Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2a4ad353ed42252e98ec5f03fe3e0365ef9cd54.cer
File:                     a2a4ad353ed42252e98ec5f03fe3e0365ef9cd54.cer (raw, json)
Hash identifier:          EG7GpfCfGW0AJIURvk92mlzgkv2vLeSM+6bikH84r1k=
Subject key identifier:   33:77:C1:F2:70:55:1E:CD:3A:3C:85:7D:F7:BC:69:1A:8D:92:9B:F0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01019537
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a5b56438-eb72-4482-b3d0-dab321dad96c/a2a4ad353ed42252e98ec5f03fe3e0365ef9cd54.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a5b56438-eb72-4482-b3d0-dab321dad96c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2023 20:03:58 +0000
Certificate not after:    Mon 08 Sep 2025 17:17:07 +0000
Subordinate resources:    AS: 273123
                          IP: 2803:450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16880951 (0x1019537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 20:03:58 2023 GMT
            Not After : Sep  8 17:17:07 2025 GMT
        Subject: CN=a2a4ad353ed42252e98ec5f03fe3e0365ef9cd54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c1:a5:9d:66:b4:9e:4e:7a:79:f0:a0:fd:e6:
                    e8:18:89:d9:8f:40:86:6f:f7:2d:91:31:d8:36:ff:
                    46:67:e8:0f:9c:34:31:b6:d0:50:b8:69:97:ae:93:
                    a3:1c:87:c1:f4:af:b1:3e:07:f6:36:ef:42:5a:51:
                    c5:88:83:63:4a:52:76:74:56:41:56:0f:bb:48:51:
                    6e:20:85:a5:04:35:77:f3:ba:6d:40:d1:a2:e7:47:
                    fd:de:d1:22:bc:9c:cd:ff:e3:6d:f5:f5:c2:71:d1:
                    47:69:a7:e0:9c:56:e3:09:9b:00:5d:8d:ea:74:10:
                    c6:6e:1c:93:07:ec:d3:9a:de:6e:db:5f:c2:82:15:
                    b0:65:38:97:db:25:43:85:d8:29:80:61:46:3a:2f:
                    56:79:27:57:9d:89:38:41:d2:07:61:1e:fe:cf:05:
                    e6:d5:af:51:90:c3:c3:8f:aa:fd:ca:fb:94:88:99:
                    77:0e:77:ad:d7:fa:18:f9:a5:e1:a5:bd:e8:01:3d:
                    a8:da:3a:5e:27:1b:1a:62:b9:01:e0:ea:f1:a6:39:
                    2e:a8:84:3b:4c:52:5f:4d:6a:9e:78:c0:72:ac:fd:
                    61:2b:2f:e2:a2:48:0f:90:60:92:7b:f4:54:a6:a2:
                    e0:d4:70:cc:4f:4b:0e:46:a2:69:fb:cd:a3:58:ba:
                    fb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:77:C1:F2:70:55:1E:CD:3A:3C:85:7D:F7:BC:69:1A:8D:92:9B:F0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a5b56438-eb72-4482-b3d0-dab321dad96c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a5b56438-eb72-4482-b3d0-dab321dad96c/a2a4ad353ed42252e98ec5f03fe3e0365ef9cd54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273123

    Signature Algorithm: sha256WithRSAEncryption
         c2:42:2d:19:e1:d3:e5:3b:f0:15:23:b4:bf:6b:5c:49:ca:6e:
         96:c7:4b:23:18:84:df:d0:b9:44:9b:c2:be:0c:64:8c:b5:5e:
         e6:c3:31:2f:98:b2:18:80:b9:5c:be:99:b1:de:ca:35:f0:40:
         0e:48:43:1f:a8:34:ca:81:b2:1e:7b:13:22:32:17:c8:5c:8d:
         8e:71:19:b8:79:b9:77:ef:a6:c1:c8:69:81:9d:aa:83:8d:64:
         1b:2b:c9:15:71:fa:6c:64:4e:8d:19:26:f6:f4:7d:34:0a:55:
         d9:74:e1:f1:ab:cc:32:50:a7:00:83:54:a6:7c:67:55:68:37:
         d4:9c:0a:98:8c:7f:ac:71:35:1c:97:53:15:d8:31:5a:43:39:
         44:67:1f:07:0a:ad:f8:c5:f3:b1:2c:33:89:73:42:eb:1b:7a:
         5e:6b:de:fc:30:57:8f:e8:ae:1e:77:1d:38:45:3e:89:4f:a3:
         f2:2b:b5:e9:25:21:eb:b5:ad:85:48:6f:30:f6:59:f4:f2:68:
         d2:1f:5f:8d:65:a1:dc:8d:d2:cf:a3:d0:15:a0:72:e1:26:1e:
         0e:6b:70:15:94:df:b5:ca:82:e3:5e:54:82:00:59:70:eb:ab:
         5f:c4:17:55:2a:5a:fd:30:a2:62:a4:38:fb:60:5a:51:45:13:
         6e:52:36:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----