Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/518580d899b0dde0548a71a3919256727f6d1f8b.cer
File:                     518580d899b0dde0548a71a3919256727f6d1f8b.cer (raw, json)
Hash identifier:          Dd9M85HaBGBmRFOj7JwALrtHUg2mmhBf6UJj3alhtEk=
Subject key identifier:   AA:9B:98:C9:08:C1:AE:E3:14:B1:3B:90:AA:F2:0A:5F:E5:D3:8A:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDB2AE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/13e2ba2e-ee7c-4220-abac-3dc24643d43e/518580d899b0dde0548a71a3919256727f6d1f8b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/13e2ba2e-ee7c-4220-abac-3dc24643d43e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 14:34:11 +0000
Certificate not after:    Mon 20 May 2024 15:32:09 +0000
Subordinate resources:    AS: 272825
                          IP: 2803:d490::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15577774 (0xedb2ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 14 14:34:11 2023 GMT
            Not After : May 20 15:32:09 2024 GMT
        Subject: CN=518580d899b0dde0548a71a3919256727f6d1f8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8c:be:ff:76:fc:89:25:ca:86:37:8d:3b:f0:
                    9b:fa:e4:69:07:70:a4:b5:f1:06:61:00:c2:4f:36:
                    ef:bc:48:3f:97:81:60:35:90:af:d4:45:e7:2f:0a:
                    0d:ad:5f:b3:0b:ae:31:fd:7e:39:31:1a:ee:4d:71:
                    9e:d2:93:a0:3f:38:8c:b1:19:92:62:3b:d7:7c:7a:
                    85:e9:34:41:c5:c2:00:69:b5:2a:9b:9d:64:6d:00:
                    23:4f:6f:85:c2:b3:28:65:c7:26:88:41:d8:00:bb:
                    64:ea:68:95:5b:f6:6b:91:5c:e0:77:00:38:13:f0:
                    53:25:4c:48:c6:89:3e:dc:62:6b:f7:07:4f:1b:b4:
                    3c:3e:26:ca:21:18:73:c3:3e:c2:7c:91:49:57:ce:
                    f4:84:fe:0a:85:69:32:a8:b6:2f:cb:e0:18:ca:a0:
                    5a:1b:66:90:c4:ab:96:73:41:a5:d7:5c:c9:cf:d4:
                    0b:ff:12:30:3d:84:72:5a:13:e8:16:f9:34:9b:4a:
                    21:21:27:9d:6a:93:10:0f:1e:28:20:03:eb:2b:2a:
                    2c:2d:b0:5e:7a:e9:21:b7:df:16:15:f1:40:54:fa:
                    3a:7c:83:22:23:0a:a7:39:31:c7:a1:fe:50:26:94:
                    f3:f9:54:3f:b7:2e:96:9c:52:64:56:ea:32:35:ce:
                    56:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:9B:98:C9:08:C1:AE:E3:14:B1:3B:90:AA:F2:0A:5F:E5:D3:8A:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/13e2ba2e-ee7c-4220-abac-3dc24643d43e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/13e2ba2e-ee7c-4220-abac-3dc24643d43e/518580d899b0dde0548a71a3919256727f6d1f8b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272825

    Signature Algorithm: sha256WithRSAEncryption
         87:bf:78:59:a4:5c:38:05:c3:4b:ae:24:6c:88:fd:bf:00:91:
         38:2e:27:35:e3:67:95:d0:ab:9b:17:16:37:01:4c:55:f3:89:
         49:e7:3e:42:c7:f8:f9:a6:13:ac:72:f9:cd:3e:fc:53:08:a5:
         1d:21:0f:c4:23:bf:58:ae:8b:e5:fb:da:5b:d9:01:24:68:6a:
         b1:00:26:01:93:48:98:9d:c4:9b:06:13:36:f5:87:3f:55:42:
         98:eb:d2:bd:69:9d:0d:c5:02:1a:07:0d:e2:fa:72:8e:87:77:
         45:6b:5e:8a:42:86:06:cb:2f:b0:df:6f:53:1f:43:bb:95:b9:
         9b:31:ee:81:de:26:60:13:8f:9b:7c:a3:f2:d5:49:20:7f:b0:
         fb:1c:cb:f1:b8:17:63:d5:58:3e:da:fe:8a:83:64:c6:c1:37:
         f1:6c:2a:f6:65:ad:af:25:a3:e1:07:0b:ab:8d:30:a5:49:60:
         9f:41:c3:c2:c0:ce:34:25:15:b1:d3:8c:ea:51:d0:4d:58:e1:
         54:1b:e2:1f:90:b2:22:4b:85:c7:8c:f3:70:f5:9a:60:1b:bc:
         a1:b8:a7:be:26:4b:d5:d9:fc:d0:04:b5:fc:46:b4:f8:83:0e:
         cf:b3:6e:4d:2f:30:41:33:39:38:b5:93:27:8e:6d:e7:ca:49:
         3f:4e:e3:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----