Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer
File:                     6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.cer (raw, json)
Hash identifier:          W2EMMac+oKEUwJ2TUV6qIw6ZBQUQI9CxdHgcnCZrU5Q=
Subject key identifier:   73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE215A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 17:59:18 +0000
Certificate not after:    Mon 21 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 273112
                          IP: 2803:a850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16654682 (0xfe215a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 25 17:59:18 2023 GMT
            Not After : Apr 21 06:00:00 2025 GMT
        Subject: CN=6dfd4be7c28f535bcd1c3e8a01cbb2211013905e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:67:a2:d1:4a:26:bb:ff:04:54:f7:e8:7c:49:
                    05:0d:a6:02:8d:a9:28:fe:41:07:aa:75:8c:2a:92:
                    46:c6:56:74:4b:c5:c5:38:d1:00:72:34:58:b4:05:
                    ba:bc:9d:fa:4f:c7:4f:87:1c:ae:ae:ec:22:89:f5:
                    a3:da:e1:81:a4:e0:a6:20:99:b1:66:97:fa:44:a1:
                    77:d0:bf:01:16:ea:4c:96:9d:26:be:9e:4a:b8:50:
                    04:2d:dd:a6:79:da:3a:b5:e2:93:1a:7c:f3:fa:cd:
                    6f:b1:a5:9f:d1:fb:70:24:20:6a:96:e7:e8:ed:5a:
                    d7:3e:0a:2d:ad:7a:13:38:ab:b4:4c:87:96:09:07:
                    a7:c5:be:6d:cf:33:44:84:ab:17:f2:7d:2c:34:9a:
                    59:49:1c:02:e3:a7:51:3a:fc:13:0e:4b:5c:c3:a4:
                    6e:87:7c:41:21:38:47:b1:c0:c5:15:d7:7b:7d:6f:
                    b9:2a:51:c0:b6:9b:b3:03:c0:e5:d4:fc:30:07:36:
                    2e:4c:2b:f2:02:c7:3e:65:50:e9:9b:6d:8c:8f:f1:
                    07:e4:77:c4:5d:4b:4f:13:49:0d:76:52:00:c0:d6:
                    87:84:e0:43:95:a1:70:1d:29:0f:fa:14:b6:8e:e1:
                    2c:52:61:c7:16:59:b4:a2:c7:45:f1:2c:0b:8a:33:
                    14:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:78:26:D1:63:B3:F8:6B:8F:E2:E9:9C:2F:7A:B7:A8:8A:4E:37:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/251566fb-bf1c-4119-bbf4-c8a0dea3c95e/6dfd4be7c28f535bcd1c3e8a01cbb2211013905e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273112

    Signature Algorithm: sha256WithRSAEncryption
         8e:91:af:4a:7c:19:c0:6f:d6:aa:2a:b0:0d:21:4a:13:da:eb:
         4b:e9:40:90:16:9c:0d:7e:aa:b9:33:54:6d:f7:fe:39:06:f8:
         97:87:fb:e0:75:8a:2f:33:2c:c5:80:78:0b:59:90:49:79:d3:
         bd:c5:1f:e9:3d:83:54:37:70:0e:94:d4:43:4d:b2:63:c4:d4:
         04:ce:43:6e:fd:13:9c:cd:cf:2d:c7:6b:d3:3b:b6:91:98:1c:
         e7:fb:3e:ec:54:15:d6:bd:95:b2:70:eb:7c:00:9f:64:c5:1e:
         26:29:9b:8c:d7:6c:f7:6a:ae:8e:10:23:19:3c:c8:ad:c0:01:
         e1:33:d2:56:5d:06:6e:ef:0b:f5:07:d1:dd:41:8c:17:0e:ff:
         81:a6:0d:ed:31:79:37:22:ec:0d:c2:8f:83:3e:1b:78:14:ae:
         b8:28:36:55:84:09:b5:af:ee:92:60:13:db:cf:66:7e:8f:a3:
         27:85:da:69:38:17:b4:e7:32:ef:28:82:42:ba:e1:b3:47:e3:
         ba:1f:de:d5:80:63:03:19:21:31:c6:04:f1:56:18:47:21:20:
         24:67:0e:99:68:68:b6:e4:0a:f1:41:87:f0:d2:84:79:91:b6:
         32:61:77:7f:a6:82:b5:99:8e:e1:94:86:46:29:a1:86:3c:ca:
         69:73:27:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----