Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/992ef6ee0e7cdb6583b3ebf40dd215fcc1cca74e.cer
File:                     992ef6ee0e7cdb6583b3ebf40dd215fcc1cca74e.cer (raw, json)
Hash identifier:          17WXG7lDR/S1jRMaycmhXY16IoTphe1299e2oTmPAZQ=
Subject key identifier:   AF:F6:60:07:F4:FE:6D:BE:BA:8C:55:32:8E:C8:75:B4:10:5B:F6:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC0B3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7d9f1c5a-2f86-4fbd-a73a-9f4857f96b55/992ef6ee0e7cdb6583b3ebf40dd215fcc1cca74e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7d9f1c5a-2f86-4fbd-a73a-9f4857f96b55/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 03:09:58 +0000
Certificate not after:    Wed 23 Jul 2025 06:00:00 +0000
Subordinate resources:    AS: 273097
                          IP: 2803:9050::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16517948 (0xfc0b3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 03:09:58 2023 GMT
            Not After : Jul 23 06:00:00 2025 GMT
        Subject: CN=992ef6ee0e7cdb6583b3ebf40dd215fcc1cca74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:0f:ff:e3:5e:14:3a:bb:fd:c6:c4:eb:d5:10:
                    7d:0e:b5:24:4c:e9:b8:0b:99:8c:3b:a2:4b:08:23:
                    e5:20:ec:4b:2a:2a:b1:8b:99:a2:77:a0:00:0e:66:
                    ac:8c:a2:d1:e0:de:56:8f:92:d7:77:b5:2e:ed:aa:
                    3f:65:c6:93:37:c0:e1:69:53:fd:ff:56:58:ae:37:
                    14:ba:e9:e6:16:f6:20:c9:c1:cb:c8:df:eb:da:eb:
                    50:bd:48:f5:6a:b4:01:03:07:b8:cc:86:fe:fb:4d:
                    5f:35:3d:3c:fe:40:67:8d:67:bb:8b:e1:ae:dc:ba:
                    29:61:40:48:dd:11:5c:dd:38:64:cf:20:75:c6:c9:
                    24:81:39:56:3d:90:e9:55:13:fa:c1:92:58:bb:3c:
                    8a:55:de:db:97:27:7c:ea:6b:e9:c3:ac:2a:6d:3f:
                    43:ec:d3:4b:da:53:fc:da:6e:59:f3:cd:eb:64:fc:
                    0f:4e:a6:87:eb:12:90:c6:b8:99:96:67:cb:c4:b7:
                    41:4a:85:68:41:d1:92:20:2d:e3:8d:98:98:38:de:
                    d2:a0:37:3b:7b:f0:7c:48:6d:41:f0:9e:4e:13:55:
                    59:cc:49:6b:24:88:51:bd:21:2b:77:74:c9:15:09:
                    ce:79:a4:9b:5e:3f:db:91:b7:1d:c3:63:f2:ad:09:
                    73:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:F6:60:07:F4:FE:6D:BE:BA:8C:55:32:8E:C8:75:B4:10:5B:F6:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7d9f1c5a-2f86-4fbd-a73a-9f4857f96b55/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7d9f1c5a-2f86-4fbd-a73a-9f4857f96b55/992ef6ee0e7cdb6583b3ebf40dd215fcc1cca74e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273097

    Signature Algorithm: sha256WithRSAEncryption
         9d:1c:6a:c3:76:79:1b:dc:c9:77:20:0e:62:0f:db:04:ec:d7:
         a3:7a:95:6a:d2:5e:e1:48:e1:dd:79:ee:22:e2:f2:fe:20:3f:
         4f:2f:53:87:32:fb:b7:dc:ec:37:d5:41:74:d7:d0:fd:1a:d0:
         31:64:a3:68:5f:22:c9:c2:bd:bf:14:e9:99:e0:c6:e8:2c:86:
         b0:c0:7b:52:3b:fa:24:48:28:d0:f1:3d:4d:1d:cd:66:2b:67:
         7d:07:a0:be:ed:59:eb:56:e9:65:02:b9:8e:b9:55:d5:7d:a1:
         d0:49:2f:ce:b3:b7:40:37:60:61:67:a0:53:5c:5a:27:83:7f:
         34:dc:be:51:8e:87:0e:ad:ba:12:b1:ee:78:63:8d:42:08:f6:
         89:b2:10:8f:51:b7:52:51:f8:41:8e:83:91:c8:d8:82:41:91:
         6e:47:a7:d0:98:84:c1:b1:ba:2b:04:d5:86:af:29:77:61:5c:
         bb:4c:bb:f4:4d:54:cc:ff:3b:ca:2f:aa:81:65:92:4a:9a:63:
         7f:c9:9c:48:8a:b1:c9:56:c4:36:8b:01:cd:0d:9e:64:16:6c:
         ac:d7:88:92:16:db:da:ca:9d:55:8d:79:94:21:41:97:9d:d5:
         e3:9e:50:f3:71:0a:69:3b:dd:18:2e:f9:a5:dd:e4:42:fd:61:
         6c:c1:2a:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----