Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a99a0ffe0ed766481d9257efbe6bc1cc9368dff.cer
File:                     5a99a0ffe0ed766481d9257efbe6bc1cc9368dff.cer (raw, json)
Hash identifier:          UWVB/WD4qPeA2gKK2c/idp6ITWn5yQzLJUEtnTLNHVM=
Subject key identifier:   05:AE:05:83:BC:DC:2B:7D:BE:3A:2F:B2:F1:D2:49:55:02:1A:E5:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DCA2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c7350721-6bb9-41d2-a1c8-1ae094aa670a/5a99a0ffe0ed766481d9257efbe6bc1cc9368dff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c7350721-6bb9-41d2-a1c8-1ae094aa670a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 22:13:14 +0000
Certificate not after:    Sat 18 Oct 2025 00:07:01 +0000
Subordinate resources:    AS: 270133
                          IP: 2806:3d5::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17680938 (0x10dca2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 12 22:13:14 2024 GMT
            Not After : Oct 18 00:07:01 2025 GMT
        Subject: CN=5a99a0ffe0ed766481d9257efbe6bc1cc9368dff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c9:61:31:a2:8b:f6:40:7f:3e:77:1d:1d:44:
                    14:a1:dd:32:50:01:18:9b:44:35:2e:73:d9:e3:2c:
                    e3:e7:bd:1e:e5:ce:50:cf:85:44:98:70:f1:a6:4b:
                    b0:b6:84:96:3e:3a:ed:4f:1d:db:74:5b:ab:05:ec:
                    d0:c7:ec:32:27:79:9d:f7:74:75:88:0e:58:13:fa:
                    8d:fc:f9:be:07:80:63:6a:bf:41:6e:02:6d:e4:c7:
                    e5:47:7e:a2:16:78:69:04:04:cc:43:3a:50:48:b2:
                    7d:04:1c:0c:be:b8:8f:18:f0:63:f7:32:f1:8c:b0:
                    ca:f7:1b:2d:9b:4c:3b:b4:b1:0f:56:9d:74:1b:9f:
                    1a:db:66:ff:8d:d3:c5:f7:33:96:11:d8:3a:9d:17:
                    6b:f2:20:a4:a1:e7:01:9b:70:30:eb:94:f5:bb:6c:
                    5d:9b:74:18:63:b4:8d:f8:57:bb:be:4b:8b:99:2c:
                    bd:0d:d2:63:0b:58:03:35:f0:22:40:c6:f7:c3:0e:
                    2d:ea:c1:08:07:5b:c0:5c:79:bc:40:04:b5:90:ed:
                    bb:f9:34:82:27:bf:bd:7b:35:c9:0f:29:89:3a:29:
                    cb:4f:ed:fc:ac:8c:ff:7e:aa:fb:e3:c9:f0:4d:33:
                    7b:1a:52:68:d5:ba:d0:a2:20:70:24:d8:9d:7e:1b:
                    4d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:AE:05:83:BC:DC:2B:7D:BE:3A:2F:B2:F1:D2:49:55:02:1A:E5:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c7350721-6bb9-41d2-a1c8-1ae094aa670a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c7350721-6bb9-41d2-a1c8-1ae094aa670a/5a99a0ffe0ed766481d9257efbe6bc1cc9368dff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3d5::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270133

    Signature Algorithm: sha256WithRSAEncryption
         8b:68:db:66:96:21:fd:59:9c:c6:47:7f:e5:2c:14:d9:c7:2e:
         f6:be:05:91:83:77:58:ae:f5:31:60:93:4b:23:dd:69:0a:3e:
         d3:0c:48:7a:14:c4:5d:5f:f1:88:9d:e7:8e:a1:aa:66:4d:4d:
         52:72:78:64:5a:8b:bc:83:09:e9:15:ca:46:db:84:a9:cc:c2:
         ec:b6:64:e8:8e:c1:2b:37:56:45:ba:b1:ac:bd:32:8f:5c:c2:
         b9:08:6c:66:82:a4:76:1f:92:7a:eb:df:70:70:fa:55:e0:4e:
         3c:8e:62:c9:69:7c:91:db:44:0f:79:90:e8:fb:c4:49:81:b6:
         53:b7:5c:5f:5d:dd:47:fa:c7:07:1c:49:95:b9:73:14:b5:9f:
         0c:bb:ac:4f:52:ed:19:1b:05:48:f1:15:e6:2b:b7:9e:42:04:
         92:f8:6e:7c:3e:d0:16:20:54:67:d1:73:f5:bc:61:60:62:00:
         db:51:99:7a:68:08:b7:93:e7:42:f2:00:50:8a:41:87:65:90:
         60:f5:47:c1:b8:64:c4:2b:52:93:d7:54:6c:95:df:da:6f:24:
         08:4a:9f:b1:9c:a8:38:d9:02:88:d7:57:86:8f:f6:53:a6:e1:
         c0:74:72:57:de:88:b6:87:a5:4b:a3:d9:ab:51:1a:9d:ff:84:
         5f:58:81:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----