Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86a3a8424a4a4377daba5d2b4523aad38b11b1b6.cer
File:                     86a3a8424a4a4377daba5d2b4523aad38b11b1b6.cer (raw, json)
Hash identifier:          W8cwgZz4uqVgQBQ7fU57QpVcHkKmuG96qZqLwUW8log=
Subject key identifier:   B6:8B:18:19:EB:A6:45:09:A0:22:4D:90:3D:E1:4D:E9:CB:CF:BB:64
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01101784
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7d1f1273-7f70-488f-8496-74c907c3ebcd/86a3a8424a4a4377daba5d2b4523aad38b11b1b6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7d1f1273-7f70-488f-8496-74c907c3ebcd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 15:47:11 +0000
Certificate not after:    Mon 02 Feb 2026 20:51:34 +0000
Subordinate resources:    AS: 273205
                          IP: 2803:9650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17831812 (0x1101784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 15:47:11 2024 GMT
            Not After : Feb  2 20:51:34 2026 GMT
        Subject: CN=86a3a8424a4a4377daba5d2b4523aad38b11b1b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ac:f1:93:f9:42:1b:af:9d:67:b9:12:c1:cf:
                    0e:09:1e:35:f4:3e:6c:2a:ea:1d:3c:8d:6d:84:77:
                    12:74:72:ee:de:95:3f:5e:74:d8:03:95:6c:01:f5:
                    13:d4:3f:99:0f:f8:f2:7d:08:e9:9e:35:9f:67:7d:
                    27:6a:34:03:f6:3a:6c:1a:b8:f7:fe:55:83:05:cc:
                    a1:38:c9:84:6f:af:bf:a6:a4:64:1a:48:0f:e4:bf:
                    05:e0:0c:f8:92:e7:e3:7e:f0:eb:3f:46:b0:6e:43:
                    8e:81:32:d8:35:f3:05:d8:f1:11:69:21:f0:22:1e:
                    55:e4:ea:13:a1:33:b0:ee:74:bd:bf:86:3e:6c:78:
                    0d:24:36:db:85:b0:b7:99:e0:fb:18:3c:e4:f5:f5:
                    38:9f:c4:22:ee:bd:9f:db:8a:7f:ce:8b:8c:c3:e1:
                    5a:db:7c:90:8a:9f:48:46:ef:9c:60:53:20:3a:5a:
                    64:07:dc:c9:62:19:15:9a:ac:28:12:4d:5f:f1:ec:
                    af:fe:7f:02:3b:86:49:2e:1c:01:eb:bc:e0:c4:da:
                    ae:5d:1d:cc:85:c8:c4:04:95:a5:89:9d:53:f3:09:
                    cd:4e:01:d1:f6:7b:9c:44:b0:b0:78:dd:a0:27:99:
                    fb:5b:5f:45:2c:fc:81:de:52:73:9e:97:fd:eb:21:
                    e4:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8B:18:19:EB:A6:45:09:A0:22:4D:90:3D:E1:4D:E9:CB:CF:BB:64
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7d1f1273-7f70-488f-8496-74c907c3ebcd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7d1f1273-7f70-488f-8496-74c907c3ebcd/86a3a8424a4a4377daba5d2b4523aad38b11b1b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273205

    Signature Algorithm: sha256WithRSAEncryption
         17:b2:18:62:41:ca:dd:3d:4a:65:78:c8:e9:f8:16:f4:eb:97:
         24:60:0b:a4:ff:2d:10:7b:8b:ec:95:ac:70:7d:5c:29:88:9f:
         1a:0d:65:1d:02:3b:7d:d9:da:df:65:be:d6:53:b8:34:24:1d:
         4f:98:fd:50:95:65:f3:61:e8:20:77:f4:32:a8:f4:9f:d7:a6:
         63:a2:04:35:56:1e:d5:83:75:ad:ac:80:92:08:a2:7c:4d:07:
         80:7b:01:e9:d8:57:81:8a:e7:d8:a9:38:cd:f3:21:9f:a5:18:
         d2:9b:ea:10:31:18:40:96:51:53:47:fe:f6:7b:fb:8a:a9:09:
         31:fb:5e:f8:09:a4:77:7e:fd:de:48:d2:49:a0:21:07:78:cd:
         c8:94:5c:c9:6e:d5:ad:45:39:a4:80:92:09:2e:2d:7c:9e:41:
         eb:19:7e:5b:c0:8c:c4:31:eb:23:44:ef:ca:ed:29:fd:a0:b7:
         a4:c1:62:3c:de:10:d9:a1:b7:4e:bd:41:69:e5:a1:a8:c1:c0:
         62:e0:3b:a7:2a:3d:bd:4b:f6:97:71:13:3d:c3:a5:88:97:3d:
         d8:d4:4c:1d:33:af:ef:3f:49:d0:fb:53:43:70:86:db:8c:d5:
         47:ee:0f:93:46:24:a4:e5:df:8f:ef:8f:e5:d3:96:dd:2f:1e:
         b3:7a:ce:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----