Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a4088cf4d154d6046cf1192538f19ba7c780906.cer
File:                     5a4088cf4d154d6046cf1192538f19ba7c780906.cer (raw, json)
Hash identifier:          R4SIdNdPesm3501bGfwaJdtxOgeZiwGNymOceOmVZmU=
Subject key identifier:   AE:B3:39:5F:AE:CC:CE:4F:7E:EA:35:BD:8D:75:C1:20:3E:1F:F5:E5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C8348
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3a2e5fed-7b54-45c7-b699-91e0403a8ca1/5a4088cf4d154d6046cf1192538f19ba7c780906.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3a2e5fed-7b54-45c7-b699-91e0403a8ca1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 02 Mar 2024 17:36:57 +0000
Certificate not after:    Thu 01 Jan 2026 18:48:18 +0000
Subordinate resources:    AS: 273193
                          IP: 2803:8650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17597256 (0x10c8348)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  2 17:36:57 2024 GMT
            Not After : Jan  1 18:48:18 2026 GMT
        Subject: CN=5a4088cf4d154d6046cf1192538f19ba7c780906
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:50:48:2e:12:3f:c2:0d:83:14:e0:62:7e:d7:
                    df:f8:54:7e:56:b8:61:f8:4f:ea:e2:59:23:42:a7:
                    5f:7e:ef:08:18:c0:b9:ae:84:26:44:a3:82:c0:77:
                    3f:a6:bd:db:0f:d4:0a:7f:ab:8b:f7:9b:8c:3c:53:
                    a5:81:bf:7f:3e:5e:d2:26:55:c7:34:b3:6d:99:b0:
                    fc:8e:20:c0:b6:de:32:a5:f7:9d:ae:db:43:7f:c1:
                    cb:ac:9f:9d:8e:2c:7f:32:14:92:65:f3:25:c2:f6:
                    20:17:23:2b:63:73:09:ff:5b:3d:5c:73:e9:60:ed:
                    1f:ec:69:dc:4c:dd:58:f6:67:ea:b6:05:24:ba:54:
                    81:fd:54:32:1a:50:f0:7a:4f:b0:c8:47:c6:e6:7d:
                    73:aa:3b:4e:ee:78:c0:c5:c0:5e:ff:5d:03:5b:a1:
                    6f:da:47:87:4d:05:d1:c4:ae:e9:fc:80:db:f9:59:
                    f4:50:53:84:b0:1a:bf:e3:c0:6d:6c:70:71:b6:5e:
                    d0:62:81:87:68:a6:ab:4a:f0:80:9b:41:b0:37:d7:
                    c0:b8:23:81:e9:9c:6e:14:1c:89:80:11:15:b9:1b:
                    7a:e4:dc:88:62:4e:59:fd:30:c5:4f:da:1f:05:1b:
                    ec:f0:1a:88:77:59:d5:f9:3a:66:90:b4:2d:30:0c:
                    a1:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B3:39:5F:AE:CC:CE:4F:7E:EA:35:BD:8D:75:C1:20:3E:1F:F5:E5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3a2e5fed-7b54-45c7-b699-91e0403a8ca1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3a2e5fed-7b54-45c7-b699-91e0403a8ca1/5a4088cf4d154d6046cf1192538f19ba7c780906.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273193

    Signature Algorithm: sha256WithRSAEncryption
         99:80:dd:6d:a0:76:24:ec:07:eb:ed:ad:02:fc:05:68:a8:46:
         46:1b:2e:8f:49:d5:82:02:54:9d:e2:7d:67:5e:9d:7f:40:48:
         36:cf:a1:81:18:fd:9b:e6:c5:b0:17:2d:c7:e9:44:c3:2c:bc:
         fc:63:c1:36:07:6f:99:1f:95:af:a9:75:3c:d0:7f:39:7d:99:
         c5:e4:ac:6f:1a:74:67:39:74:e9:7d:e5:c0:8c:86:b7:6e:eb:
         7a:a3:95:cc:a9:5e:7d:27:c3:d0:4c:43:79:3b:ba:cb:28:c6:
         7b:59:ec:59:2f:84:0c:6b:f2:e8:54:c8:12:7e:c0:99:f7:12:
         a1:ce:81:e4:8d:d3:80:95:a2:46:e3:c5:5e:4c:cf:ff:99:e7:
         e1:fd:86:6d:92:d4:e6:e0:fe:94:88:bf:39:de:f0:a9:ab:83:
         30:4b:04:2f:0e:4c:72:a6:e4:7d:df:ba:ab:14:55:72:ad:88:
         7c:7c:78:b0:07:0a:4a:92:a7:9c:21:ae:ac:f5:77:9e:c9:1a:
         df:8d:d7:a0:e5:3a:6e:e3:91:53:49:5f:7b:50:ef:58:1a:93:
         3b:6d:a7:1a:da:74:c2:2e:00:ce:83:4d:93:ec:e6:1b:31:b5:
         ae:32:a8:f7:ef:38:07:55:88:d1:e8:14:1d:a7:c5:ad:30:c8:
         12:87:cf:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----