Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/97ffbcf39542d97541e3184cbc71572276aacccf.cer
File:                     97ffbcf39542d97541e3184cbc71572276aacccf.cer (raw, json)
Hash identifier:          G0teviDPE+0KMWY0VtiZFChASb105lpk7VEuC99iQG4=
Subject key identifier:   64:6D:88:54:1F:25:C0:12:A9:21:EF:96:58:59:CF:E0:2C:0D:B0:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE49E7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9a276c68-cd42-4fca-be0b-af1ffce4e2f9/97ffbcf39542d97541e3184cbc71572276aacccf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9a276c68-cd42-4fca-be0b-af1ffce4e2f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 26 Oct 2023 16:54:17 +0000
Certificate not after:    Sun 30 Mar 2025 21:58:01 +0000
Subordinate resources:    AS: 273016

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16665063 (0xfe49e7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 26 16:54:17 2023 GMT
            Not After : Mar 30 21:58:01 2025 GMT
        Subject: CN=97ffbcf39542d97541e3184cbc71572276aacccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5e:1b:68:6b:d7:98:5c:50:e1:ad:39:f3:03:
                    1a:e8:91:7d:e6:f6:9b:a7:8f:7a:d0:87:4d:d9:f0:
                    6e:6d:3b:40:00:3f:fc:09:4b:d4:7f:8e:2d:88:2a:
                    2a:2d:a0:96:9d:d8:1c:62:76:47:ad:bd:f5:97:3e:
                    94:67:ec:1b:8a:ff:6d:fb:39:9f:a1:83:ab:a6:4a:
                    20:22:92:dc:07:e0:0c:1b:8e:55:2f:72:25:09:a9:
                    d7:87:88:ad:c0:82:9f:e4:28:dc:3f:f9:12:00:26:
                    bd:7c:2d:85:13:53:f7:ad:cb:3f:8e:a7:dd:20:1c:
                    97:39:97:b7:34:07:2f:f1:a0:a0:91:1a:ba:d5:cc:
                    5a:0f:6f:d9:de:ec:5f:e1:8a:04:2c:d5:87:2e:65:
                    e9:62:a5:e1:3b:21:1e:c7:e1:61:d3:7e:a8:32:c4:
                    e3:65:02:be:2e:5a:6f:0d:87:6b:40:bc:52:52:77:
                    68:f3:ee:21:f4:49:54:a8:66:7b:2e:d2:a7:d3:37:
                    01:f9:d7:53:9c:84:a4:51:f9:1d:ec:ae:dd:f5:52:
                    71:db:83:22:af:d5:b5:fb:f3:57:f3:34:dc:e2:db:
                    a0:ff:f4:e3:9f:20:f6:c0:1f:91:a0:3c:cc:b4:42:
                    a1:c1:30:0e:ad:3f:cd:72:25:50:9b:a6:9a:05:4d:
                    13:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:6D:88:54:1F:25:C0:12:A9:21:EF:96:58:59:CF:E0:2C:0D:B0:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9a276c68-cd42-4fca-be0b-af1ffce4e2f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9a276c68-cd42-4fca-be0b-af1ffce4e2f9/97ffbcf39542d97541e3184cbc71572276aacccf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273016

    Signature Algorithm: sha256WithRSAEncryption
         85:7b:aa:8e:83:68:72:37:26:59:3d:3b:9a:77:17:a5:28:3f:
         11:a9:34:66:73:10:a4:4c:c4:ba:31:68:42:94:96:1e:3f:da:
         7a:45:fc:3c:d0:0b:49:08:86:42:c0:d8:4d:28:ba:be:80:52:
         fb:44:22:20:67:9b:2e:62:3c:2f:a3:f5:67:05:6c:b6:a1:0b:
         59:97:78:e2:c4:61:4b:c8:c3:b0:8e:b7:b9:91:68:98:1f:95:
         e6:3c:fb:a0:65:7f:e0:13:4a:f1:26:2b:dd:50:11:a6:9e:f8:
         a4:cc:44:6f:84:0e:18:8c:18:d6:f9:91:78:04:03:b0:f8:6c:
         33:f9:9c:c8:45:ff:95:b5:58:db:53:d9:e0:97:19:2b:e2:20:
         6c:79:61:00:75:a1:ce:bf:10:2d:0d:04:bb:90:29:ae:ef:5a:
         b5:a4:21:a7:2e:ea:53:c3:f0:21:fa:56:1f:3f:74:20:05:73:
         b0:79:39:c5:e5:1b:5b:7d:df:1b:2c:02:35:7a:c5:54:2e:23:
         b1:22:fd:95:13:40:42:73:be:13:82:01:18:ae:e1:ae:02:a5:
         8e:8c:6b:4b:f1:00:1d:69:b4:94:1a:05:6f:d6:d5:ae:11:d4:
         73:91:c1:50:33:65:4b:0d:72:92:80:09:89:35:0c:da:50:0c:
         c7:0e:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----