Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f80b2912e6d4f893e0973160b35d685fd5a15c3.cer
File:                     9f80b2912e6d4f893e0973160b35d685fd5a15c3.cer (raw, json)
Hash identifier:          HPY3w5Q9sW3FoKqQP/1IPxWMW2pTjRbnIpLVXJUYDWQ=
Subject key identifier:   F4:57:F6:21:B7:BA:DB:E4:88:8A:ED:36:DD:A2:A9:1D:73:53:21:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5E4AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a1adc6c-a345-474f-8cd4-4233e3ec7f3a/9f80b2912e6d4f893e0973160b35d685fd5a15c3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a1adc6c-a345-474f-8cd4-4233e3ec7f3a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 17:13:43 +0000
Certificate not after:    Mon 12 May 2025 15:55:19 +0000
Subordinate resources:    AS: 273037
                          IP: 2803:e790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16114858 (0xf5e4aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 13 17:13:43 2023 GMT
            Not After : May 12 15:55:19 2025 GMT
        Subject: CN=9f80b2912e6d4f893e0973160b35d685fd5a15c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:96:04:53:b9:ec:cd:f1:ce:0d:30:2b:b8:e6:
                    64:46:86:07:1b:ee:fc:54:e3:14:c5:9c:57:19:66:
                    d7:57:1b:f3:68:56:00:27:f9:56:f8:ac:62:54:25:
                    34:96:bd:90:07:8a:e7:99:01:bd:2c:91:3f:cd:89:
                    54:b9:64:ec:c7:ca:af:19:b5:67:14:f6:f6:b8:b8:
                    7d:47:de:3e:f1:23:b9:e4:26:8c:23:c1:ed:bc:30:
                    93:41:4b:a6:d6:d5:a1:0e:c2:be:a7:f4:74:5b:24:
                    54:3f:1f:98:c7:9b:20:b2:06:f1:22:fc:b2:eb:f3:
                    c7:22:a0:47:ad:7b:63:78:ca:d3:4e:8b:2e:4f:f1:
                    6f:1c:f4:c9:02:ba:b4:9b:0b:65:cf:55:c0:58:04:
                    98:9a:c8:42:f8:23:1f:89:5f:55:4b:68:6d:60:fc:
                    95:25:66:d8:07:30:f2:a0:f5:aa:d5:1a:b8:e3:cc:
                    ac:e6:ba:96:57:f6:5d:af:3c:2c:f9:79:81:b2:d3:
                    cf:ac:87:53:3d:b1:86:5f:19:f6:e9:dd:44:72:8b:
                    88:5b:d9:71:44:09:73:9b:b2:a3:05:8d:c6:fe:40:
                    0b:39:f6:6f:07:16:47:a5:ec:58:7f:89:a0:51:c1:
                    e6:04:bd:03:48:24:da:9b:88:03:52:04:8d:2f:df:
                    57:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:57:F6:21:B7:BA:DB:E4:88:8A:ED:36:DD:A2:A9:1D:73:53:21:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a1adc6c-a345-474f-8cd4-4233e3ec7f3a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a1adc6c-a345-474f-8cd4-4233e3ec7f3a/9f80b2912e6d4f893e0973160b35d685fd5a15c3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273037

    Signature Algorithm: sha256WithRSAEncryption
         c3:9a:3c:e1:99:2c:c3:f7:6f:97:67:a0:81:4a:d2:75:dc:01:
         0f:0b:f9:f6:62:db:b0:71:04:d2:13:96:cd:35:56:25:df:ac:
         d3:b7:50:6b:6f:33:e8:32:be:99:f5:80:6d:a3:ad:a8:30:7c:
         05:ba:d0:5f:80:e4:d3:1a:20:cf:d4:68:38:f2:8d:0a:35:fc:
         90:07:6a:fd:7e:5d:0c:38:4f:07:91:82:bb:09:86:0f:98:2c:
         04:f6:4c:3a:85:5c:c9:7b:84:15:82:f4:ee:a2:7b:88:f6:98:
         44:ba:94:5b:4c:e1:c6:6d:0f:ea:8d:86:58:5b:17:98:c6:bf:
         87:c4:25:80:02:e5:36:d8:29:c2:ef:73:2c:4c:10:cd:2d:43:
         3b:d8:5e:6e:f6:86:aa:a6:e0:f5:6e:0f:74:17:f7:8f:fa:b8:
         b3:51:62:6e:fc:e5:9c:14:32:b3:62:dc:5b:03:68:bb:35:62:
         1a:99:b7:7e:68:e2:75:3d:a7:f6:c2:23:93:00:51:8c:c5:49:
         af:54:eb:f2:dd:a1:b7:6a:44:8b:ef:5b:90:de:44:eb:e6:9d:
         84:ba:f5:aa:3d:99:4a:2d:0d:dc:c3:9a:6b:77:b6:04:07:30:
         5e:9c:fe:02:f4:e3:29:5c:58:ba:f8:5d:a7:76:8e:98:11:f6:
         23:5c:4a:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----