Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9a749b6275709f37ce6c580d255a5e2c1efff5.cer
File:                     8c9a749b6275709f37ce6c580d255a5e2c1efff5.cer (raw, json)
Hash identifier:          FlKUngBctMfgyUxSenjwhvhsj4dOORoHN7g5cmoa23o=
Subject key identifier:   D6:13:E6:72:53:AA:4F:81:5B:EA:5E:0B:E9:99:6A:B7:54:60:DF:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01084FE6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f6336523-e68e-4415-9ef1-52331da16bbe/8c9a749b6275709f37ce6c580d255a5e2c1efff5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f6336523-e68e-4415-9ef1-52331da16bbe/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Jan 2024 15:16:10 +0000
Certificate not after:    Mon 24 Nov 2025 17:46:37 +0000
Subordinate resources:    AS: 273174
                          IP: 2803:a50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17321958 (0x1084fe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 25 15:16:10 2024 GMT
            Not After : Nov 24 17:46:37 2025 GMT
        Subject: CN=8c9a749b6275709f37ce6c580d255a5e2c1efff5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:17:c0:04:9a:a2:ba:6b:fb:5f:79:ed:4d:22:
                    64:81:04:6a:c7:82:2d:25:f9:0c:63:41:62:47:73:
                    d9:ad:ed:89:1c:88:62:79:ba:bc:5e:5d:7c:08:c0:
                    30:2d:e1:2a:df:e4:4e:c1:1b:ad:e1:ef:8b:b4:d4:
                    11:1b:21:74:02:eb:76:63:1a:24:fc:bf:f7:0c:ce:
                    86:ed:03:b6:14:75:8a:e7:3f:8d:d7:94:ca:af:fb:
                    e7:24:0c:aa:28:fc:ab:3f:d6:b8:83:fb:4f:a8:44:
                    24:21:98:30:01:31:08:2a:7e:8c:d8:3f:29:fd:de:
                    da:89:a0:bb:5b:4e:3b:9b:e0:9e:f9:21:7d:99:e3:
                    8a:a7:64:10:90:49:84:af:6e:55:0d:e3:f9:7f:17:
                    6b:c2:a9:ad:d1:c6:00:1f:54:7b:93:33:36:ac:9e:
                    4b:88:02:cf:f0:37:2a:16:47:b3:9a:8a:ff:f9:4b:
                    e6:ba:0d:be:6e:34:a3:40:ce:6f:d7:8d:72:c6:a3:
                    a3:a7:94:98:14:bd:3f:13:20:18:0b:20:b2:38:a9:
                    4c:b3:c5:fc:05:48:10:5d:98:d4:2f:05:81:0d:0e:
                    ec:ed:a3:cc:9e:f3:ea:88:d3:33:3d:6e:99:7f:65:
                    30:cf:e4:72:52:28:00:c7:00:7a:c2:5c:af:f3:d3:
                    70:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:13:E6:72:53:AA:4F:81:5B:EA:5E:0B:E9:99:6A:B7:54:60:DF:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f6336523-e68e-4415-9ef1-52331da16bbe/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f6336523-e68e-4415-9ef1-52331da16bbe/8c9a749b6275709f37ce6c580d255a5e2c1efff5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273174

    Signature Algorithm: sha256WithRSAEncryption
         33:a8:16:20:12:35:e9:ad:59:4e:52:9a:87:c9:96:cd:75:2e:
         f8:1c:7d:38:6b:8b:4e:31:d6:52:cd:0b:e4:ea:fe:a8:40:35:
         7f:08:f6:56:f9:10:ce:5e:7f:68:ec:12:d4:6a:88:0d:dc:50:
         f0:9f:40:08:d2:e4:01:c7:6d:87:11:5d:f5:a3:17:f0:c4:28:
         f4:7f:6a:1d:b7:4d:61:be:2e:e9:6f:ba:5c:22:74:bf:7a:fb:
         b9:4d:12:5a:15:39:e6:8c:e2:9a:e4:42:af:db:c3:64:80:35:
         5b:37:5e:12:e4:f3:0d:a3:8b:d3:8d:e0:93:53:12:ed:a6:e6:
         73:c4:0f:76:5a:46:85:5e:70:13:22:ee:bb:37:ae:08:20:e0:
         8f:a9:44:b1:fc:91:5d:5d:49:6d:23:f6:3c:65:b8:14:ef:3e:
         95:eb:29:23:3a:2a:7f:95:c0:39:0f:37:b3:96:59:bd:bc:20:
         64:5b:47:ae:dc:4c:44:ea:c3:21:cc:c5:7e:b4:1a:c1:47:4d:
         ee:0d:38:d3:cf:c1:d2:db:4b:42:5e:a7:de:2b:96:b4:e4:10:
         a0:64:ac:41:de:02:cf:d7:49:50:4b:93:c3:81:a4:11:17:0b:
         c0:da:8d:20:d1:e1:ca:9d:b1:96:e8:fa:01:18:da:b5:12:73:
         c0:51:ea:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----