Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/972bd52eb0055c85d53179f137eb6f14122b18b0.cer
File:                     972bd52eb0055c85d53179f137eb6f14122b18b0.cer (raw, json)
Hash identifier:          aTArtDMW8AA7Bl+xf768OgjAydBpDR4/5ovmrywzvn4=
Subject key identifier:   19:91:7B:D0:64:3C:51:64:86:F3:7B:51:4F:53:BF:20:6A:51:A3:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE1DF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6fb02dac-137f-4218-afea-4cef75cb975e/972bd52eb0055c85d53179f137eb6f14122b18b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6fb02dac-137f-4218-afea-4cef75cb975e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 14:47:54 +0000
Certificate not after:    Mon 24 Mar 2025 21:55:01 +0000
Subordinate resources:    IP: 2803:8890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16653812 (0xfe1df4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 25 14:47:54 2023 GMT
            Not After : Mar 24 21:55:01 2025 GMT
        Subject: CN=972bd52eb0055c85d53179f137eb6f14122b18b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8c:bc:70:17:39:2d:22:a7:45:f0:ec:c3:fa:
                    b7:20:a7:83:7e:1e:a0:3b:8c:91:19:e0:8d:a1:08:
                    e2:9f:5e:0e:87:b7:bd:9e:5f:24:7c:00:d5:89:0a:
                    0e:36:fb:c2:a1:4b:f3:b7:26:25:82:9b:17:30:a8:
                    5f:e6:6e:67:93:42:cb:dc:20:6b:a6:a3:96:fb:e3:
                    51:fa:58:b7:d7:56:a2:c1:8d:0b:4a:b3:fc:c2:d9:
                    d0:94:4e:9e:0b:15:c6:41:ba:4a:56:84:77:2c:4e:
                    c1:a8:70:cb:5e:96:d1:54:77:e5:05:13:30:b3:4b:
                    ca:4c:18:89:02:74:7e:2d:e4:c2:e4:fd:8e:6e:cf:
                    7a:46:7b:36:b7:55:3d:3e:db:f0:6b:94:e1:a5:f3:
                    88:cb:ee:65:bd:7a:65:79:48:93:a1:cb:0b:d6:0e:
                    dd:d4:db:33:4d:31:3b:c4:ef:7b:ad:f9:0c:22:a5:
                    ba:59:94:eb:d3:9f:27:b4:ab:5b:e6:05:83:e0:5d:
                    f2:5e:92:bb:65:10:d4:5c:fe:77:86:74:e4:42:86:
                    b7:c5:0a:38:fc:77:38:51:f3:4e:23:93:25:11:f4:
                    ab:f9:35:a3:ce:c8:2b:44:58:0f:00:6a:7a:4f:43:
                    0f:48:18:e2:92:67:ca:b5:47:3d:63:11:e8:b7:d9:
                    f0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:91:7B:D0:64:3C:51:64:86:F3:7B:51:4F:53:BF:20:6A:51:A3:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6fb02dac-137f-4218-afea-4cef75cb975e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6fb02dac-137f-4218-afea-4cef75cb975e/972bd52eb0055c85d53179f137eb6f14122b18b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8890::/32

    Signature Algorithm: sha256WithRSAEncryption
         c0:51:2f:da:a6:e6:cf:09:b5:66:72:03:a3:78:c1:85:0d:5e:
         34:e1:1d:bc:19:3a:12:86:0e:4c:ca:17:c1:a4:e4:38:58:8d:
         67:4c:f6:e6:3d:31:9f:cb:1d:a9:2b:d9:82:0b:bd:1e:e4:73:
         82:4b:cb:2a:15:b7:06:94:4b:9d:40:53:73:41:f3:84:ce:60:
         fa:a1:22:bb:d7:09:ec:6f:45:0e:72:91:98:1c:96:ca:4f:c1:
         9f:a9:85:3c:0b:a4:c6:ef:e0:e0:71:e4:51:c0:bb:05:d0:d9:
         f7:d3:2e:c5:ee:f8:5a:6c:84:e5:1f:7c:21:c5:e2:28:be:f1:
         ad:58:5a:0e:3d:05:8c:a4:cc:d1:d3:d0:26:58:b5:52:39:14:
         32:eb:b6:94:0f:71:1a:af:91:11:1c:39:89:79:38:2d:b1:4f:
         d0:da:74:42:92:a3:39:c6:d3:12:55:e6:ac:e9:a5:bd:c3:f9:
         b3:04:73:d1:91:7b:df:01:ea:0d:e0:47:dc:40:8d:45:b8:e6:
         b6:0f:33:d3:62:97:f0:77:d0:61:5b:f6:5e:ab:bc:c0:dc:e4:
         43:88:4b:80:19:b1:1f:c3:99:71:e9:4e:4b:da:9b:ea:5c:ca:
         5c:fd:3f:77:e2:8b:fc:72:05:bd:e4:79:ad:5d:40:6f:ba:2b:
         08:63:d4:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----