Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a980fa6bb003a71d0e7be0cdfb1ef5fb2bd2c78.cer
File:                     7a980fa6bb003a71d0e7be0cdfb1ef5fb2bd2c78.cer (raw, json)
Hash identifier:          jVolF4Iu7SGm0wEG42YSRX733TnncvkDTPg90+Sp2ko=
Subject key identifier:   C2:E1:E2:93:AC:F0:12:1A:4C:C5:D9:1E:74:6F:5A:AC:1C:CF:8C:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108FA35
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b8b6e70e-1600-4e66-970d-ef0ec1f0c8f1/7a980fa6bb003a71d0e7be0cdfb1ef5fb2bd2c78.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b8b6e70e-1600-4e66-970d-ef0ec1f0c8f1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 Jan 2024 18:39:17 +0000
Certificate not after:    Mon 13 Oct 2025 06:00:00 +0000
Subordinate resources:    AS: 273180
                          IP: 2803:2a50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17365557 (0x108fa35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 31 18:39:17 2024 GMT
            Not After : Oct 13 06:00:00 2025 GMT
        Subject: CN=7a980fa6bb003a71d0e7be0cdfb1ef5fb2bd2c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:80:1f:79:bc:f9:0a:5b:16:a4:d3:c7:53:0f:
                    b8:29:6e:64:7b:03:fb:01:d8:18:6e:e0:7d:25:ec:
                    e7:1f:45:9a:a7:ee:a1:9f:38:b2:e5:c4:4f:83:32:
                    ab:60:9f:e1:2d:4a:31:d8:ee:fb:3c:42:1f:61:24:
                    b9:d8:35:11:a4:73:ad:21:b4:8e:ed:7b:93:a1:b8:
                    19:90:b5:09:f8:90:35:96:57:c6:25:ff:53:3d:a4:
                    37:ea:7f:cf:36:1a:e3:70:ad:5e:45:6a:9e:91:2d:
                    b8:23:70:ff:64:6f:07:c4:06:11:9e:2c:76:12:a3:
                    60:fc:1f:83:0f:7b:2b:00:a6:19:03:3f:9d:ee:d2:
                    d1:11:31:df:af:a9:88:2d:39:40:68:93:d6:74:49:
                    e1:21:09:d5:e0:be:9e:5e:df:08:bc:0e:4c:68:de:
                    52:64:23:ee:63:14:07:ba:8f:c1:0e:0c:4f:57:28:
                    6d:70:ba:ff:f1:3f:2c:60:c7:d4:1e:b9:62:59:2e:
                    c4:33:92:fb:55:dc:f8:15:1f:1e:b3:aa:09:60:e2:
                    8c:92:0f:ef:9e:6f:b6:a4:6b:1c:7f:ad:9c:09:f5:
                    0c:c5:f7:8b:e5:18:bc:59:81:71:57:84:3d:f1:16:
                    ee:81:1a:2e:6d:ce:3a:7c:69:3c:b3:ab:91:58:00:
                    ca:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E1:E2:93:AC:F0:12:1A:4C:C5:D9:1E:74:6F:5A:AC:1C:CF:8C:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b8b6e70e-1600-4e66-970d-ef0ec1f0c8f1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b8b6e70e-1600-4e66-970d-ef0ec1f0c8f1/7a980fa6bb003a71d0e7be0cdfb1ef5fb2bd2c78.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273180

    Signature Algorithm: sha256WithRSAEncryption
         70:4c:49:48:7f:1b:7a:ad:01:93:83:9e:f9:51:d2:ea:e7:96:
         ae:ba:96:a9:e1:54:21:32:a7:ef:6c:90:8c:ea:5f:8a:88:60:
         1b:8a:65:f1:55:5a:3a:16:01:92:5d:0f:5e:ba:f0:79:30:da:
         d3:e7:8c:a3:30:64:be:8f:7d:82:7d:ce:38:90:78:e5:c7:05:
         1f:5b:46:41:c3:3d:43:33:37:7b:7c:33:f4:b7:d8:03:55:a1:
         a9:e0:65:ea:38:66:c8:a0:30:e8:0a:d8:d3:ce:a5:be:9b:15:
         b0:cd:05:7a:62:6a:41:96:54:62:c3:9d:85:e4:5c:ba:e0:03:
         f1:67:c7:0a:db:69:16:0d:0c:50:24:2d:c1:9f:b6:84:5a:9c:
         e0:cf:ba:bd:44:4e:cc:84:39:90:99:07:1b:04:1c:fc:56:43:
         06:ca:b2:2a:42:c7:48:d4:0a:ae:e7:09:6d:3f:f0:be:8d:56:
         cf:4f:9b:2c:27:6c:00:44:34:41:e0:a2:e7:67:6f:f7:3a:94:
         1a:73:9d:9a:4e:d6:75:fe:13:ab:67:c9:11:0d:26:ed:81:0d:
         d5:99:75:13:0d:2f:5d:14:7f:d4:be:d9:b7:20:34:d4:17:5b:
         c8:f2:1a:80:3d:c0:9f:1e:28:29:a2:00:69:58:1f:79:cf:5d:
         00:32:53:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----