Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/768d3f90fddd18cca90c45a0e35a0f1d95e50766.cer
File:                     768d3f90fddd18cca90c45a0e35a0f1d95e50766.cer (raw, json)
Hash identifier:          goM0Yx5muwrfBz5oNedp7QZa8v+eiKyqRlwZnUg6QOU=
Subject key identifier:   52:25:CF:6E:70:AE:7D:37:71:DA:15:52:DF:6B:2E:A3:B1:53:EE:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4E3F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/768d3f90fddd18cca90c45a0e35a0f1d95e50766.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 12 Aug 2023 16:49:41 +0000
Certificate not after:    Wed 14 Aug 2024 22:00:46 +0000
Subordinate resources:    AS: 272886
                          IP: 2803:7a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16049144 (0xf4e3f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 12 16:49:41 2023 GMT
            Not After : Aug 14 22:00:46 2024 GMT
        Subject: CN=768d3f90fddd18cca90c45a0e35a0f1d95e50766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cd:24:92:e1:63:c6:29:e8:fd:f4:59:26:7b:
                    77:2b:81:1d:bc:e8:57:93:d8:e3:f8:aa:1b:df:53:
                    b3:23:63:bb:d8:af:ab:03:16:2a:89:a7:c4:f3:31:
                    f2:9d:1a:de:79:a3:52:af:d0:4f:b8:0b:e8:da:ee:
                    86:29:ce:08:ed:d2:f5:70:fd:7e:b4:27:08:76:a9:
                    9b:8c:4e:33:83:5d:d5:af:66:77:60:ef:ed:e5:88:
                    4c:98:11:59:f6:ab:3c:a3:55:6c:85:3d:8e:21:3c:
                    a7:ed:44:34:52:0d:40:6d:4b:a6:4e:3e:07:79:5d:
                    43:e4:34:07:45:d5:d8:12:ae:b1:40:b1:61:64:ae:
                    13:6c:86:23:e8:26:ad:74:44:7d:04:d8:3b:27:1c:
                    09:28:22:18:15:00:ae:c3:21:ab:29:42:8e:fe:cf:
                    e3:0e:71:b2:a1:64:45:d0:a1:c0:94:c3:b0:37:15:
                    c4:29:6c:c8:6d:31:9b:93:cb:c3:d8:6e:16:04:4b:
                    5f:9d:8d:0f:44:9c:21:bd:68:6c:7c:13:22:60:e1:
                    69:74:40:dc:44:d7:95:b5:e4:82:4f:fa:82:2b:05:
                    c1:13:79:05:6a:9f:15:04:e3:1a:1a:a0:20:9a:ee:
                    2c:d6:9f:ef:b3:37:6f:3f:94:e9:37:a6:4e:f4:5e:
                    14:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:25:CF:6E:70:AE:7D:37:71:DA:15:52:DF:6B:2E:A3:B1:53:EE:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dc4e8873-c82b-420c-934c-156137893e40/768d3f90fddd18cca90c45a0e35a0f1d95e50766.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272886

    Signature Algorithm: sha256WithRSAEncryption
         03:7f:b7:2f:c1:9a:74:0c:82:d9:b3:06:c4:2d:e2:e8:58:04:
         cc:7d:ad:b1:14:f1:fb:53:6b:fd:a2:9f:f9:2f:29:3a:11:a4:
         6d:b5:2f:57:ba:3c:49:43:fa:39:0b:65:9c:29:78:88:09:25:
         d5:80:59:b4:6c:ce:9c:7c:1c:79:0c:6b:2a:8f:1b:55:a7:59:
         f5:35:7e:bd:7d:ee:10:94:1f:71:69:a8:dd:c9:fe:1f:77:35:
         80:8d:68:c7:fa:26:e0:07:a8:d8:8e:1b:c8:94:b7:de:05:83:
         70:e9:6f:5c:d2:d8:cd:c7:20:4c:92:3a:b0:44:7a:d1:9f:d6:
         ee:2e:54:cd:a0:a1:7e:0b:07:37:1f:c0:4a:80:54:d6:9a:d0:
         05:d6:34:4c:34:e8:48:2d:5f:ef:04:8e:3c:d8:46:cf:86:2c:
         0d:49:cb:00:9d:ae:3c:49:36:52:57:d1:f9:74:87:20:41:c9:
         46:42:4f:68:4e:25:e6:8f:03:24:71:b5:6d:86:a0:3a:93:eb:
         56:12:a9:a0:48:9d:d5:00:64:7c:71:02:81:4c:7e:21:6b:5b:
         bd:1f:0c:65:8e:d4:1c:af:74:25:8c:15:e0:81:5d:f0:37:51:
         23:c6:79:87:ab:10:8a:c9:3b:71:19:13:94:50:02:9e:65:b5:
         e8:94:79:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----