Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/636f91242a21a034150c77b9592c750c6c969f7c.cer
File:                     636f91242a21a034150c77b9592c750c6c969f7c.cer (raw, json)
Hash identifier:          iW95JQP0jqDwGW/iBwKZYBHrses5SzHSzLjqT2BsXnc=
Subject key identifier:   4E:EF:86:0B:83:21:C2:24:A9:EA:C1:0A:ED:9C:51:FA:AF:5F:C7:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDAFFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/88e967cd-eb85-41f9-aa48-5fde4f0614eb/636f91242a21a034150c77b9592c750c6c969f7c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/88e967cd-eb85-41f9-aa48-5fde4f0614eb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 13:35:50 +0000
Certificate not after:    Tue 24 Dec 2024 05:00:00 +0000
Subordinate resources:    AS: 273023
                          IP: 2803:d390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15577086 (0xedaffe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 14 13:35:50 2023 GMT
            Not After : Dec 24 05:00:00 2024 GMT
        Subject: CN=636f91242a21a034150c77b9592c750c6c969f7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:20:23:9d:22:b3:66:98:1f:ad:0c:e0:97:24:
                    de:dd:03:8b:42:a9:16:7c:73:f2:e6:99:7f:33:50:
                    89:70:ea:5a:2b:fb:e9:d6:6d:b7:74:78:c6:63:af:
                    b5:29:b3:b4:83:96:f5:af:46:04:26:a1:58:e4:ed:
                    df:4b:e5:ed:da:6d:38:92:fe:aa:16:c7:00:41:52:
                    61:bd:12:d1:ed:1b:8d:44:5f:30:21:db:79:41:cc:
                    01:51:be:69:86:7f:c5:34:03:d6:69:30:13:4b:15:
                    5b:e3:24:76:2e:a4:cf:2e:4e:b2:30:1a:6e:de:cc:
                    6f:e0:4a:8f:a9:ad:ea:15:0b:95:fd:03:df:4e:e8:
                    8f:ab:55:0b:04:dc:46:74:95:65:09:f6:ef:b7:e8:
                    a0:8a:4a:0f:fa:eb:41:df:37:2c:d5:a8:25:3a:37:
                    5a:e3:42:e5:bf:02:07:f4:30:4c:32:ce:17:ca:3c:
                    a4:fe:f9:b0:88:9a:e1:45:f4:31:b6:f1:2d:31:97:
                    3c:5e:83:56:17:94:15:85:05:53:48:b7:e5:e6:90:
                    4a:cb:c9:ec:3f:56:f1:49:a6:5c:6c:4e:25:ae:8f:
                    2a:e9:c3:a2:e2:bf:93:7d:7f:23:de:79:a8:72:f2:
                    bf:dc:ed:9b:1d:93:c2:38:ae:eb:e4:bb:36:60:e7:
                    6b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:EF:86:0B:83:21:C2:24:A9:EA:C1:0A:ED:9C:51:FA:AF:5F:C7:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/88e967cd-eb85-41f9-aa48-5fde4f0614eb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/88e967cd-eb85-41f9-aa48-5fde4f0614eb/636f91242a21a034150c77b9592c750c6c969f7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273023

    Signature Algorithm: sha256WithRSAEncryption
         a2:32:de:7a:c4:a2:d6:89:8f:55:a2:4e:60:a4:12:4e:80:e9:
         46:34:fe:13:a3:b9:c5:d4:ac:2a:de:8a:13:06:82:fc:a9:1b:
         60:57:8b:2a:d9:43:22:4b:a7:19:b7:69:ff:94:54:1e:9d:29:
         47:56:a5:3a:52:2a:c2:c1:bd:4c:50:d7:1d:9b:63:64:db:65:
         b5:4a:d3:e7:ca:2f:20:00:15:a9:e6:5d:95:45:9a:e0:31:13:
         78:d6:7d:59:c9:d7:c1:e4:a0:0a:10:52:c7:57:af:44:7e:b9:
         e2:d5:28:67:34:e6:96:89:8d:2a:e5:17:46:81:72:48:9a:e7:
         1f:ac:af:66:7c:d6:d4:3b:d6:4c:fc:7a:fa:9d:c7:f5:1e:dd:
         9c:bc:f4:31:4e:34:11:57:cc:08:72:48:f0:04:07:c4:95:db:
         60:af:1a:d9:b9:d4:59:91:64:6b:24:0d:96:c9:4d:c3:04:24:
         43:89:ab:e8:2b:6c:d3:a5:3e:55:9e:57:93:dd:b3:35:0c:5b:
         4f:72:1f:2f:28:82:59:86:0e:27:4b:65:a9:1d:a1:b6:fe:70:
         45:a2:96:46:cd:00:89:29:90:33:32:0d:64:af:f9:90:81:bf:
         fc:43:8d:a5:dc:90:8c:4d:45:aa:ec:b9:cb:b2:39:a2:26:08:
         ac:da:37:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----