Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5645e5c31d772f7e292856deb85711fc4de35e7c.cer
File:                     5645e5c31d772f7e292856deb85711fc4de35e7c.cer (raw, json)
Hash identifier:          Wwi3pn6pdUkS+0tK9JSLMikmgu3rJb5L9aPAV10pjio=
Subject key identifier:   25:16:54:F9:45:F9:03:ED:46:DF:D3:D9:B5:04:CB:CF:0A:D8:87:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7CB89
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/5645e5c31d772f7e292856deb85711fc4de35e7c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16239497 (0xf7cb89)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=5645e5c31d772f7e292856deb85711fc4de35e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:a8:19:39:91:18:ab:7b:4e:7e:9d:53:e2:10:
                    d7:fc:df:e7:41:37:0c:35:9b:09:5a:58:c7:a3:3a:
                    44:94:91:75:8a:0c:65:1a:68:34:d9:61:04:e2:ba:
                    5f:73:71:54:0f:4f:34:44:4a:d4:05:48:42:f3:4c:
                    0b:fa:98:02:b0:a1:0f:d7:e0:38:d9:9b:20:33:8b:
                    cd:91:80:e9:2e:0d:df:d2:1d:a4:9a:91:18:4a:9f:
                    43:9b:95:60:73:29:92:02:72:0d:84:81:86:33:84:
                    e5:d5:66:c2:62:66:b8:b2:33:e3:9e:3e:d2:8c:90:
                    59:56:a8:4a:68:c2:dd:90:3b:47:3e:ae:c5:7f:ed:
                    91:dd:5e:43:87:0c:a0:ce:2b:9f:29:b9:68:c8:07:
                    03:c0:8a:42:13:d5:af:65:e9:4a:2f:5e:d0:79:1c:
                    be:3f:7c:03:be:3d:da:28:12:06:1d:cd:06:65:60:
                    15:cb:d6:9c:4e:f5:c7:fe:34:3b:26:91:6b:28:ac:
                    13:03:d9:d1:de:2f:61:38:6e:d9:ce:86:da:e2:05:
                    93:dd:3c:4a:21:aa:a7:e5:06:49:24:ad:06:a9:c0:
                    1b:b3:73:f6:fe:82:60:88:e9:b6:f1:a0:b4:7a:12:
                    60:d8:7f:e1:80:3a:8e:f0:ef:a7:b0:82:0e:69:3e:
                    9a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:16:54:F9:45:F9:03:ED:46:DF:D3:D9:B5:04:CB:CF:0A:D8:87:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/5645e5c31d772f7e292856deb85711fc4de35e7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         98:d9:f2:2b:22:9e:2d:42:cc:b2:78:91:f5:50:16:bf:5a:65:
         57:c0:a7:fb:74:f2:52:e4:73:b8:de:c6:ff:22:e0:2c:b5:4f:
         f8:50:90:28:b5:c9:a5:fe:66:96:fa:ec:24:2e:5a:6c:e5:9e:
         8f:0c:a2:25:f3:b4:78:9a:2a:f4:10:56:7c:56:62:db:57:83:
         26:2b:ca:e9:08:bd:f9:45:bc:21:af:41:e2:a6:e5:66:c4:eb:
         89:68:c8:8e:4a:0f:78:8c:d6:eb:9e:f6:f2:d6:73:e0:19:72:
         86:ef:52:9e:6b:f2:3d:d5:12:05:0c:34:f5:f1:44:81:6a:bf:
         f6:b9:ae:ef:a1:81:d5:65:c2:93:77:71:85:a3:7c:c6:31:7f:
         ac:c3:02:ab:16:63:0b:d3:b8:09:9f:4b:a2:18:75:fd:c3:a4:
         74:db:a7:77:e2:de:09:ca:63:90:20:e7:3d:48:83:4a:58:94:
         0e:1d:7f:da:cf:87:c6:b7:70:af:f5:ab:9c:57:d3:c4:aa:85:
         97:2a:ca:3b:a7:ff:a1:c6:62:b7:fc:13:69:94:e4:c4:61:f1:
         42:22:c6:31:1c:83:76:34:00:0f:50:d8:63:46:5c:6b:c6:8d:
         f9:4b:69:0e:b1:ce:05:f0:37:8d:f0:30:d7:6f:ae:ec:76:27:
         d0:a3:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----