Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9b724393a6646f8fb8db0763aeec256af2c3d779.cer
File:                     9b724393a6646f8fb8db0763aeec256af2c3d779.cer (raw, json)
Hash identifier:          pXruubNdfSPBbdicJT/aVOVQi/krwvkHE56oIrUrZpM=
Subject key identifier:   3E:D5:E8:F6:B7:C9:0B:C2:1C:0E:B1:69:47:BE:D3:77:66:4D:68:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF74D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/9b724393a6646f8fb8db0763aeec256af2c3d779.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Feb 2023 19:01:12 +0000
Certificate not after:    Tue 16 Jul 2024 15:07:05 +0000
Subordinate resources:    AS: 272867
                          IP: 2803:3290::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14644435 (0xdf74d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 21 19:01:12 2023 GMT
            Not After : Jul 16 15:07:05 2024 GMT
        Subject: CN=9b724393a6646f8fb8db0763aeec256af2c3d779
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6b:6b:e4:2e:26:13:5c:50:6b:64:e9:08:df:
                    3e:be:18:16:d3:04:f2:9e:93:a5:3d:e6:3f:09:18:
                    b1:40:3b:b4:1f:8a:c8:3c:86:bb:08:16:b3:16:4a:
                    c8:ae:7f:82:02:a9:a4:53:95:5c:13:31:8b:94:c4:
                    30:6a:d0:28:b9:6f:1d:d7:ad:aa:75:44:5c:8f:13:
                    ba:81:14:cb:8c:1d:e6:a5:59:54:eb:a7:70:94:3c:
                    10:16:77:dd:8b:9a:93:dd:98:74:c8:5c:a9:80:d1:
                    30:83:56:15:4d:04:c8:26:08:00:80:71:d8:5a:09:
                    b7:fe:e5:7a:cb:d4:1d:51:cf:3a:6b:e6:61:2b:31:
                    70:86:e4:54:2e:d0:f1:2c:f8:13:f2:23:17:cf:c7:
                    db:c8:5a:57:f3:5f:37:10:01:45:0f:79:50:05:df:
                    b9:f4:a4:1b:20:67:05:8d:49:47:ca:fa:79:dc:cb:
                    d2:3e:d6:7f:1b:3d:31:34:b5:71:f5:91:d5:dd:b0:
                    dc:3c:dc:af:6d:56:e2:a2:10:44:46:96:ae:b6:b0:
                    b1:c5:1b:dd:bc:52:93:d1:4c:c0:f2:c0:d0:06:a6:
                    23:6d:5e:33:a9:b8:ad:85:5d:bd:e2:01:c9:7c:e4:
                    08:82:5a:e6:0f:f6:09:c7:19:8d:e8:0d:f5:07:26:
                    4a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D5:E8:F6:B7:C9:0B:C2:1C:0E:B1:69:47:BE:D3:77:66:4D:68:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0acc3c42-f582-49b9-ab2d-7e80469dd626/9b724393a6646f8fb8db0763aeec256af2c3d779.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272867

    Signature Algorithm: sha256WithRSAEncryption
         b6:5c:b4:b6:00:d4:85:70:50:31:32:78:9d:a7:2d:1c:9a:74:
         c7:65:44:d7:0a:f9:c2:54:c6:64:80:18:31:a7:28:b2:9c:a2:
         bd:1a:38:87:c4:8b:56:20:95:d7:0f:6b:52:a0:71:15:0a:53:
         64:ea:ff:22:b6:3a:73:b3:df:45:a5:09:f9:7e:0f:91:03:4f:
         a6:ba:95:6a:80:38:e7:54:52:23:5e:da:9b:b9:d7:1b:c1:3c:
         c9:c3:1c:e2:5d:f4:ac:ca:9d:d7:e4:1f:11:c5:23:8e:16:ce:
         26:df:bb:e7:9f:81:53:b5:eb:74:a4:a7:9b:fa:51:cb:f9:95:
         b0:21:5c:eb:5a:2d:a8:e4:e6:22:0f:5d:57:e1:17:bb:b4:f9:
         b4:4f:4b:dd:43:1a:79:94:d6:fe:a9:24:10:13:30:b4:31:b8:
         37:14:60:c7:95:78:a2:2a:a0:6c:64:7d:d7:ea:1c:be:53:32:
         27:a4:11:b8:8b:80:c6:37:14:8f:f6:3e:1a:0e:d3:d8:bc:d5:
         c4:ad:c5:56:61:f5:ab:71:6b:78:50:90:a8:9d:46:3c:ce:85:
         6c:2a:4f:cb:1d:52:5f:47:ea:fb:de:69:b8:7f:32:e8:e3:77:
         25:33:d2:9a:02:81:b8:5a:ba:2c:b0:b8:fd:c9:02:f2:9a:41:
         db:6b:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----