Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.cer
File:                     9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.cer (raw, json)
Hash identifier:          ejXO6WWK1jXHv9oR8UM5l0PMBHOnruiBhVnstGPQFoc=
Subject key identifier:   88:50:26:FB:A4:E1:38:3F:8F:41:12:37:FE:40:ED:6F:E8:33:9D:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D66BBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b43a95f3-c3b2-473f-8558-037223766e6b/9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b43a95f3-c3b2-473f-8558-037223766e6b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 Nov 2022 01:36:11 +0000
Certificate not after:    Sat 31 Aug 2024 17:15:08 +0000
Subordinate resources:    AS: 272897
                          IP: 2803:e690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14052285 (0xd66bbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  3 01:36:11 2022 GMT
            Not After : Aug 31 17:15:08 2024 GMT
        Subject: CN=9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f9:95:eb:d5:c7:b7:1b:c2:fb:05:8e:1e:1d:
                    ab:f6:4e:53:db:6e:f7:a4:a3:e8:e7:bf:e4:99:07:
                    54:cd:52:bd:0b:39:d2:3b:14:56:10:1e:c3:0c:d0:
                    e4:21:7e:e6:92:e5:db:0a:9e:c8:da:4d:b6:63:7d:
                    72:a6:95:9e:f6:8a:c8:cb:b8:c5:07:6a:e1:7e:27:
                    ed:52:50:bf:41:ce:2e:52:1c:46:8c:3f:d5:0b:79:
                    45:79:91:bf:af:fb:70:d2:f6:c3:f5:56:2b:d3:45:
                    a6:f3:89:67:cf:f8:12:02:2d:55:af:95:27:da:55:
                    fc:4b:92:ee:5d:0f:d6:18:eb:6e:3a:be:65:5f:34:
                    26:77:f9:ad:eb:f3:dd:08:b7:a2:a9:e2:16:ea:14:
                    f0:35:4b:cd:b4:62:90:eb:bb:fa:c8:40:f8:ab:d0:
                    e2:30:64:d9:22:b5:0c:d6:0f:2f:4a:9c:71:4b:53:
                    c1:f2:ab:a8:7f:a3:8c:3c:58:af:1a:00:85:79:ad:
                    e5:fd:c4:1a:98:08:cf:03:ef:a9:86:4b:87:68:fa:
                    9b:71:46:54:85:84:e9:15:b8:fb:0c:33:2e:b7:6f:
                    a4:de:58:de:ae:91:4b:0e:94:f3:a3:0b:97:06:5b:
                    94:3b:6e:2c:1e:45:ed:42:1d:2b:77:ef:bc:5e:49:
                    e5:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:50:26:FB:A4:E1:38:3F:8F:41:12:37:FE:40:ED:6F:E8:33:9D:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b43a95f3-c3b2-473f-8558-037223766e6b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b43a95f3-c3b2-473f-8558-037223766e6b/9ffaa6f2e7822b5ad9d189cb149a25a0c7c3a5ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272897

    Signature Algorithm: sha256WithRSAEncryption
         2f:52:4c:7e:f7:9c:6c:ee:4e:3b:ca:53:12:ef:03:8a:88:02:
         11:b0:91:dd:cd:ef:ec:ea:ae:2e:fa:6b:21:06:64:cc:8c:3a:
         c9:7c:0f:21:29:9b:be:c9:9b:7d:9a:d2:ce:6f:a0:2b:d6:5e:
         bc:2c:dc:d9:11:14:dc:32:90:c7:cb:fd:34:64:60:e4:33:21:
         1d:8d:9b:14:2d:0f:4f:e4:f2:65:0a:82:50:99:ab:e8:08:60:
         a3:d3:24:8f:38:90:1c:97:0b:c3:9a:14:94:6d:ae:f8:b0:33:
         a5:0b:88:4a:c6:00:b2:53:ff:06:4d:a5:d2:1e:d9:88:42:77:
         74:3a:bf:f8:e3:ba:75:9f:66:ff:90:5a:0b:64:c2:57:c8:07:
         1b:78:7f:66:5a:ca:99:c2:f5:b5:af:78:08:8a:b5:64:ec:5f:
         62:89:c6:8b:26:ec:b8:a3:b1:15:1f:69:f8:12:5a:80:98:9e:
         d8:7a:13:11:1d:3e:83:62:ef:e0:0d:cc:ce:c1:48:d3:58:75:
         1a:12:ca:82:31:f3:cc:2e:44:e0:16:57:06:ff:e6:7c:cd:f6:
         b2:07:d2:67:c0:c3:40:96:8c:2a:f5:32:ee:57:f4:9e:70:1f:
         60:ef:b2:19:c1:de:70:e6:8d:62:39:f9:6b:aa:d0:29:d5:9e:
         72:87:77:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----