Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5978b3f207dd7b09b2dbdd3a26bede8fc988eb9f.cer
File:                     5978b3f207dd7b09b2dbdd3a26bede8fc988eb9f.cer (raw, json)
Hash identifier:          I3eKv7dV32oVdyLwvTNanMhvZjGhrl4RL0QfQlL/mIo=
Subject key identifier:   4C:EB:FD:DA:C9:60:9A:77:D4:53:A3:38:C2:93:93:59:7F:3D:78:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01028FC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b546cb21-c685-4ad2-9ead-58ccaabb7a40/5978b3f207dd7b09b2dbdd3a26bede8fc988eb9f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b546cb21-c685-4ad2-9ead-58ccaabb7a40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Nov 2023 20:28:44 +0000
Certificate not after:    Thu 11 Sep 2025 06:00:00 +0000
Subordinate resources:    AS: 273137
                          IP: 2803:b450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16945090 (0x1028fc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 29 20:28:44 2023 GMT
            Not After : Sep 11 06:00:00 2025 GMT
        Subject: CN=5978b3f207dd7b09b2dbdd3a26bede8fc988eb9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:52:56:20:4b:cf:8b:9a:ba:a9:51:23:35:1a:
                    7d:1c:fb:dd:50:27:42:bf:e3:49:dc:83:f3:f0:48:
                    27:00:30:b8:48:ad:0c:92:3f:22:b7:a4:bc:c9:59:
                    07:f1:d8:de:61:bf:c4:bd:19:ab:b5:69:02:d8:dd:
                    e3:34:2a:53:5e:a5:b5:33:23:cd:3f:d0:34:c5:fb:
                    13:21:d6:90:e9:1f:20:35:07:53:98:39:ff:80:5f:
                    e5:f1:3b:bf:e1:be:2b:4f:bc:c7:23:4c:69:92:42:
                    6b:0f:dc:8d:af:fe:ed:34:17:b4:50:0f:71:e3:b4:
                    56:30:55:4c:8e:6c:87:8c:b9:0b:4f:81:69:c3:22:
                    55:96:e0:db:a1:c2:be:7a:8f:3e:7d:78:ae:be:88:
                    19:e4:6b:41:2f:0c:af:ac:e2:1e:90:81:fd:8a:40:
                    40:7c:64:86:61:07:0e:a9:fd:91:51:04:e9:65:0c:
                    bd:1f:eb:57:c2:0d:a7:ff:64:07:a1:07:0d:5f:6e:
                    29:54:03:c0:7b:4b:03:fb:03:5b:e7:1b:3b:fa:a3:
                    d6:c5:e5:6c:12:01:91:e6:b1:a2:c1:ae:72:21:ce:
                    5e:c5:89:3d:a9:c8:68:96:24:8e:9f:50:f4:f7:d4:
                    7a:ac:ab:76:75:da:34:a6:fa:76:5d:4b:15:44:61:
                    ab:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EB:FD:DA:C9:60:9A:77:D4:53:A3:38:C2:93:93:59:7F:3D:78:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b546cb21-c685-4ad2-9ead-58ccaabb7a40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b546cb21-c685-4ad2-9ead-58ccaabb7a40/5978b3f207dd7b09b2dbdd3a26bede8fc988eb9f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273137

    Signature Algorithm: sha256WithRSAEncryption
         b1:1c:7f:3b:cc:c5:22:37:aa:c8:47:09:c4:91:53:d0:b7:06:
         5b:86:56:de:85:27:cc:c2:49:e6:27:6d:29:a2:aa:0e:8f:4f:
         c3:fb:3a:86:9a:79:e4:9f:d3:2e:f1:12:c3:71:a4:8e:c5:4f:
         68:dc:2d:93:fc:21:a4:6e:98:ca:91:4c:e2:2d:87:43:e9:84:
         ce:45:fe:df:06:1f:8b:ea:5e:fc:41:96:9e:5c:be:00:97:18:
         06:b9:0a:82:fd:e7:33:11:48:9f:b1:0f:e4:45:85:20:15:6a:
         cf:a5:72:4c:da:75:3c:83:f5:92:e8:d3:80:82:14:c3:5f:e4:
         77:52:be:5d:03:71:4b:12:a2:22:fd:60:62:7c:d1:b6:0d:92:
         bb:33:51:7f:ab:6d:78:0a:07:28:60:fa:73:90:bd:c1:b1:f0:
         9b:2e:3d:f4:9b:9e:0f:68:ce:35:f8:4d:3b:af:12:73:5b:41:
         c0:d0:ab:f1:d8:58:b0:b0:6b:63:d0:12:b8:a0:bf:d7:46:a1:
         97:39:ee:67:7b:e0:58:52:53:e7:f8:a1:04:3f:c0:c7:ce:90:
         7d:f9:c9:54:f3:c3:0f:20:c3:b4:3f:56:ce:7d:2b:74:5c:19:
         30:00:0e:b2:22:ae:19:5f:ee:a3:aa:6b:23:fd:eb:4b:04:a5:
         82:07:98:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----