Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.cer
File:                     5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.cer (raw, json)
Hash identifier:          SKWvBKujEdLLgsE4a3r6dPBiyr0n/zhBgFESLaKO6hQ=
Subject key identifier:   A2:99:D7:56:89:68:0F:AD:0A:0F:04:83:52:77:E3:68:3B:E5:36:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1CA48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Mar 2023 16:50:07 +0000
Certificate not after:    Sat 27 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 272965
                          IP: 2801:11:3800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14797384 (0xe1ca48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 17 16:50:07 2023 GMT
            Not After : Apr 27 06:00:00 2024 GMT
        Subject: CN=5d3488bdd011aaba522a8ada0307e9a6c60ebc1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:8b:79:ac:90:40:ba:04:95:09:f1:b4:f0:
                    6f:c4:4e:61:47:11:97:39:5a:c0:6e:ef:3a:0d:a1:
                    fc:af:43:e4:dd:3c:f4:c5:dd:26:ed:64:92:d4:6f:
                    39:1c:1f:67:8d:ae:0d:59:c9:bc:3a:55:c2:9e:ee:
                    e3:d6:48:75:4d:65:3b:ac:9e:0d:38:3b:86:c4:59:
                    2c:d0:fc:ee:0b:cb:ca:e1:79:26:34:64:65:38:33:
                    e9:e7:62:f2:34:e3:81:9c:cb:1b:16:7d:0b:0d:78:
                    1e:4c:22:a8:ed:53:21:20:b3:12:1e:48:12:64:04:
                    4b:e1:de:1e:19:98:37:25:f9:d1:20:8d:2c:f0:a3:
                    d0:8c:35:ba:d3:49:9e:32:22:3f:7c:cd:ac:6b:92:
                    a5:fb:52:e8:af:0a:a2:67:11:c9:36:71:8c:97:95:
                    8a:5b:8e:31:cb:4e:d1:eb:4c:b9:be:28:ef:ff:a4:
                    ed:9e:1d:35:88:2f:b5:f9:09:3a:d1:87:14:76:cc:
                    68:a9:be:8f:47:67:cc:b4:12:0d:83:1e:ac:72:a1:
                    f9:ec:18:a3:01:91:81:07:2a:85:6d:4a:4c:e0:3f:
                    75:29:95:ea:24:e3:82:f2:a2:6f:22:53:97:cc:72:
                    4f:f5:5c:a5:3c:a0:be:0d:1f:6d:e6:3b:3f:f3:14:
                    6e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:99:D7:56:89:68:0F:AD:0A:0F:04:83:52:77:E3:68:3B:E5:36:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/379d4ac8-324b-417a-9e2c-0bf38d9e168d/5d3488bdd011aaba522a8ada0307e9a6c60ebc1e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:3800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272965

    Signature Algorithm: sha256WithRSAEncryption
         69:81:94:2d:f5:05:6a:00:1c:72:93:c9:46:0e:43:c5:c3:1a:
         28:8c:51:6c:ba:fc:97:12:f1:97:ee:e2:db:c5:0e:38:43:a6:
         1f:5f:74:5e:b4:2f:d0:b9:74:05:f9:8f:d4:9f:07:96:41:87:
         48:60:f6:61:e8:2e:35:22:7d:a1:fb:ef:41:49:e8:b7:e5:89:
         3c:49:b5:68:2d:72:8c:a7:e1:16:05:19:a2:63:8a:36:d4:ef:
         0e:1f:81:8f:39:b6:a6:54:6f:05:0a:42:fa:f3:aa:4c:66:b1:
         d6:76:91:13:23:04:b7:75:c6:83:e3:b9:90:bb:25:c7:69:be:
         c3:37:ca:46:3e:f4:0e:04:9f:ba:d4:11:27:c1:41:03:ec:85:
         ab:32:c7:ee:e9:5d:75:97:7d:d8:cf:c7:4c:f7:f0:87:c7:34:
         81:dc:80:70:b2:38:20:1f:1c:0b:95:60:5b:e1:87:9e:ba:90:
         a2:ec:71:db:ef:86:23:d5:a0:b3:c2:ff:81:2d:39:be:5a:a3:
         2c:ea:e9:2c:02:b7:97:d7:5b:e1:3e:e9:5c:dd:cc:48:e9:4d:
         17:da:a1:3a:c7:5d:4e:39:b2:03:82:76:26:0a:6a:fa:87:3b:
         39:25:c5:c0:40:94:0a:8f:eb:67:98:45:56:4b:4d:94:93:0d:
         68:bb:d3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----