Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/921f2e6e5335910c2c656fdf12745b76681e6741.cer
File:                     921f2e6e5335910c2c656fdf12745b76681e6741.cer (raw, json)
Hash identifier:          jYVHQNqG6loD5FFLGjROsEVngsfZZiSglz3gk9xyEOI=
Subject key identifier:   D7:3D:9C:43:29:71:9D:F6:B7:5F:3D:BD:2F:94:97:F7:CE:FD:2E:94
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01038D21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/921f2e6e5335910c2c656fdf12745b76681e6741.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 22:36:28 +0000
Certificate not after:    Wed 06 Nov 2024 23:48:07 +0000
Subordinate resources:    AS: 270204
                          IP: 2801:c4:95::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17009953 (0x1038d21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 11 22:36:28 2023 GMT
            Not After : Nov  6 23:48:07 2024 GMT
        Subject: CN=921f2e6e5335910c2c656fdf12745b76681e6741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c3:a9:c6:17:16:01:1b:af:8e:2d:84:15:2d:
                    cb:98:c4:ad:54:66:ff:55:c7:9a:1e:1a:52:60:3c:
                    b8:82:ae:83:e2:47:c6:b4:17:88:64:8b:be:9f:94:
                    a5:c6:97:fe:17:78:a4:55:75:7d:2f:80:f5:52:5a:
                    06:e0:ae:00:10:e1:28:53:d3:18:fa:57:c6:e7:a5:
                    58:2e:d1:a4:90:cb:75:fa:0e:7a:bf:1e:24:f7:a4:
                    6f:17:ae:80:65:74:d5:76:d6:3d:30:5e:ee:b7:03:
                    b6:bb:a1:d5:11:1c:96:40:e8:25:11:e1:42:9f:0b:
                    3b:25:01:e5:28:8f:3f:2d:64:da:4a:2e:0a:f3:eb:
                    58:74:a7:fa:14:b4:ad:0a:49:2b:10:c2:6a:02:76:
                    99:ab:ae:5e:c1:7a:f4:3a:d9:3f:52:50:55:58:e7:
                    07:4e:7b:7d:11:90:53:4e:75:58:4b:47:72:4e:25:
                    03:65:d6:55:b4:ad:09:9b:e8:13:04:1a:b0:eb:0e:
                    c9:99:2f:d3:b1:3b:26:8e:ad:56:1f:fb:b3:b1:df:
                    bf:fd:98:c2:4a:0c:d4:ae:aa:3d:13:d3:8f:91:a2:
                    06:cc:2a:32:03:f7:73:93:e3:32:4c:59:74:ab:33:
                    e9:61:94:be:5b:0f:42:8c:2a:6e:12:21:09:81:6f:
                    a6:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:3D:9C:43:29:71:9D:F6:B7:5F:3D:BD:2F:94:97:F7:CE:FD:2E:94
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cbc00742-c5bf-45ca-b4a1-a847a782759e/921f2e6e5335910c2c656fdf12745b76681e6741.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:95::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270204

    Signature Algorithm: sha256WithRSAEncryption
         0c:40:4a:23:d3:cb:71:8c:8d:53:b1:9f:e6:da:86:16:ac:e2:
         21:cc:71:6c:32:10:41:2d:61:43:7d:22:42:ce:52:c7:f0:7a:
         28:17:eb:22:a6:c3:80:db:ef:5e:c3:7e:c8:8e:f1:c2:72:48:
         30:1d:54:74:92:9b:0f:16:2e:00:ed:c0:d7:06:d4:2c:c9:d2:
         c0:db:aa:ce:ac:97:7f:06:34:05:6c:b0:75:27:f1:e4:77:6d:
         3a:28:8f:c0:d5:41:5e:af:06:5f:35:56:fa:99:fa:c6:32:03:
         06:c9:cf:7e:4c:7e:cf:08:5b:60:d0:84:31:c1:bf:f1:e4:2b:
         dc:35:7b:7c:de:e7:ca:40:22:0d:b0:70:ed:32:ea:45:9d:33:
         eb:61:f5:1f:d6:0d:15:b8:5a:37:cb:74:35:83:9f:8e:d9:f8:
         eb:6d:50:ff:f2:b9:76:6c:9d:74:80:b3:1d:db:17:52:9b:9c:
         dc:7b:9c:68:b8:d2:ee:e6:7e:a8:91:3c:f1:22:59:ed:91:e4:
         3c:48:72:f0:f9:38:3c:fa:86:67:b7:b6:1f:1a:a4:ba:df:02:
         71:41:16:75:ef:6b:c2:5e:33:f3:ea:21:f7:ca:22:33:22:9d:
         e1:50:05:bd:90:d2:d2:87:d8:9f:fd:53:c5:77:ce:76:f8:17:
         47:ab:c3:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----