Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7b6f9d1c25d428d1f5230553b96774229a1f8e4a.cer
File:                     7b6f9d1c25d428d1f5230553b96774229a1f8e4a.cer (raw, json)
Hash identifier:          aOx/ZgJA3USAaTO9MDuZDj3xKXSTUJmUCBZs28rzJ5U=
Subject key identifier:   8B:E1:E4:A3:6A:65:41:7C:8E:CE:60:EF:51:71:AA:AB:32:E8:01:96
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E68961
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/01fbc190-0324-4396-90be-96e88f5ac197/7b6f9d1c25d428d1f5230553b96774229a1f8e4a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/01fbc190-0324-4396-90be-96e88f5ac197/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 14:52:19 +0000
Certificate not after:    Sat 09 Mar 2024 17:33:07 +0000
Subordinate resources:    AS: 272138
                          IP: 2803:e090::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15108449 (0xe68961)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 14:52:19 2023 GMT
            Not After : Mar  9 17:33:07 2024 GMT
        Subject: CN=7b6f9d1c25d428d1f5230553b96774229a1f8e4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:83:95:55:d9:1c:cf:bb:32:0a:4a:0d:f4:35:
                    66:90:a3:f4:01:a9:f0:a3:17:72:15:27:76:7f:1c:
                    36:8f:3d:6b:65:fa:8b:b1:24:02:cb:9d:f8:97:f0:
                    44:53:af:fc:f7:81:c6:f8:69:76:d1:8f:74:7f:b6:
                    d0:40:6d:2e:13:82:1d:bd:a8:4f:3d:87:71:31:f0:
                    e0:a8:7c:8e:5a:b7:aa:45:77:46:f8:f6:d4:e0:67:
                    5e:71:73:35:12:83:6b:bc:27:a5:1c:3f:9f:28:e6:
                    db:69:a0:ca:df:82:a5:56:1e:28:0f:60:2d:ea:03:
                    52:cf:86:e4:32:e5:3b:e9:ee:c1:31:d9:5d:8f:ee:
                    17:19:64:42:de:35:52:4a:04:c7:74:ac:96:d4:45:
                    ea:cd:92:57:dd:de:60:9f:34:a1:81:64:c3:dc:5f:
                    d7:e8:dc:37:44:3e:6c:50:0a:89:53:66:14:76:0b:
                    85:8e:83:fc:e4:7a:be:b1:91:aa:40:7a:d4:90:e3:
                    a1:ec:64:19:dd:3a:d9:43:8f:ce:14:5a:4a:b9:91:
                    da:d9:5d:f2:a4:85:2c:61:d0:3d:c8:4f:14:a0:7a:
                    74:df:41:14:3f:41:09:28:bc:7e:a4:8d:82:3c:ba:
                    9b:ec:9a:02:9b:f6:a7:00:59:56:d9:29:67:22:e8:
                    3a:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:E4:A3:6A:65:41:7C:8E:CE:60:EF:51:71:AA:AB:32:E8:01:96
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/01fbc190-0324-4396-90be-96e88f5ac197/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/01fbc190-0324-4396-90be-96e88f5ac197/7b6f9d1c25d428d1f5230553b96774229a1f8e4a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e090::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272138

    Signature Algorithm: sha256WithRSAEncryption
         5d:83:7e:00:bc:d6:17:91:4b:d6:70:55:6a:5c:7d:b6:52:1c:
         e0:a1:96:0c:0e:9f:d9:21:b6:70:de:27:68:c1:04:bf:6a:7f:
         db:31:70:c2:da:88:b3:59:21:c0:54:b5:16:48:67:b4:4b:a4:
         39:4d:2a:60:f3:70:63:2e:9e:66:3a:ac:fc:dd:ef:53:fc:56:
         c5:e3:7c:bc:f8:44:16:d6:ae:cf:5a:d2:ef:e6:05:3d:7c:4b:
         60:05:e0:f2:41:29:c9:06:a8:c4:7a:77:3d:cd:c4:49:3b:d8:
         42:6d:b8:b9:5c:7c:f2:7a:49:d6:c6:76:38:62:49:78:88:83:
         b8:1f:a8:00:70:7e:fa:f9:52:05:c2:f0:c8:fa:1c:7f:1a:55:
         87:01:ca:44:c1:83:c4:72:d5:52:94:87:dd:4d:57:8b:dc:8b:
         d6:13:8e:43:6e:86:d4:e8:00:57:e6:5d:4e:69:f3:ff:66:83:
         e2:f1:96:8c:d4:6d:17:9f:c7:71:1c:e9:46:02:6f:1d:44:92:
         4e:54:95:f5:38:49:a3:85:38:eb:75:e2:48:2a:aa:0a:43:70:
         b9:b5:cb:88:06:58:3f:b1:22:d5:f4:5c:c0:8b:7a:b6:c2:1c:
         06:9b:67:5a:5c:fc:b2:95:03:cc:bc:29:2d:8e:ab:df:7a:2f:
         03:e9:df:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----