Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7c90e0d12b0bd6f3017c07204098823a26f270dc.cer
File:                     7c90e0d12b0bd6f3017c07204098823a26f270dc.cer (raw, json)
Hash identifier:          LMVtsccNv3P8HbFdugeXKRcJ6UxOuJ6IKpGHGTquAFM=
Subject key identifier:   C2:FE:42:D5:10:5F:6C:FD:4B:E6:D5:B7:8A:79:AA:4A:F9:C7:92:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01000807
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8d3e7398-b833-4c42-846b-d0104ff40ad0/7c90e0d12b0bd6f3017c07204098823a26f270dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8d3e7398-b833-4c42-846b-d0104ff40ad0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 02 Nov 2023 14:37:53 +0000
Certificate not after:    Sat 30 Aug 2025 22:23:15 +0000
Subordinate resources:    AS: 273118
                          IP: 2803:d850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16779271 (0x1000807)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  2 14:37:53 2023 GMT
            Not After : Aug 30 22:23:15 2025 GMT
        Subject: CN=7c90e0d12b0bd6f3017c07204098823a26f270dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:49:44:f9:55:3e:e0:ff:ae:21:5a:11:f2:ba:
                    7f:fb:8c:f3:36:c4:bc:3d:c1:98:03:60:0a:43:40:
                    6b:c4:bd:f6:a4:ed:1b:62:71:06:39:3d:0c:e8:8f:
                    bf:dd:1c:bd:fa:b4:86:b9:3e:38:bb:fc:46:78:f1:
                    93:76:c0:fa:64:f9:ef:a3:6a:81:54:15:67:c9:44:
                    c2:28:68:ef:d0:7f:09:1c:fc:05:84:b3:81:fc:70:
                    7f:b9:f2:64:3c:02:ae:f5:78:e8:fe:62:3a:c8:e5:
                    6d:5f:0c:a3:b3:2f:5c:83:0d:38:53:8b:6b:07:4f:
                    ff:41:d5:e2:2a:66:e1:00:ce:93:dd:5c:09:38:0b:
                    9b:d4:2b:33:ee:a8:fc:6c:4a:52:ed:13:ee:a5:4f:
                    30:5e:1b:97:02:4d:e8:98:44:ef:6b:92:a8:55:4d:
                    11:d8:b8:47:e4:6c:c0:3f:f3:46:f5:e3:9e:ea:1d:
                    9c:a4:2b:ec:58:f8:19:88:aa:1d:b0:27:73:0f:ca:
                    8c:e4:be:f1:d7:7c:67:a5:74:0f:04:7d:18:82:be:
                    4d:17:46:39:41:0d:bd:7c:0c:cd:f8:44:e9:08:a9:
                    ca:e2:1e:59:c4:03:28:e0:c8:3e:d1:19:0f:ac:b8:
                    e1:47:26:22:79:ed:73:c2:3c:c5:99:8f:28:15:18:
                    d4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:FE:42:D5:10:5F:6C:FD:4B:E6:D5:B7:8A:79:AA:4A:F9:C7:92:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8d3e7398-b833-4c42-846b-d0104ff40ad0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8d3e7398-b833-4c42-846b-d0104ff40ad0/7c90e0d12b0bd6f3017c07204098823a26f270dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273118

    Signature Algorithm: sha256WithRSAEncryption
         9b:a1:2b:59:2f:fb:e4:51:cd:6b:40:63:c7:c7:45:b2:30:9f:
         f4:eb:2a:19:e5:b2:6e:ec:98:d7:de:65:6d:c0:37:23:27:2c:
         af:ba:7f:eb:e5:3c:71:17:bc:a8:82:f6:97:69:27:fa:58:37:
         12:8f:62:9f:27:c4:94:90:be:22:6e:3b:d6:9b:1d:52:b2:81:
         91:ad:7a:39:22:6c:e5:de:95:14:40:10:9f:1a:d9:96:4f:07:
         2c:d5:b2:ba:8a:9c:9c:04:46:6a:65:a0:2d:22:7f:33:c4:62:
         67:33:dc:07:2a:bd:39:bc:d1:b2:6a:d0:32:9f:60:7e:19:ce:
         d7:ec:ef:1c:61:44:94:cf:bc:a0:79:b0:39:e6:28:12:22:ef:
         58:1c:5c:fd:3d:a6:f8:36:ff:b1:92:59:e8:a4:af:a2:80:76:
         94:51:ff:98:e2:9b:f4:b7:65:16:1f:77:56:4d:a6:25:56:2b:
         13:77:e7:e5:24:34:91:df:f5:0a:1d:2f:d4:e8:0c:d4:bd:3f:
         85:c7:5c:de:a4:6e:1c:4c:1e:e2:f2:22:a2:43:c1:15:79:0a:
         78:87:bf:a3:a5:16:cb:ec:51:e0:b7:a3:38:5a:1e:2a:cb:98:
         f3:9b:a0:3e:fa:ee:79:15:bb:9b:91:8b:d8:bd:b5:ff:b7:0d:
         14:00:53:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----