Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/819a87709317e0fd61d9e8a45b5b444288c4675d.cer
File:                     819a87709317e0fd61d9e8a45b5b444288c4675d.cer (raw, json)
Hash identifier:          UAQwW60QT8wHHePSQ1YVlIJpS41nRhfL72hp/5q8gK8=
Subject key identifier:   67:F6:BB:85:CD:DC:3B:DF:D7:F0:88:C3:37:48:3E:F6:19:97:42:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103D4E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6e8a0d81-563e-440f-8d8a-e79bed129000/819a87709317e0fd61d9e8a45b5b444288c4675d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6e8a0d81-563e-440f-8d8a-e79bed129000/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Dec 2023 17:47:08 +0000
Certificate not after:    Mon 25 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 273148
                          IP: 2803:9c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17028321 (0x103d4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 13 17:47:08 2023 GMT
            Not After : Aug 25 06:00:00 2025 GMT
        Subject: CN=819a87709317e0fd61d9e8a45b5b444288c4675d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:03:90:57:85:74:57:51:e2:ac:81:bc:b5:ac:
                    07:e8:8e:a0:b3:7a:8d:70:f6:f0:33:b3:31:96:1c:
                    3f:9c:19:bb:68:d0:31:f7:f8:c0:09:c1:c0:9f:3a:
                    28:b0:42:89:a0:b5:07:bb:fb:e6:d8:33:75:c8:f0:
                    b2:ba:42:81:56:45:b4:89:cb:d7:20:d2:da:6d:74:
                    66:6c:d5:05:f4:ec:36:1a:5d:14:7b:61:45:9e:ce:
                    18:c6:5b:f1:61:2b:03:c9:f5:02:72:1b:47:b9:5d:
                    7d:62:0f:03:e3:4e:5a:b1:7f:c4:9d:d9:cd:8c:12:
                    0f:91:2e:24:c0:71:31:b5:ab:47:b6:ee:76:1a:2e:
                    1e:ca:d3:65:24:23:fc:84:51:d4:ca:75:f2:3c:0f:
                    04:6a:3f:64:2c:b2:52:14:b2:17:55:03:12:00:3d:
                    1d:a1:0e:23:66:da:a9:01:fd:31:8f:56:ba:50:cb:
                    22:10:8f:2e:3a:40:97:74:e2:9c:60:d5:ac:df:84:
                    1b:ff:42:af:52:a9:72:62:2f:89:ab:03:a5:e5:7f:
                    78:1d:42:76:14:39:bd:6e:f3:19:19:f4:af:0f:3e:
                    05:5c:35:9e:6f:2f:d1:ed:86:dc:b5:df:fa:a5:44:
                    78:31:f8:fa:c1:e1:d8:44:8f:04:c4:b0:6b:7a:ce:
                    15:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F6:BB:85:CD:DC:3B:DF:D7:F0:88:C3:37:48:3E:F6:19:97:42:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6e8a0d81-563e-440f-8d8a-e79bed129000/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6e8a0d81-563e-440f-8d8a-e79bed129000/819a87709317e0fd61d9e8a45b5b444288c4675d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273148

    Signature Algorithm: sha256WithRSAEncryption
         79:28:93:05:ae:ab:b9:98:c5:14:30:f8:82:ee:12:90:10:c5:
         c9:22:7c:24:1f:24:54:ca:f7:56:1b:d5:ff:8e:46:4f:97:ee:
         fb:ec:1d:91:12:9f:1c:61:df:40:d8:37:88:b9:8a:3f:1d:08:
         08:e0:44:d1:bc:7f:94:c3:09:7e:ac:43:f3:9a:8b:c1:fa:df:
         4c:35:da:54:0c:d2:34:73:e3:c5:45:c9:17:a5:b3:dc:89:d4:
         62:24:db:f4:74:36:7e:c4:f1:f9:9a:1d:25:72:d2:a2:39:ea:
         c0:4c:ed:ef:7f:65:a2:d1:04:cc:ca:53:ce:f1:67:11:b5:97:
         ed:24:61:f0:12:66:68:c4:aa:d2:9e:35:f7:bd:f9:8a:62:da:
         52:8f:a3:26:15:be:34:34:be:06:96:6b:a0:d9:2b:66:70:20:
         db:db:21:f5:31:49:82:a4:c5:a4:66:93:41:12:f8:5f:a6:75:
         92:b9:a8:f4:1b:76:15:cd:d3:30:7b:e1:83:57:dd:94:60:f7:
         f4:55:f7:bf:73:b5:50:2d:45:59:2e:c9:b5:74:f3:80:84:d1:
         46:69:a7:f6:1c:2c:72:24:af:72:c1:1a:a1:b7:30:91:01:f2:
         0c:77:38:09:ba:1a:84:6a:f2:6c:5f:a1:b1:51:67:91:b8:1a:
         6a:76:ac:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----