Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f662e53cb75172bee8aaae58da5a62726712a9c.cer
File:                     9f662e53cb75172bee8aaae58da5a62726712a9c.cer (raw, json)
Hash identifier:          0OnTF2jvBOEFl7eJcJYhgu6TMQ4CuPshX6huXUA09vo=
Subject key identifier:   36:5E:47:F3:6C:EE:15:4E:AB:35:CC:98:C2:36:27:17:E7:67:0E:D1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F32663
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/abc7ef96-8815-4e96-b3fb-43085edf8f6e/9f662e53cb75172bee8aaae58da5a62726712a9c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/abc7ef96-8815-4e96-b3fb-43085edf8f6e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Jul 2023 20:34:05 +0000
Certificate not after:    Mon 29 Jul 2024 20:41:36 +0000
Subordinate resources:    AS: 271987
                          IP: 2803:2110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15935075 (0xf32663)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 27 20:34:05 2023 GMT
            Not After : Jul 29 20:41:36 2024 GMT
        Subject: CN=9f662e53cb75172bee8aaae58da5a62726712a9c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:16:d5:d7:68:0b:9e:05:29:0f:42:93:01:
                    69:42:56:91:91:ff:62:50:30:23:b9:ea:22:de:bc:
                    f9:e5:41:84:84:6d:51:8e:58:7a:d4:08:cf:60:0c:
                    2f:a7:94:5b:a6:fb:b7:2a:c8:50:6d:18:eb:83:60:
                    d0:1a:9d:78:17:71:0b:6b:8f:ff:0d:0e:e5:91:88:
                    aa:25:ac:be:29:17:a4:b7:fd:67:9e:ca:93:bd:85:
                    a8:23:a8:4a:cd:aa:08:92:ab:3e:17:8e:dc:78:a0:
                    c3:8d:fe:90:6d:89:06:06:0b:a9:a4:3c:ee:9d:8a:
                    57:e2:1a:4d:a6:51:78:7f:00:6c:20:6d:ab:d0:ef:
                    16:1d:31:3f:68:27:db:4e:62:ab:45:93:67:50:f2:
                    5f:f1:e5:76:d0:48:a2:4c:23:56:60:7b:25:d8:ad:
                    ea:16:d6:12:01:2e:8f:d9:c2:7d:78:60:ba:41:c6:
                    d1:4e:d9:d4:b3:6d:7a:78:09:c6:fe:fb:16:e1:81:
                    aa:6e:ab:07:37:44:a0:20:59:77:27:49:6e:db:df:
                    9d:d0:b5:37:6c:92:d3:1b:f3:9a:cb:bc:d9:0e:bb:
                    58:50:b0:23:a6:59:fc:63:28:9d:ad:03:c8:01:ec:
                    c8:12:f0:e4:f9:42:c9:70:9f:7f:45:b7:2d:09:0e:
                    ca:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:5E:47:F3:6C:EE:15:4E:AB:35:CC:98:C2:36:27:17:E7:67:0E:D1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/abc7ef96-8815-4e96-b3fb-43085edf8f6e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/abc7ef96-8815-4e96-b3fb-43085edf8f6e/9f662e53cb75172bee8aaae58da5a62726712a9c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271987

    Signature Algorithm: sha256WithRSAEncryption
         ae:b4:4b:5d:c0:56:ca:23:a5:0f:b1:70:c1:ab:0d:df:ae:c7:
         b1:35:f8:59:77:2e:d9:5c:3c:94:05:36:e3:15:ed:95:7a:a0:
         dc:44:32:c4:26:08:55:d2:4b:ff:b6:d7:3a:4e:28:4c:10:2d:
         ef:2e:9e:15:84:59:ac:27:69:c1:6a:79:7e:c0:a0:64:e0:c9:
         f4:24:bf:ea:af:47:99:c6:b9:7a:c4:34:9a:7a:9b:97:ad:ff:
         af:c8:68:44:7e:d2:89:9e:cd:4a:f0:90:c5:0b:59:86:7f:ee:
         6f:e1:b1:6f:8e:b4:2e:2c:9b:42:dc:82:75:fd:18:f1:6b:7c:
         fd:0d:6e:55:11:85:b3:c7:81:3d:66:82:c7:c4:a1:a7:45:b6:
         dc:82:7e:42:ef:f7:31:33:56:53:c8:66:8e:b7:c5:73:5f:e5:
         7a:e7:e1:43:36:ad:b2:2c:20:71:4a:a2:94:e7:c9:e3:32:39:
         c2:2a:75:a0:08:6b:ed:99:9b:fa:ca:a1:36:4a:d5:35:ca:c2:
         ca:62:30:d5:bd:10:4f:bc:c3:89:da:f4:a2:d5:04:bb:1d:87:
         06:1c:71:c0:c9:59:bb:e2:68:8d:b6:9d:9a:c9:aa:4b:31:16:
         d1:a6:dc:3d:a1:e0:8d:1f:fa:88:73:75:72:af:ab:e4:cd:80:
         a9:95:86:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----