Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5953521b0ed37abec8837745b03e97172d449657.cer
File:                     5953521b0ed37abec8837745b03e97172d449657.cer (raw, json)
Hash identifier:          Dd8DNL9AL98iJlQLreQTCQJets7Nrh7E5piApjS3raE=
Subject key identifier:   06:2A:6B:DD:70:6A:2E:1C:DB:9E:2A:17:18:F0:C6:CC:D7:D9:BA:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA8120
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/5953521b0ed37abec8837745b03e97172d449657.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 19 May 2023 18:14:08 +0000
Certificate not after:    Tue 23 Apr 2024 22:42:47 +0000
Subordinate resources:    AS: 272814
                          IP: 2803:4490::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15368480 (0xea8120)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 19 18:14:08 2023 GMT
            Not After : Apr 23 22:42:47 2024 GMT
        Subject: CN=5953521b0ed37abec8837745b03e97172d449657
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e3:d9:8d:26:3d:d9:9c:5c:b1:92:2c:97:1f:
                    03:7f:23:94:fa:53:96:7a:e7:6b:35:80:cb:00:b5:
                    a6:15:25:7c:5b:d8:86:53:b0:1b:3d:6a:c9:12:5c:
                    21:26:59:b3:a7:5c:08:34:0c:4b:07:19:f7:c1:47:
                    3d:1a:0a:7a:ed:4a:0d:09:a6:0b:00:b4:63:e2:fd:
                    1b:06:00:fd:65:ea:75:72:73:1e:6a:45:d0:8a:bc:
                    7c:4e:e4:28:16:a2:29:02:34:39:3f:da:43:dc:20:
                    fa:a3:53:e2:05:af:1f:78:09:41:b8:41:83:6c:75:
                    c8:a8:fd:6b:46:e7:47:09:91:a2:38:c9:b1:1a:b2:
                    b6:b2:77:70:0d:28:6a:29:e5:7d:63:5c:a5:ca:99:
                    a1:c6:42:63:84:36:28:41:bc:af:ab:55:37:c8:3c:
                    93:91:3a:f9:58:22:65:44:87:f3:8c:31:a0:e8:ed:
                    58:a0:9a:f5:af:36:7e:2c:38:fe:a6:2f:a4:07:50:
                    7a:32:27:ad:10:0c:3e:50:d3:24:98:9c:5d:75:cf:
                    c8:61:e3:97:8a:18:2e:2f:fd:37:15:a2:fd:f4:01:
                    0d:72:f5:0a:8c:2e:f7:be:d7:ad:bf:9c:23:c2:eb:
                    57:fd:86:40:de:ca:11:8d:34:3f:69:e6:84:8d:0b:
                    9d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:6B:DD:70:6A:2E:1C:DB:9E:2A:17:18:F0:C6:CC:D7:D9:BA:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b6e4c67f-a054-4d5c-a20c-1ff8cdf00e36/5953521b0ed37abec8837745b03e97172d449657.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272814

    Signature Algorithm: sha256WithRSAEncryption
         af:77:af:fd:46:e0:0d:0c:b7:40:80:2e:29:ab:95:4b:f3:38:
         aa:bd:e1:4f:91:8e:98:05:fd:b2:77:ca:90:cb:05:2f:39:68:
         b0:e8:3b:fb:01:e6:73:31:d4:9b:a4:93:97:a4:d6:19:44:f9:
         73:de:2e:ed:3a:d5:57:f3:fb:69:fb:5c:fa:06:ca:1b:f8:77:
         8e:4c:86:54:c7:ed:2c:09:5a:44:c2:ae:ad:a7:a1:ec:2f:1c:
         33:8e:df:2a:ef:de:aa:f8:cc:9e:96:2c:2f:ad:76:e4:d2:0a:
         c2:e2:c9:35:56:bc:44:da:72:1c:0f:98:e4:7d:c4:63:62:7f:
         90:b6:55:f4:1b:99:d0:fd:87:3a:78:d5:f3:3e:36:db:e4:1e:
         37:e4:d1:19:d3:c7:c6:1d:37:53:fd:91:53:f5:e2:1a:e0:c4:
         da:7c:f1:bb:ca:80:d5:96:85:62:c7:eb:af:7d:24:4d:c7:6d:
         9b:91:38:5d:08:de:77:20:e0:8d:15:e4:44:58:3f:54:df:f6:
         86:bf:e8:1e:b8:21:38:7c:ca:06:43:cc:b2:9d:80:87:39:c7:
         87:c7:9b:79:eb:83:60:57:50:fc:9d:f3:c8:03:2d:16:83:7a:
         8d:84:5d:f7:80:3c:13:be:3d:45:92:12:46:c8:fc:41:55:1c:
         98:88:87:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----