Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/91e3a76c45cb5a0a258196fff7e13973508857a4.cer
File:                     91e3a76c45cb5a0a258196fff7e13973508857a4.cer (raw, json)
Hash identifier:          kccWeHFOCu8NF2rFs6uPdRlOOOO71G6CVJAJEU5GSYY=
Subject key identifier:   6F:36:D1:E7:DB:A3:9E:87:BB:68:30:F5:44:94:27:7B:7A:02:61:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108D389
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6a435915-4f33-4d99-be1d-bbf62b5d14ea/91e3a76c45cb5a0a258196fff7e13973508857a4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6a435915-4f33-4d99-be1d-bbf62b5d14ea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2024 15:32:11 +0000
Certificate not after:    Tue 23 Sep 2025 06:00:00 +0000
Subordinate resources:    AS: 273177
                          IP: 2803:ca50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17355657 (0x108d389)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 30 15:32:11 2024 GMT
            Not After : Sep 23 06:00:00 2025 GMT
        Subject: CN=91e3a76c45cb5a0a258196fff7e13973508857a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ff:e8:e5:75:ec:36:6a:a6:0e:80:28:18:a0:
                    8d:03:3a:a4:79:31:7f:45:58:45:a9:d1:ef:1a:58:
                    1d:4a:86:a3:5d:26:69:7d:64:f8:a4:b4:94:3c:8b:
                    18:10:d7:cf:b3:8a:b4:ea:40:54:a8:e4:95:ae:26:
                    b2:19:f0:3a:21:e6:15:3c:a4:13:1a:79:a6:2c:f9:
                    07:0f:81:f1:39:f8:0f:bc:1f:22:c9:03:b1:f2:fd:
                    51:e3:2e:a6:87:a9:3d:55:30:f6:26:0c:81:2e:ce:
                    cd:e3:b7:d5:1f:b5:1c:b8:b1:4e:40:0e:74:39:20:
                    e5:97:4c:9b:d4:02:7d:a7:d3:46:d7:ba:6c:f1:43:
                    dc:88:c8:45:3e:4e:32:d7:3b:05:c3:24:f3:4c:5b:
                    4b:18:e2:1f:d7:85:77:dc:da:2a:bf:55:0b:ee:a0:
                    8d:f5:76:45:f1:4b:de:e1:91:f0:7a:ac:36:9d:92:
                    60:6c:f9:d4:31:32:94:55:56:24:39:9d:cd:80:ea:
                    4b:15:92:a3:1e:9e:e7:c2:8a:01:27:03:e3:db:2a:
                    fb:23:d6:dd:bd:92:20:a7:6b:92:f2:58:35:44:ce:
                    f0:20:20:e8:ee:3b:8d:62:cd:82:e2:98:19:b7:52:
                    fa:7e:9a:b6:02:d2:4e:0f:14:4b:46:e5:2f:4c:d0:
                    47:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:36:D1:E7:DB:A3:9E:87:BB:68:30:F5:44:94:27:7B:7A:02:61:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6a435915-4f33-4d99-be1d-bbf62b5d14ea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6a435915-4f33-4d99-be1d-bbf62b5d14ea/91e3a76c45cb5a0a258196fff7e13973508857a4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273177

    Signature Algorithm: sha256WithRSAEncryption
         57:bd:f2:3d:36:72:68:4b:3e:97:58:af:36:34:2d:87:96:71:
         2c:35:b0:13:0f:76:57:de:bd:1c:7d:87:ad:e6:89:db:a2:c8:
         39:6a:29:fe:a2:01:ef:cf:31:da:3d:9d:d8:75:18:5a:b3:a6:
         ec:bf:21:5e:9c:79:1b:65:e5:c6:0b:1b:a6:7e:fd:c1:42:55:
         b9:f3:18:a1:25:42:97:cd:64:37:87:26:b7:6e:70:97:d6:ec:
         25:3c:4c:cf:5a:7d:7b:22:64:44:2e:b9:78:13:b3:62:b1:1d:
         39:39:a0:85:04:fc:b2:ad:ed:5c:31:2c:15:b7:d7:ff:69:c3:
         c7:a6:8c:b9:77:62:8a:f7:2e:32:42:8c:e9:d8:be:b5:93:3e:
         46:77:46:e1:a4:e2:e5:f9:c6:76:f7:26:9c:04:a6:2a:3c:a2:
         ae:9f:ff:53:40:27:c6:71:e1:15:87:8b:ad:65:ac:f7:36:1a:
         4c:32:63:2d:ea:d3:9f:91:54:60:0d:fe:46:d6:9e:0e:e4:66:
         93:03:45:05:66:63:35:fe:7d:8c:82:c7:11:19:1a:a1:ed:93:
         17:ce:93:69:7e:a7:cd:8e:77:9e:5e:56:73:92:0d:f5:b6:22:
         13:a2:1d:01:59:bb:f6:be:c7:d6:c9:0f:13:b1:87:4f:4f:1b:
         41:4e:2a:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----