:
                    69:3e:30:8d:ac:43:78:fc:d6:69:ac:af:15:91:34:
                    7c:95:e8:d8:23:17:71:51:76:69:f2:81:82:50:93:
                    48:b0:11:de:7a:18:bb:6b:88:df:41:23:7e:4f:57:
                    27:25:84:8b:c7:e2:38:af:a9:fb:80:45:4c:c1:cc:
                    97:1c:41:a0:9b:7c:37:ef:e7:10:75:52:df:d4:2e:
                    70:86:bc:0f:08:75:6e:3f:ea:09:0e:35:1a:31:ca:
                    34:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:FF:C6:18:AE:76:BE:3B:D1:9E:72:1C:0B:0D:78:32:50:D0:CA:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bf8cc743-d24c-45e6-a76d-865563748918/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bf8cc743-d24c-45e6-a76d-865563748918/4ddd1e7777b0c830cb541f1af4c33ac533d826ee.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272899

    Signature Algorithm: sha256WithRSAEncryption
         99:32:58:a8:d9:fb:b0:56:c0:45:34:d9:5f:cf:4d:fa:e6:6d:
         2d:66:53:98:87:52:7e:ad:2f:8e:04:a8:56:40:f1:c3:d7:c1:
         a0:83:dd:9e:c0:e7:d7:67:f9:16:18:8e:15:ca:d5:4b:a1:50:
         52:dc:54:20:47:11:ae:6d:43:e0:ad:38:a2:ff:36:24:e3:18:
         7d:9d:3c:73:09:95:e0:c4:4b:a3:dd:b0:f7:af:3d:93:7c:56:
         5a:a5:1f:5a:02:9d:d7:07:df:59:ec:20:71:3e:fc:6a:e7:a7:
         8b:60:97:5b:a0:4a:53:79:bd:a1:22:19:6f:82:76:f2:f0:09:
         b7:81:8a:e4:12:7e:68:98:dd:a2:d0:e9:50:63:ac:bf:1c:d8:
         1c:d6:da:26:38:13:44:47:a5:a1:0c:9c:4f:0e:9a:aa:36:db:
         0a:e9:df:b5:ce:77:97:f6:8d:37:84:eb:26:a0:54:7e:0c:ee:
         42:08:49:ad:84:ae:7f:45:78:e7:b5:4f:95:75:e6:8d:68:6c:
         72:dd:90:a0:a7:91:d8:53:0e:d1:a7:00:87:61:e5:e0:06:73:
         9e:b6:2e:af:7b:08:21:4f:62:ee:f5:19:56:6d:57:4b:2e:f1:
         05:f1:73:d2:82:17:f1:f0:1c:2b:5d:7e:52:61:b5:f8:c5:aa:
         5c:3d:53:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----