Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/81d73b3bdbb5e6d0f7c2ed41854ec18dddd5cc33.cer
File:                     81d73b3bdbb5e6d0f7c2ed41854ec18dddd5cc33.cer (raw, json)
Hash identifier:          0q+fbZ/zJAgjM6PVcUvB7zT0k5p0vqhEiZ7bOL4KmOk=
Subject key identifier:   7A:6F:5D:61:DB:5B:DC:A5:E5:2B:DF:41:5D:7C:06:32:48:4F:D7:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C304D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bdbbc9c9-80c6-4c6d-a15e-cedd27c91bb9/81d73b3bdbb5e6d0f7c2ed41854ec18dddd5cc33.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bdbbc9c9-80c6-4c6d-a15e-cedd27c91bb9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 22:10:38 +0000
Certificate not after:    Thu 24 Apr 2025 22:50:04 +0000
Subordinate resources:    AS: 28061

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17576013 (0x10c304d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 22:10:38 2024 GMT
            Not After : Apr 24 22:50:04 2025 GMT
        Subject: CN=81d73b3bdbb5e6d0f7c2ed41854ec18dddd5cc33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:bb:5e:bf:1e:7b:5e:13:2b:82:72:ae:af:3f:
                    41:c2:60:da:a6:09:62:13:f1:38:b8:f9:6f:f7:e3:
                    d9:82:45:d1:08:21:f7:1f:e8:8f:72:10:a6:c9:d1:
                    70:a6:42:e9:8c:bd:dd:85:ec:29:46:38:aa:e1:34:
                    83:6d:fa:23:50:6e:9b:eb:8d:f5:2a:5b:9f:23:f1:
                    dc:b8:ac:f0:c7:72:c5:42:37:88:a6:5f:e3:a5:88:
                    a9:9d:49:84:60:f2:2f:82:cd:ca:ce:45:a2:1d:38:
                    e9:8a:25:11:69:64:ac:a5:9c:dd:5f:41:4c:b9:1b:
                    d0:8a:8b:46:0a:33:86:86:f3:9e:c6:73:72:2b:f0:
                    1b:84:ec:74:fa:ce:48:07:bf:01:8a:38:02:9d:c7:
                    c6:4b:67:94:bd:72:9f:5f:af:8b:cd:ab:2e:16:21:
                    2f:7b:14:2f:90:fa:3b:63:8f:b0:73:18:81:6d:db:
                    9e:fb:43:e5:d6:63:42:c9:93:e0:f4:b1:74:04:64:
                    d0:45:0f:91:50:d8:bd:36:85:41:d9:31:31:28:87:
                    2c:e2:c0:ff:49:5b:0b:2a:c8:ae:8f:b3:3d:88:b0:
                    9e:90:07:c1:85:81:46:e9:c2:60:54:5d:f7:72:83:
                    18:e0:3d:49:3d:c9:d7:fa:d4:d8:18:7d:8b:48:ad:
                    5e:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:6F:5D:61:DB:5B:DC:A5:E5:2B:DF:41:5D:7C:06:32:48:4F:D7:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bdbbc9c9-80c6-4c6d-a15e-cedd27c91bb9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bdbbc9c9-80c6-4c6d-a15e-cedd27c91bb9/81d73b3bdbb5e6d0f7c2ed41854ec18dddd5cc33.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28061

    Signature Algorithm: sha256WithRSAEncryption
         1f:4a:b2:fe:43:c2:2b:3e:8a:c1:1d:d2:bb:8c:c7:b6:76:9f:
         1a:46:b3:17:20:c0:3f:7d:68:a4:60:56:44:92:fe:48:61:50:
         09:bf:5e:16:37:c8:4a:32:b4:09:d6:93:f0:08:56:57:9e:f4:
         b8:33:b2:d3:d2:6c:24:8f:7d:ca:ef:4a:53:ef:bd:29:0e:0d:
         9b:79:00:9a:5e:3d:7d:f9:9a:7c:79:d2:49:2d:b0:f9:42:a2:
         55:67:db:3f:57:f7:7f:e5:0b:de:05:42:29:ec:76:85:86:74:
         33:f4:69:32:df:31:3f:ca:bf:bc:76:0c:a9:e6:aa:00:83:db:
         a0:eb:08:9b:40:a7:32:39:90:c0:4c:7b:d7:fa:cc:6c:9b:94:
         60:bc:dc:d7:36:f6:55:bb:21:d4:1c:ee:93:31:22:9c:86:a5:
         a9:f7:b3:1c:49:3f:13:56:1e:c0:bf:10:a2:f4:75:6b:e9:5a:
         3b:8c:ff:e6:ec:0b:62:cf:ca:51:91:5e:5f:2b:73:29:2c:bd:
         f1:67:1f:ee:7e:4d:79:72:ab:1b:1d:6d:94:25:a4:95:b1:4c:
         b8:0b:d5:08:b4:73:e2:b1:47:a8:ca:05:c5:1d:d2:87:27:b1:
         e9:85:90:f2:32:cd:48:30:5c:ca:e4:44:af:06:06:c9:29:f6:
         29:8f:fa:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----