Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/880cf362a16141fe71607d82913b2118a33555bc.cer
File:                     880cf362a16141fe71607d82913b2118a33555bc.cer (raw, json)
Hash identifier:          Ig3PxmhrR3jFGpN2g2UPhtfEt60Z2ZkQaPN+PBdKSN0=
Subject key identifier:   CB:8E:3E:BE:3D:CB:38:6C:0E:7D:B1:D2:A1:DC:FC:A3:A5:B0:C5:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFE6C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/00b2c20c-800d-4af7-ac5b-d9cad00c974f/880cf362a16141fe71607d82913b2118a33555bc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/00b2c20c-800d-4af7-ac5b-d9cad00c974f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 14:30:25 +0000
Certificate not after:    Sat 14 Jun 2025 22:27:45 +0000
Subordinate resources:    AS: 273057
                          IP: 2803:4790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16770756 (0xffe6c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  1 14:30:25 2023 GMT
            Not After : Jun 14 22:27:45 2025 GMT
        Subject: CN=880cf362a16141fe71607d82913b2118a33555bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:45:78:d9:f9:cf:79:7d:7d:56:93:c7:bb:ce:
                    c7:a9:e8:f6:bc:18:3c:80:fa:92:ec:a2:f2:de:bb:
                    30:91:2c:37:bf:a1:67:32:2e:5e:15:b4:ad:db:5d:
                    65:26:f5:72:11:34:1a:95:6d:b7:bd:e6:29:ba:cd:
                    21:b8:71:23:26:0e:b7:da:7a:5a:92:2e:b5:bd:fe:
                    eb:85:d5:9e:ee:bb:5a:68:18:d4:5e:00:24:97:7c:
                    b2:fe:85:e9:51:bc:e6:05:e1:f1:22:16:9b:af:78:
                    f9:21:2f:ec:7a:9e:7d:c3:ad:f2:f0:4f:38:93:c0:
                    15:f2:b7:c9:58:49:5a:73:51:65:f3:15:e5:f1:05:
                    d9:40:28:6b:66:53:b0:c9:b1:b4:f7:c0:24:77:11:
                    c4:85:80:4d:57:46:ae:51:5b:2c:e8:d8:87:b1:fa:
                    fb:14:95:e6:25:91:2e:6d:84:17:3f:72:82:13:af:
                    33:d5:f5:29:44:ef:98:56:66:ff:75:71:47:db:56:
                    1d:9f:1b:40:ca:be:0e:3b:e0:d5:2f:57:2a:bd:ae:
                    f8:3b:ed:4f:78:a6:ad:9c:9a:fd:cf:b3:cf:25:9a:
                    b1:10:87:75:b7:ef:44:9e:26:39:6f:0d:a5:10:84:
                    f5:f0:7f:cd:44:af:e0:68:5b:91:8a:ee:59:02:4d:
                    a8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:8E:3E:BE:3D:CB:38:6C:0E:7D:B1:D2:A1:DC:FC:A3:A5:B0:C5:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/00b2c20c-800d-4af7-ac5b-d9cad00c974f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/00b2c20c-800d-4af7-ac5b-d9cad00c974f/880cf362a16141fe71607d82913b2118a33555bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273057

    Signature Algorithm: sha256WithRSAEncryption
         1f:89:68:7c:1f:e7:c3:a4:6b:bc:db:a5:9b:92:11:0f:81:13:
         bb:89:4f:f4:54:75:8d:a7:de:fa:67:66:81:fb:b6:e2:72:3e:
         9b:7a:26:9e:a7:8e:c3:6c:f7:fa:5e:65:c6:c0:5c:41:a6:9c:
         da:63:e5:d4:03:40:63:48:81:8d:90:76:2d:63:98:69:2a:48:
         24:55:49:b3:1c:83:9a:1b:07:4d:92:57:05:61:07:f2:32:90:
         8e:97:3d:8b:17:6a:cd:c3:07:e8:f7:0c:36:97:0b:5a:b8:b1:
         46:70:2b:a5:f0:4d:28:fc:05:46:8f:2a:37:e1:4c:2c:ae:d7:
         6f:ab:05:69:2a:df:93:5a:81:b1:19:be:6b:2a:95:77:8a:fa:
         fb:9c:1e:13:b1:05:d1:1f:ef:8f:c5:e2:24:56:53:11:87:0e:
         5d:f7:ba:18:30:33:6b:25:8b:d2:90:8f:8c:86:cd:c8:25:ef:
         46:39:fa:d1:0d:a9:d0:4d:64:b3:39:c4:96:6a:45:d1:b6:33:
         3e:b2:e7:0f:a8:4b:fb:da:bb:44:13:50:4f:7c:01:75:2a:a7:
         db:8f:9e:0c:4b:aa:f2:fe:ee:47:d6:4e:df:03:23:92:5e:5a:
         9b:62:eb:70:fb:86:7a:40:e1:be:17:88:02:84:da:f0:50:6e:
         d0:d6:df:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----