Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9a205714fb676a67eb00a2cfc57a7121527f93d5.cer
File:                     9a205714fb676a67eb00a2cfc57a7121527f93d5.cer (raw, json)
Hash identifier:          NuCTSYE/ChoqpELY1ucnKSEs9+9mPe9+VywxpPqvA2c=
Subject key identifier:   E3:AD:82:DA:98:45:12:E0:D4:29:46:C0:37:0F:A0:21:AF:9E:07:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFDCE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83a15bd4-5468-43a5-bc6b-a58a02af1022/9a205714fb676a67eb00a2cfc57a7121527f93d5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83a15bd4-5468-43a5-bc6b-a58a02af1022/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 02:50:32 +0000
Certificate not after:    Tue 15 Jul 2025 21:19:16 +0000
Subordinate resources:    AS: 273082
                          IP: 2803:9f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16768228 (0xffdce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  1 02:50:32 2023 GMT
            Not After : Jul 15 21:19:16 2025 GMT
        Subject: CN=9a205714fb676a67eb00a2cfc57a7121527f93d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:51:2f:2e:23:2e:e5:3b:8e:dc:60:b0:72:8b:
                    10:4f:d9:50:2b:33:c7:8a:76:9d:8a:25:c2:b5:6a:
                    09:f8:74:ef:7f:a7:09:da:c6:63:7c:9a:50:99:24:
                    7b:03:75:ca:3b:8c:eb:31:7e:a7:27:2d:fc:21:92:
                    dd:bc:39:9f:19:dd:d6:5a:48:45:74:f1:60:d7:67:
                    21:ba:2d:60:4e:ef:74:f9:6e:27:f2:5a:77:92:e0:
                    68:2d:94:04:56:25:f8:c6:6d:ce:48:90:5c:6a:58:
                    ff:59:3e:a7:58:ca:fb:d0:ab:86:06:bc:b1:1e:65:
                    a0:35:07:85:c7:74:84:ff:12:9c:93:7e:26:3d:f6:
                    71:c0:ce:cf:4e:9f:fd:62:11:eb:3e:e4:10:fd:f6:
                    61:8f:2f:90:25:99:02:fc:43:4d:6f:7a:92:ae:e7:
                    1b:e1:27:18:1f:e2:3f:a0:30:0b:ec:78:0c:01:05:
                    13:61:40:f0:45:42:2d:69:54:15:6c:f4:2a:b2:46:
                    85:89:ca:6d:55:d2:59:19:f3:e6:fe:54:d3:5d:1a:
                    34:90:ea:d7:7e:87:0e:5b:c8:db:f9:c0:2f:ff:dc:
                    46:11:52:fe:91:60:d0:89:57:ac:8c:34:f5:b2:b9:
                    95:6c:e6:67:32:80:aa:d0:8a:a3:29:97:66:be:0f:
                    d9:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:AD:82:DA:98:45:12:E0:D4:29:46:C0:37:0F:A0:21:AF:9E:07:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83a15bd4-5468-43a5-bc6b-a58a02af1022/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83a15bd4-5468-43a5-bc6b-a58a02af1022/9a205714fb676a67eb00a2cfc57a7121527f93d5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273082

    Signature Algorithm: sha256WithRSAEncryption
         b1:25:5b:c4:1e:5d:9d:d6:da:31:1d:6c:e9:7a:0e:ae:9e:59:
         27:24:1a:91:af:9e:2f:45:25:a6:0c:e8:b2:08:1c:ee:1d:af:
         e7:17:1a:af:47:96:75:6f:c5:b6:81:8c:b3:8c:1e:81:b8:c0:
         2f:74:fd:78:6c:9e:34:06:70:a9:1d:41:5b:88:67:9f:90:b4:
         ea:ce:a7:f6:75:1d:43:72:de:02:6a:23:96:b5:73:dc:3e:d6:
         b5:39:df:1b:98:19:03:85:f1:9f:ea:01:d7:20:99:22:f3:5a:
         cd:28:91:51:a0:08:03:ac:b4:91:27:2c:a1:f9:57:4d:f4:98:
         59:e9:de:ab:2f:3d:92:25:6e:05:96:cf:bc:4a:8f:d1:41:1f:
         6c:67:55:32:63:36:c9:f8:f8:6e:2a:b4:51:00:a5:1f:97:e8:
         ef:a0:f3:9b:df:8c:aa:0e:38:8a:af:79:73:ba:ce:b4:d3:f4:
         8b:ed:9a:17:98:4e:44:50:85:0e:b4:de:5b:80:96:cc:2e:cd:
         a1:18:38:31:9c:8e:7e:bd:ae:ac:bc:4b:8e:b6:52:d4:1a:b0:
         94:d1:e4:9a:e5:f6:e4:32:65:b0:49:c1:3b:3a:b6:5e:19:09:
         a2:37:92:29:1b:75:cc:55:cc:5e:2d:1b:04:a3:26:40:9c:0f:
         cc:79:44:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----