Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/652948d1cefa254b84733630f0875c0230ca7039.cer
File:                     652948d1cefa254b84733630f0875c0230ca7039.cer (raw, json)
Hash identifier:          EYx+BbAeklm+YlUR1fjwMYrbNq7UghHm2HCw7OUyl1Q=
Subject key identifier:   17:4F:9D:CD:3E:EA:41:AB:2E:DB:8C:E2:94:7B:4C:38:4F:AF:8A:54
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01051782
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b22da88-58aa-4f15-bfec-2ef86fa3625e/652948d1cefa254b84733630f0875c0230ca7039.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b22da88-58aa-4f15-bfec-2ef86fa3625e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 13:52:44 +0000
Certificate not after:    Thu 18 Sep 2025 06:00:00 +0000
Subordinate resources:    AS: 273152
                          IP: 2803:3c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17110914 (0x1051782)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 27 13:52:44 2023 GMT
            Not After : Sep 18 06:00:00 2025 GMT
        Subject: CN=652948d1cefa254b84733630f0875c0230ca7039
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f6:05:9b:ee:c8:df:54:70:c2:8a:18:15:c3:
                    28:45:fa:82:f0:68:ae:4c:1f:0c:42:2d:85:59:2e:
                    23:a0:54:56:00:9c:e8:fd:cd:67:aa:98:1b:c8:8a:
                    b2:b5:4d:8e:97:36:6e:fe:d2:e1:98:95:d7:66:84:
                    07:55:48:1c:2a:db:52:32:aa:fe:d4:b2:b5:bf:fd:
                    ed:02:ae:fe:26:e0:b0:e1:a1:1f:bb:a4:eb:a9:f3:
                    97:1b:a8:74:5e:47:8f:5a:28:75:55:f0:62:9d:17:
                    2f:fb:df:73:fa:07:46:d2:e8:5d:0b:74:f9:11:97:
                    66:23:d6:fd:79:42:a4:70:cd:52:2b:ca:b4:3a:0e:
                    83:55:a1:3a:ee:3f:35:5c:9e:54:4a:3b:80:b3:c2:
                    92:ea:2d:de:f3:a7:62:be:9b:c2:f9:dc:f4:29:d0:
                    05:b0:74:5d:7c:ab:66:ac:f8:24:64:0b:3f:33:32:
                    28:7e:3c:6f:dd:37:26:ec:bd:23:c9:81:5b:ab:15:
                    41:11:be:60:5d:cc:74:6d:94:b7:56:70:6d:c9:0d:
                    4e:05:36:36:69:66:66:69:41:69:98:c2:ce:2e:74:
                    bf:53:ba:82:7a:23:a5:8e:b7:cd:44:37:ad:9c:40:
                    62:77:5a:ca:05:f1:8c:17:e8:68:3b:18:2c:39:c4:
                    d1:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4F:9D:CD:3E:EA:41:AB:2E:DB:8C:E2:94:7B:4C:38:4F:AF:8A:54
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b22da88-58aa-4f15-bfec-2ef86fa3625e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b22da88-58aa-4f15-bfec-2ef86fa3625e/652948d1cefa254b84733630f0875c0230ca7039.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273152

    Signature Algorithm: sha256WithRSAEncryption
         47:80:2a:bd:57:e7:e4:df:1c:74:ba:17:cb:39:b5:31:cf:2e:
         4b:59:38:83:44:76:be:f4:e0:01:f8:46:37:82:16:4c:85:70:
         a8:73:69:8a:c4:03:ef:97:8a:98:75:19:68:1e:ef:60:7e:c3:
         9d:a5:cb:f8:4b:03:f4:08:59:9d:7a:34:a2:87:74:3f:fa:3d:
         0f:cf:79:bd:f3:66:43:c3:0b:e9:81:fe:7d:f0:0e:ba:51:b9:
         b6:80:cf:2f:07:cc:3f:58:70:f9:b1:c9:64:30:ea:d7:e1:79:
         fb:38:a8:f8:9a:7e:57:39:7b:e5:ba:96:da:fa:fb:4d:c3:b9:
         78:55:0f:c9:1c:1c:91:08:bd:bf:9b:be:9c:22:92:9f:58:37:
         4a:ab:76:c2:8d:13:d3:97:e6:b3:3d:ce:ac:5e:8a:a3:f2:c0:
         c4:7b:e9:ea:3d:69:92:19:18:b5:d3:4d:f1:95:8b:1d:cd:bc:
         58:66:53:e6:c6:37:23:8d:fc:a0:1d:5c:0a:1e:28:99:15:63:
         b1:3e:f6:30:9c:02:54:64:22:ec:b3:a6:bb:fb:89:8a:a0:a4:
         88:2a:bb:3c:55:29:11:3e:8b:ad:cd:cf:61:ad:5e:c5:f4:7f:
         18:6a:13:01:09:d3:af:02:04:57:d4:0a:40:bb:e5:34:13:80:
         a9:49:c0:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----