Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/64c345b97368a00ed0db59345ff7a6038a543de9.cer
File:                     64c345b97368a00ed0db59345ff7a6038a543de9.cer (raw, json)
Hash identifier:          l9xp+UIunBBV9wz/R4aED1dlhuehbfwX1MatNqyj264=
Subject key identifier:   EC:B0:38:13:8E:C1:9B:8E:FF:30:78:48:9E:51:DB:C2:42:4D:AE:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C4E65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d324ed37-34b9-447f-86dc-3a35f3c79376/64c345b97368a00ed0db59345ff7a6038a543de9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d324ed37-34b9-447f-86dc-3a35f3c79376/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 21:23:59 +0000
Certificate not after:    Fri 26 Dec 2025 20:08:10 +0000
Subordinate resources:    AS: 273189
                          IP: 2803:7a50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17583717 (0x10c4e65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 21:23:59 2024 GMT
            Not After : Dec 26 20:08:10 2025 GMT
        Subject: CN=64c345b97368a00ed0db59345ff7a6038a543de9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8b:d0:5a:ab:e6:4a:47:50:83:3b:c2:af:bd:
                    70:f5:c4:e5:bd:82:93:dd:6c:ab:dc:ae:ea:96:63:
                    cb:76:d5:70:38:bf:14:35:25:d2:ef:dc:ba:0c:28:
                    4f:80:b2:0a:fc:e1:11:d8:3a:bb:f2:71:4a:f4:fe:
                    42:4f:d1:ee:14:0e:79:53:ef:01:2f:f4:40:d6:97:
                    9c:2e:cb:f5:47:71:56:bb:11:48:42:cb:0f:f6:56:
                    c7:63:d2:9b:64:3a:2a:cc:13:c7:4b:66:64:90:80:
                    77:60:a4:70:f2:44:b4:3a:f4:bd:4c:df:28:35:c5:
                    1b:f2:7c:80:fb:b0:bf:89:8e:1e:8f:69:ae:92:70:
                    6b:e5:26:92:f8:89:c4:ce:1c:32:83:25:bd:88:36:
                    6c:2f:0d:a0:65:41:89:fb:fb:86:a9:b5:8a:ab:49:
                    ef:d7:85:58:d3:6d:a1:39:8b:46:25:e6:f5:7a:65:
                    23:dd:b3:18:18:8a:d9:d5:8f:6a:49:e0:ef:21:ec:
                    82:61:f8:c6:70:3c:d3:5c:69:46:3d:3b:dd:d7:d3:
                    c3:2f:64:73:b2:1e:9f:b6:d3:10:a4:2b:40:65:91:
                    58:b4:a2:80:39:e8:4e:ab:bc:82:21:0a:79:b2:15:
                    b2:51:15:90:b2:18:7d:6a:a9:39:3c:38:61:16:f5:
                    55:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:B0:38:13:8E:C1:9B:8E:FF:30:78:48:9E:51:DB:C2:42:4D:AE:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d324ed37-34b9-447f-86dc-3a35f3c79376/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d324ed37-34b9-447f-86dc-3a35f3c79376/64c345b97368a00ed0db59345ff7a6038a543de9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273189

    Signature Algorithm: sha256WithRSAEncryption
         6e:3f:60:f7:69:b1:03:e0:bb:a1:1e:83:08:90:ea:0b:8d:7e:
         c3:57:73:4f:01:93:c4:7d:01:71:66:18:68:13:27:cc:d8:c6:
         42:3b:64:a0:8a:89:4a:03:a7:55:9a:b0:a0:19:53:90:fc:48:
         5c:63:62:fc:e6:74:fc:e8:62:d4:5d:52:15:38:cc:14:51:17:
         5c:b9:24:59:80:96:ba:d0:dc:66:55:4f:c1:63:ee:ea:5a:5b:
         e4:9c:54:cc:b6:30:14:f0:95:ea:69:b2:4a:39:c7:81:ea:93:
         72:c7:91:ee:f5:d1:f2:48:75:0c:64:2d:cb:e8:d6:31:9e:6b:
         7a:b3:cc:52:f1:e4:e5:f5:7d:2f:81:70:46:79:30:be:d7:ff:
         ac:f2:dc:9e:b5:94:b8:08:78:22:7a:e6:17:d3:53:de:ec:33:
         e1:5d:08:8a:05:99:16:20:89:47:f3:b7:53:0b:7f:c3:e4:f9:
         47:ef:ad:5b:89:db:6f:08:ff:95:78:2f:17:e8:d1:86:99:a8:
         d6:ca:61:aa:5a:b4:61:e1:9f:21:47:95:b5:2c:9a:5e:5f:c0:
         1d:7f:bc:c9:96:00:34:5b:18:bb:39:2c:fd:fe:8b:49:1d:7b:
         1e:77:a5:3c:5f:25:bb:78:52:2e:f1:6b:52:f3:10:55:35:74:
         e3:6d:28:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----