Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/581758f49e8e761418c16d8936e03c1433aa3418.cer
File:                     581758f49e8e761418c16d8936e03c1433aa3418.cer (raw, json)
Hash identifier:          L1IqyqdaO0MypkkUYapF0qsdpZLfMXOWMAOrLJJ/Mtw=
Subject key identifier:   4C:50:2F:35:98:1C:C6:22:5C:50:3D:92:11:C3:9D:66:D0:B1:22:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF2AFA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7ecf9dea-702a-484c-b76b-8cc8b2b94ba3/581758f49e8e761418c16d8936e03c1433aa3418.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7ecf9dea-702a-484c-b76b-8cc8b2b94ba3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Jun 2023 21:54:49 +0000
Certificate not after:    Tue 19 Nov 2024 05:00:00 +0000
Subordinate resources:    AS: 273028
                          IP: 2803:f390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15674106 (0xef2afa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 22 21:54:49 2023 GMT
            Not After : Nov 19 05:00:00 2024 GMT
        Subject: CN=581758f49e8e761418c16d8936e03c1433aa3418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c3:3b:1e:1a:3b:59:a5:cf:20:25:87:9f:0f:
                    f7:5f:b8:be:56:0d:13:57:b6:6f:a7:26:d5:7a:4a:
                    dd:c4:07:74:94:7b:a4:54:46:27:e6:79:42:e2:0f:
                    71:76:36:e6:50:9d:f6:4e:c6:80:5f:40:2e:45:d5:
                    c2:08:11:5b:af:04:72:c7:4c:c1:54:d9:38:d4:d0:
                    5f:60:6d:af:4f:89:d2:f9:ee:0b:38:ee:f5:a7:75:
                    27:72:60:51:dd:68:45:d4:fa:56:b7:ad:d7:72:b1:
                    fe:e7:65:48:97:5d:02:c5:7e:de:2c:3d:d0:cc:83:
                    f4:1d:c8:c9:46:b3:db:71:b5:26:cf:aa:83:a6:c4:
                    53:bd:35:5e:d7:12:36:17:f0:c5:8a:c1:3f:69:b8:
                    c3:6f:11:6e:bc:17:73:5c:29:b5:11:cf:e0:62:4d:
                    68:cb:e7:ae:de:80:63:93:e4:d8:73:ce:eb:d5:81:
                    e9:e6:7e:e3:ae:4b:87:8f:fd:ec:49:65:9b:05:4e:
                    3c:84:ef:2d:9c:73:95:44:f5:60:23:9d:a7:3f:5e:
                    06:b0:6d:00:1d:eb:84:46:1b:71:f5:d9:fa:80:9d:
                    02:a6:24:5e:90:9d:19:f9:ec:de:de:7c:fc:ed:bb:
                    d0:c4:af:e1:2d:83:0a:09:01:c6:8a:68:cf:17:dd:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:50:2F:35:98:1C:C6:22:5C:50:3D:92:11:C3:9D:66:D0:B1:22:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7ecf9dea-702a-484c-b76b-8cc8b2b94ba3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7ecf9dea-702a-484c-b76b-8cc8b2b94ba3/581758f49e8e761418c16d8936e03c1433aa3418.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273028

    Signature Algorithm: sha256WithRSAEncryption
         17:a8:be:08:b4:8f:94:6f:46:b6:cb:8d:06:0c:1d:d0:32:51:
         38:f7:56:dd:c9:44:a1:a4:bc:69:cd:4a:be:a3:43:40:47:d8:
         92:2f:67:87:70:7a:99:42:43:4c:ea:68:51:a4:2a:eb:74:81:
         0b:bb:07:02:0d:08:e7:5f:2e:56:70:fb:1b:6b:58:8c:a5:59:
         c9:a9:0a:d4:0b:9b:54:f7:56:3a:94:03:19:ba:0e:42:4e:ed:
         d5:14:5a:84:aa:5a:e4:90:aa:d1:01:0a:52:44:d5:ec:cc:9c:
         0b:09:52:66:43:11:5d:98:5d:b4:3b:8c:99:70:59:1f:6c:27:
         10:c0:46:22:13:b0:30:8e:64:e1:0a:13:fa:75:7d:28:88:51:
         a9:b7:bb:95:07:e3:17:47:47:21:6f:58:b7:08:24:54:e4:5c:
         dd:37:99:df:a3:5e:66:ca:7c:66:a9:d7:e5:82:2f:64:77:9d:
         6f:f0:48:66:29:7a:94:5c:eb:07:64:a0:28:1b:70:dc:c1:79:
         bd:38:8c:3b:2c:f6:2e:f2:7c:f5:da:95:d9:c7:f3:19:67:29:
         f3:5c:f7:b9:34:47:13:a0:ea:bc:7d:c1:ff:59:be:42:52:28:
         42:84:42:2b:2a:e4:0f:21:01:6c:a4:78:a8:86:51:c4:5c:e2:
         76:ec:3a:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----