Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/866b5fc05d266642cd2ee1a1a1cc74fcbba94336.cer
File:                     866b5fc05d266642cd2ee1a1a1cc74fcbba94336.cer (raw, json)
Hash identifier:          bRPLh6f6iCiVxviVd3Ep4pNeUn4rF3Rn9gDawOAloT4=
Subject key identifier:   2B:25:83:71:31:C8:5E:B5:3F:D9:5B:FF:42:2E:E6:35:DC:00:D9:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DBC57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e2594e49-37ef-4631-a4d9-4dcc595a9c10/866b5fc05d266642cd2ee1a1a1cc74fcbba94336.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e2594e49-37ef-4631-a4d9-4dcc595a9c10/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 15:25:01 +0000
Certificate not after:    Mon 08 Sep 2025 21:13:03 +0000
Subordinate resources:    AS: 3548
                          AS: 272311
                          IP: 2801:c4:260::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17677399 (0x10dbc57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 12 15:25:01 2024 GMT
            Not After : Sep  8 21:13:03 2025 GMT
        Subject: CN=866b5fc05d266642cd2ee1a1a1cc74fcbba94336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e6:c9:f6:b9:91:92:f3:9d:70:43:b2:de:cc:
                    b0:6b:69:10:43:74:af:07:7e:52:88:14:33:d3:7f:
                    11:b4:69:3a:b2:af:5a:fd:2a:69:12:08:35:75:65:
                    5d:e0:a3:0a:ec:eb:ab:6e:88:90:19:8c:b4:28:36:
                    a3:cd:50:8b:3a:c0:8c:54:d2:24:f1:26:3e:dc:4d:
                    e9:ae:c8:5a:c4:63:91:26:d5:63:24:6b:6e:71:f0:
                    1d:25:a8:7e:44:cc:6d:ae:43:5d:cd:4a:7a:45:d9:
                    be:28:7d:6c:9e:fe:2c:9b:f6:65:03:90:b5:f4:22:
                    eb:43:75:f8:c3:43:5a:ef:e9:6d:69:e3:6e:4a:0b:
                    9d:55:73:8a:fb:4a:ec:25:88:6e:bf:b3:c1:27:49:
                    77:59:db:12:b1:34:57:ff:37:2c:1a:a5:65:b8:7e:
                    79:a6:01:a3:f6:fb:7c:a0:70:d7:22:c3:fc:d8:8e:
                    e0:b6:8e:5a:23:d3:68:f2:7e:5d:de:a8:d6:ed:0e:
                    38:bb:2c:68:a6:99:3d:08:ca:6b:a0:6e:d4:99:f7:
                    5a:1b:0b:72:b4:d4:03:38:c6:06:b1:c5:cc:20:13:
                    94:27:89:11:70:84:a7:b9:46:e4:4d:4b:dc:c2:17:
                    ba:af:65:5b:9a:e3:ab:13:6c:56:dd:b6:bf:bd:43:
                    3e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:25:83:71:31:C8:5E:B5:3F:D9:5B:FF:42:2E:E6:35:DC:00:D9:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e2594e49-37ef-4631-a4d9-4dcc595a9c10/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e2594e49-37ef-4631-a4d9-4dcc595a9c10/866b5fc05d266642cd2ee1a1a1cc74fcbba94336.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:260::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3548
                  272311

    Signature Algorithm: sha256WithRSAEncryption
         1c:04:88:ad:aa:a9:88:89:fa:0b:47:5e:fb:c3:36:5d:44:0f:
         84:6f:67:0b:d9:0b:f4:90:60:cb:5f:2e:77:f3:d7:96:ec:de:
         bb:14:81:9f:f0:67:29:59:5b:ce:b8:b6:f2:39:99:55:1b:fb:
         4e:9e:ea:96:1b:94:13:f8:bb:35:ef:f9:49:b6:8b:5f:62:1f:
         88:01:3f:1b:8b:dd:e0:15:71:84:6d:9a:e3:dc:e7:c1:ce:9e:
         a4:69:e6:6f:93:df:b8:36:b7:ef:aa:3d:3b:b6:a2:ee:dc:c8:
         1e:31:6c:bb:f3:d0:48:1f:69:ad:49:3e:cf:64:b6:59:3e:c6:
         8e:0c:05:7c:f4:40:4a:76:02:3e:bf:ac:85:9a:c8:63:f2:c1:
         01:e6:ed:21:ae:fb:42:34:86:48:1a:14:7c:11:0e:42:60:eb:
         b1:47:04:47:55:6b:fd:e2:6d:c5:07:13:d4:17:19:e9:d9:46:
         f8:e4:70:97:50:5f:af:31:7d:1f:ec:46:3e:dd:93:80:97:66:
         d6:c7:f1:bc:1b:1d:86:17:62:4b:73:00:4c:35:99:5f:be:4c:
         82:a2:b6:0b:67:8d:5a:3c:8a:70:e7:88:d3:41:14:8a:48:6e:
         eb:de:c4:59:f7:70:23:5c:80:0d:5e:29:88:8b:68:74:32:e5:
         ca:0d:ca:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----