Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c498e7abc9c2384dcfedf4fa6f36bd2da063a01.cer
File:                     9c498e7abc9c2384dcfedf4fa6f36bd2da063a01.cer (raw, json)
Hash identifier:          di7jDv0+h7fZDGEdbDkV51gVDsSQAqsC0zWEXMuM8Aw=
Subject key identifier:   17:52:37:94:23:DA:A3:45:EE:9C:0B:74:5A:A9:34:24:8F:0B:EA:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA8947
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9c498e7abc9c2384dcfedf4fa6f36bd2da063a01.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16419143 (0xfa8947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=9c498e7abc9c2384dcfedf4fa6f36bd2da063a01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:e3:2a:06:3f:99:b6:c3:59:f9:d8:84:41:94:
                    90:a3:18:95:43:1d:56:90:66:61:ec:23:7e:d2:52:
                    44:5c:b1:79:9c:16:d4:7e:ea:0f:14:2a:01:f0:6f:
                    c0:58:7b:2e:10:41:7c:2a:f4:30:7a:ea:c8:3e:1d:
                    9c:55:c7:3e:7e:97:e9:7e:46:0a:df:9b:d1:0b:ef:
                    2d:90:e6:3e:a3:82:95:2f:91:ac:05:3d:7d:a2:d6:
                    c2:33:07:f6:f8:08:dc:97:9c:e5:c6:73:42:a8:12:
                    2f:33:ad:76:f7:f9:e3:c4:ea:7b:0d:f7:21:5e:23:
                    7b:d6:45:fd:6a:c1:20:2e:da:21:0e:57:a8:c4:e2:
                    d0:73:b5:4e:f0:de:55:f9:79:fa:f8:e6:68:f5:bc:
                    f6:09:84:bd:df:43:dc:34:9c:60:d6:23:9e:f0:b0:
                    de:bb:96:7d:53:7f:a4:87:44:db:c6:43:18:44:a3:
                    4e:f3:e3:13:a3:e9:52:00:94:b2:4d:9b:b1:70:21:
                    84:9c:95:84:8f:ab:4d:15:16:01:ab:cb:75:1c:02:
                    19:80:10:12:1d:2c:af:52:b0:05:a0:fb:78:34:68:
                    b8:a2:31:6a:8a:02:65:b4:79:bf:d9:70:55:ef:63:
                    bf:7c:1b:00:f3:a8:17:0f:0b:82:bc:88:e9:60:26:
                    81:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:52:37:94:23:DA:A3:45:EE:9C:0B:74:5A:A9:34:24:8F:0B:EA:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9c498e7abc9c2384dcfedf4fa6f36bd2da063a01.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         3b:bf:8e:62:18:6e:e5:e0:08:06:a2:40:e9:dd:cb:38:7d:50:
         b1:f0:c0:8a:31:78:d0:37:01:6a:5b:85:bb:0a:83:72:2a:a7:
         80:17:fe:42:c2:b6:0a:3f:d9:6a:b9:30:13:d3:98:9f:47:4a:
         91:1c:23:58:a9:13:70:1a:95:14:64:ad:8f:b1:15:df:e5:3c:
         bf:2d:cb:dd:13:16:c1:62:d5:16:01:93:1f:16:00:75:d0:e0:
         f4:7f:7f:f2:c1:f5:37:c0:d1:d6:e5:74:73:27:25:b8:d5:c7:
         89:a2:cc:53:43:9d:0f:4e:44:17:00:55:92:23:ef:d1:1f:63:
         90:18:72:8c:8a:c7:9d:53:81:9f:64:87:1d:0c:79:dc:fb:53:
         56:c1:3b:cd:7c:72:79:88:99:70:ce:b7:cb:cd:b9:7d:29:5e:
         3c:3a:85:77:13:8d:b2:33:ec:3d:31:f6:d2:0f:12:c1:08:db:
         34:87:68:f3:e8:1d:79:64:be:76:6c:b9:17:3b:65:fd:69:ff:
         ca:a6:b8:87:37:d0:b6:ab:e2:44:74:47:e9:7b:64:e4:5b:d3:
         0f:96:c1:99:30:45:22:dc:c6:0e:78:29:18:aa:e4:e8:3e:9d:
         a4:96:39:72:16:7d:f0:4e:b5:56:27:c5:12:39:ae:14:3a:13:
         c9:99:6f:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----