Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a426d689940d9e03514165e611ec984905b26e10.cer
File:                     a426d689940d9e03514165e611ec984905b26e10.cer (raw, json)
Hash identifier:          YUccirfHdjj72+saZJPmKD+H7QxEdpI84shHg8paaq4=
Subject key identifier:   A7:C5:C1:C1:9C:20:58:75:D8:C7:BD:16:92:D8:DC:27:14:28:BC:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFD49F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4e625a94-c340-4550-8487-7977db9d8999/a426d689940d9e03514165e611ec984905b26e10.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4e625a94-c340-4550-8487-7977db9d8999/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 16:00:50 +0000
Certificate not after:    Fri 22 Aug 2025 14:59:09 +0000
Subordinate resources:    AS: 272000
                          IP: 2803:4910::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16766111 (0xffd49f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 31 16:00:50 2023 GMT
            Not After : Aug 22 14:59:09 2025 GMT
        Subject: CN=a426d689940d9e03514165e611ec984905b26e10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:38:49:33:3e:68:85:cf:89:17:7c:39:89:96:
                    85:08:18:e6:96:e6:39:42:08:c3:44:ad:6d:05:c8:
                    7f:ba:dd:25:a5:82:91:06:a5:ec:55:2f:ca:50:df:
                    3d:d1:8d:19:fa:37:00:9c:23:96:5c:b0:75:eb:16:
                    c6:0d:54:9c:b9:5c:eb:99:28:c3:76:f7:d0:d3:62:
                    8b:4b:96:0c:8c:5c:f1:33:9d:5c:5a:85:ca:a8:a5:
                    94:72:92:5d:f8:04:16:26:e2:f7:f7:e0:08:fe:7d:
                    ba:3f:6d:e9:9b:cb:18:7f:84:6e:c9:52:b5:fc:f0:
                    6b:30:72:d7:17:53:41:fb:31:22:13:3a:c4:14:97:
                    83:06:01:bf:19:7f:83:4e:df:74:5f:c0:5d:89:47:
                    5b:ec:c7:2c:a7:71:27:54:e1:4d:5f:33:c0:49:ca:
                    3d:bf:3b:46:be:28:d0:b2:af:66:58:23:60:67:6d:
                    f4:5a:db:c8:ee:d5:5d:49:b1:cf:2e:c8:c8:ba:8f:
                    0f:92:b7:cc:a9:bc:d2:2d:38:ca:bd:5e:90:9d:ab:
                    51:0f:0d:4c:4c:92:09:2c:fc:eb:ff:ca:6a:d5:9a:
                    af:3a:7e:e2:d5:78:f2:d0:a6:30:33:da:79:cd:b6:
                    4b:c5:d9:aa:13:bf:66:7e:ab:66:7e:84:83:c3:51:
                    97:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C5:C1:C1:9C:20:58:75:D8:C7:BD:16:92:D8:DC:27:14:28:BC:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4e625a94-c340-4550-8487-7977db9d8999/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4e625a94-c340-4550-8487-7977db9d8999/a426d689940d9e03514165e611ec984905b26e10.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272000

    Signature Algorithm: sha256WithRSAEncryption
         aa:33:e2:96:bc:21:6c:46:ce:36:c1:f4:f8:31:f8:8e:00:e9:
         8a:b5:e5:0f:86:57:68:f3:b0:4f:7f:90:02:b3:c4:44:b5:c9:
         98:ff:d4:3f:b1:16:aa:25:63:7b:e9:61:f2:9d:10:57:9f:c4:
         00:a1:6e:31:b9:c9:3d:cd:27:86:ad:b2:d2:31:37:d7:59:db:
         9e:51:d3:e8:40:1d:40:30:cb:b0:6f:5c:30:fd:62:da:17:de:
         cb:e9:24:d0:cc:99:52:97:a5:b2:7a:8b:d7:12:4d:d7:74:8f:
         ed:e7:39:2d:85:8c:d7:75:0f:2b:15:16:81:6a:df:45:52:4c:
         f6:06:56:a4:c4:a9:e4:4d:22:e7:fe:5d:37:82:0e:90:2f:02:
         64:a7:c2:c4:e8:2d:e5:76:74:18:de:9f:29:cd:16:22:18:3f:
         8f:23:d7:ad:dc:bc:d2:60:fa:6f:4a:bd:be:31:9a:dc:28:a2:
         eb:02:64:fb:e5:03:0b:79:75:f9:1f:1b:f0:44:d3:2b:32:2c:
         95:b7:91:f2:14:44:2c:b5:e0:7b:9f:d4:3e:b7:33:ed:34:38:
         93:5d:f5:aa:1f:f0:16:93:b0:c8:76:48:52:6f:ae:a7:b8:47:
         62:6e:0a:4a:18:6d:40:53:52:bd:d1:39:b0:e9:45:58:c4:81:
         39:e3:5c:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----