Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99e6b3398c44aca4d0c1e0f1046a5ca38e636602.cer
File:                     99e6b3398c44aca4d0c1e0f1046a5ca38e636602.cer (raw, json)
Hash identifier:          k4LPAF01KZ4jis02xnnI61sOJ4QpA1yr1chckKwXZlE=
Subject key identifier:   D2:1A:EA:80:06:87:4A:4B:41:4C:8B:FA:D4:95:B4:02:70:98:F4:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0109D414
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a9b26ef9-70be-4872-b8cd-1bf710b43ab5/99e6b3398c44aca4d0c1e0f1046a5ca38e636602.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a9b26ef9-70be-4872-b8cd-1bf710b43ab5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 08 Feb 2024 16:40:16 +0000
Certificate not after:    Mon 23 Jun 2025 00:36:57 +0000
Subordinate resources:    AS: 270228
                          IP: 2801:c4:b8::/45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17421332 (0x109d414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  8 16:40:16 2024 GMT
            Not After : Jun 23 00:36:57 2025 GMT
        Subject: CN=99e6b3398c44aca4d0c1e0f1046a5ca38e636602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:22:bb:47:0f:c3:72:04:8e:18:56:9a:79:2b:
                    a9:37:63:4f:79:c4:6c:21:49:1f:df:2f:fc:b2:84:
                    42:c2:06:bf:41:a1:d7:b2:18:17:b8:55:1b:69:1f:
                    f8:ca:21:1c:50:3a:28:8d:5e:b7:0a:18:d7:7f:f8:
                    da:1f:e4:cd:6d:1d:be:bc:21:78:25:37:ae:13:df:
                    ad:6a:11:3e:89:87:ee:3b:b0:1b:f5:91:99:9f:8c:
                    f6:c7:25:6c:7a:e8:e6:5b:0d:29:38:6a:b1:b2:e3:
                    5e:af:ac:60:ea:b1:6c:0d:86:8f:ca:c1:9e:82:5e:
                    73:b2:4f:bd:da:4d:87:6f:b1:c2:76:d8:65:46:16:
                    e6:69:27:b5:ec:7e:9c:36:de:b7:7d:cb:d5:5d:bd:
                    69:4b:10:27:cf:ed:0f:52:22:80:b4:83:40:00:83:
                    3f:16:cf:9a:26:7c:05:b8:e9:5c:e0:c9:2b:6c:31:
                    37:42:34:c6:39:55:ea:f0:e6:a5:48:15:7d:8b:1a:
                    3d:4d:2c:76:e1:dd:d5:ed:0f:71:35:3d:96:9b:58:
                    d8:63:c1:24:1f:f9:0a:a6:18:55:95:a1:fd:c3:79:
                    47:d9:ea:3f:e1:11:0e:07:0a:ed:15:4c:d3:9e:ff:
                    30:39:e7:7c:29:9c:1a:50:5a:63:ce:83:05:cd:76:
                    e2:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1A:EA:80:06:87:4A:4B:41:4C:8B:FA:D4:95:B4:02:70:98:F4:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a9b26ef9-70be-4872-b8cd-1bf710b43ab5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a9b26ef9-70be-4872-b8cd-1bf710b43ab5/99e6b3398c44aca4d0c1e0f1046a5ca38e636602.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:b8::/45

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270228

    Signature Algorithm: sha256WithRSAEncryption
         82:b6:17:e4:c8:2b:0e:80:fc:f8:16:86:ba:ef:0b:ea:17:df:
         f3:a5:97:9b:d4:c6:ec:64:a4:d9:c2:ff:37:da:b7:a5:6b:66:
         d9:1a:60:68:71:18:ec:19:1b:1a:14:9f:02:b0:6c:01:6a:84:
         fc:e7:87:c8:d0:fd:b3:4a:a1:f9:f1:84:42:9d:20:b4:25:db:
         7d:78:55:ac:f8:7b:45:2d:c8:c2:ce:2e:ae:15:96:22:54:99:
         d6:c4:6c:e3:b0:cb:66:7a:71:1c:b4:e7:0b:86:35:39:d6:a8:
         a8:9d:bc:ac:b8:d3:eb:17:98:49:7e:0f:1b:52:58:36:3d:bc:
         89:7c:11:e8:1a:c1:38:eb:16:67:1b:6c:c2:ca:6e:57:e7:b1:
         32:bb:ff:fa:2f:21:3a:a6:85:22:a4:dd:70:79:05:ba:fb:b1:
         61:c0:70:ac:cd:22:90:e1:57:41:21:e3:48:13:f4:15:86:59:
         6d:74:f7:b0:ad:f1:5b:6c:0d:46:75:e3:e3:43:21:a7:df:dc:
         ed:2b:38:5f:6d:3c:9b:08:16:02:81:8c:3c:a6:99:5a:77:60:
         3e:f0:38:37:16:22:1b:e9:f1:df:2e:66:c7:4e:85:32:f4:e9:
         73:7b:6b:3e:dc:48:80:f0:62:82:82:46:aa:96:5f:64:78:69:
         30:52:ac:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----