Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73e215104a3c613a14aa0e0950ba00c88d2f2eb0.cer
File:                     73e215104a3c613a14aa0e0950ba00c88d2f2eb0.cer (raw, json)
Hash identifier:          8ABy/rjgyGSd1HGucbbl8qnzfKU2ZWJGBS0QOx0HA3o=
Subject key identifier:   E0:AD:D9:E4:0E:FD:42:FF:39:70:A1:E5:FD:81:D2:12:4E:85:24:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F799CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a29b143-033b-450b-b571-89599588ae5b/73e215104a3c613a14aa0e0950ba00c88d2f2eb0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a29b143-033b-450b-b571-89599588ae5b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 31 Aug 2023 13:41:44 +0000
Certificate not after:    Fri 10 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 273070
                          IP: 2803:f790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16226766 (0xf799ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 13:41:44 2023 GMT
            Not After : Jan 10 05:00:00 2025 GMT
        Subject: CN=73e215104a3c613a14aa0e0950ba00c88d2f2eb0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:6e:ca:0c:d9:46:31:00:9a:c7:e7:d4:4e:21:
                    92:c6:42:2a:26:2f:0c:81:3e:6f:d8:10:aa:36:a2:
                    ba:4e:5e:58:e6:2e:51:60:78:f1:7a:9e:6e:e4:cc:
                    31:42:72:7f:75:23:18:74:8d:25:8e:85:a7:8d:95:
                    c4:ad:dc:ff:77:a8:c6:ca:b5:c8:af:e1:bd:86:f5:
                    1b:2b:28:17:87:80:f4:51:2e:33:da:65:70:7b:ab:
                    59:38:41:fd:fc:ef:6b:0c:0b:c1:32:04:ed:fe:46:
                    7c:b1:0f:24:75:ef:f1:a7:cf:8a:36:b6:f3:04:cd:
                    71:ec:ce:f3:bd:7f:a6:fc:92:bd:fa:e5:96:97:11:
                    1f:4a:bf:c6:b0:4d:eb:5d:fd:5b:92:f1:ea:c3:a6:
                    f6:1a:68:c7:e7:a0:f7:b9:43:7c:85:68:14:5c:1a:
                    a3:cd:81:03:59:e3:a2:0a:ac:e5:98:6c:eb:9b:61:
                    fa:4c:46:d8:46:5d:b6:6e:c2:36:dd:94:0d:22:84:
                    d3:a8:da:7c:d3:36:c9:0c:a9:0c:24:9e:e6:49:6a:
                    da:bd:e6:7b:89:4c:48:10:3f:7b:59:2f:2c:1c:ac:
                    17:1e:ff:ca:7d:d4:ff:73:c6:18:9c:73:9d:60:6c:
                    d3:62:ac:cc:1e:81:6e:04:27:4a:a5:35:82:29:08:
                    3d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:AD:D9:E4:0E:FD:42:FF:39:70:A1:E5:FD:81:D2:12:4E:85:24:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a29b143-033b-450b-b571-89599588ae5b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a29b143-033b-450b-b571-89599588ae5b/73e215104a3c613a14aa0e0950ba00c88d2f2eb0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273070

    Signature Algorithm: sha256WithRSAEncryption
         ad:04:44:2b:79:1d:58:54:e3:ee:f3:01:ea:3f:7a:c3:9a:a6:
         e3:d2:87:7b:23:34:a5:a4:44:9e:e4:f4:e0:aa:fa:ee:bf:d3:
         73:d8:94:b0:51:ed:34:e4:64:9c:f8:68:a5:33:e5:fb:31:c3:
         3d:74:17:df:aa:f7:5e:bc:1b:ea:ae:82:b8:35:cb:a6:af:24:
         99:da:90:90:2e:54:f4:a2:d4:1c:48:76:c5:20:e6:21:a3:3a:
         31:bc:48:77:1a:47:95:77:90:68:d5:6b:38:13:91:07:3e:d3:
         d8:53:6c:92:bf:a5:21:3a:01:63:fd:22:57:a9:ab:c3:35:98:
         68:25:c9:bf:9b:17:7c:9a:e1:9a:b0:07:af:da:d0:77:8e:96:
         b9:1a:6e:c1:ca:86:6a:b0:39:67:cd:75:fa:a6:98:37:54:a2:
         62:28:23:10:a1:4a:b5:63:93:31:a2:33:35:e9:fe:9d:a9:bc:
         d0:27:ea:13:85:59:db:39:46:41:83:6a:40:d4:0b:48:9f:6c:
         e7:ca:8b:b4:3d:f8:52:f1:52:ee:30:d5:0b:78:f0:b1:ba:03:
         87:a9:65:5e:50:5d:71:54:58:0f:8d:d8:35:e2:35:fc:25:54:
         ee:77:7f:c9:59:43:10:94:51:b2:ce:62:56:81:2d:e6:b2:9a:
         9c:4d:9f:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----