Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/96a71b323517284a72a07373f4fbd5c14a4e186c.cer
File:                     96a71b323517284a72a07373f4fbd5c14a4e186c.cer (raw, json)
Hash identifier:          t5UUP05tyMn/2HTeryoDIjpTUFEc95rbg9rLqxlpPq8=
Subject key identifier:   15:9E:97:13:D5:01:E2:B2:EB:07:A4:D5:78:2F:09:18:31:89:61:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DEF1C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/96a71b323517284a72a07373f4fbd5c14a4e186c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Feb 2023 17:54:12 +0000
Certificate not after:    Tue 22 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 272950
                          IP: 2803:2990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14610885 (0xdef1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 14 17:54:12 2023 GMT
            Not After : Oct 22 05:00:00 2024 GMT
        Subject: CN=96a71b323517284a72a07373f4fbd5c14a4e186c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:4d:5e:a1:79:92:ba:f8:4d:22:2c:5c:ee:34:
                    72:7e:de:2d:0f:da:45:63:99:40:c9:92:ef:4b:0e:
                    73:e8:94:f0:10:b1:62:88:6d:25:80:45:12:bc:5b:
                    49:44:d4:fb:d6:0a:af:8d:46:dd:05:98:e4:64:3e:
                    3c:f2:e3:8a:af:80:de:08:aa:85:8e:88:76:c8:09:
                    68:84:8e:ab:40:8a:5b:cf:b2:4c:a2:f3:82:cc:c2:
                    84:c3:53:0c:05:41:c1:d2:a2:84:6d:16:de:6f:3f:
                    1d:f6:ce:7b:5a:f4:0e:a5:14:08:65:53:e0:42:ae:
                    90:b5:00:4f:bc:a9:61:20:01:b7:65:d8:d6:06:45:
                    70:11:46:3e:66:2a:e4:e4:b8:42:52:f9:29:83:8d:
                    66:4d:68:c2:57:75:12:31:0c:ee:ab:cc:78:bf:4f:
                    45:fa:51:f5:1d:bb:76:38:6c:73:0f:48:33:85:d1:
                    c6:f1:24:63:3b:9b:44:bc:1b:d2:22:18:5a:33:e8:
                    0a:98:00:a4:60:3b:39:65:d2:85:e4:48:2c:a9:00:
                    b9:6d:9b:22:dd:5b:91:e6:58:98:98:61:9e:2f:54:
                    37:38:71:02:bb:32:04:a8:d7:6f:5d:21:54:fa:2b:
                    66:41:5d:88:5c:8b:53:c2:b9:bf:df:03:80:fb:eb:
                    ca:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:9E:97:13:D5:01:E2:B2:EB:07:A4:D5:78:2F:09:18:31:89:61:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/189593b3-199f-46f3-b8bb-941175c42f2f/96a71b323517284a72a07373f4fbd5c14a4e186c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272950

    Signature Algorithm: sha256WithRSAEncryption
         3d:fc:57:4e:87:d5:c9:bc:db:e0:fd:5f:55:d7:37:90:cf:47:
         b6:35:e1:04:15:b3:14:35:09:8f:09:74:aa:f0:c2:02:6d:2c:
         2a:b7:63:a1:e6:3b:30:1b:26:ac:65:b1:ba:53:47:3d:65:d4:
         40:4e:11:43:8a:06:6f:18:92:02:56:34:98:06:7f:e8:bd:8a:
         95:df:e6:c6:c4:49:e5:6a:0a:80:79:0b:01:a3:ca:9d:b7:d1:
         78:04:90:27:35:ea:51:ba:1f:7e:8d:66:78:33:e8:48:a1:68:
         72:f8:5a:90:c1:73:87:7d:84:2c:98:23:43:b6:84:7b:27:24:
         64:89:a2:58:1b:01:a2:49:f2:c2:07:13:b3:ac:42:07:59:65:
         eb:7a:a1:1b:95:1c:e7:58:29:e1:51:f1:ba:15:3d:7f:cd:70:
         81:72:d7:49:e7:e4:0c:56:ea:f5:a6:ef:ae:b6:03:87:9a:c9:
         d9:a5:3e:17:0a:2c:de:ad:1c:01:a2:2b:36:64:9f:4f:5c:c0:
         3e:ed:57:ac:43:7f:fa:2e:68:8b:6c:c7:07:89:f1:67:aa:0d:
         6c:3a:b9:a3:3d:e2:64:4b:9b:e2:dc:e8:87:a0:bb:c3:35:34:
         5d:1e:bb:2f:5b:32:8f:30:f8:ef:78:0a:d8:1a:d8:c4:da:b7:
         24:54:af:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----