Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a87d7cb3c6d0bfe93bd8ec426a01db32ac671858.cer
File:                     a87d7cb3c6d0bfe93bd8ec426a01db32ac671858.cer (raw, json)
Hash identifier:          PQPOoxSCwqVOQUoDcDlI5bmSSpV40BUlEuk/bglb1ac=
Subject key identifier:   36:02:90:1A:BE:2A:14:E5:55:EC:73:93:19:94:B3:D3:19:F2:63:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01070762
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ae9f50a5-ec34-4fe1-99d6-176098560439/a87d7cb3c6d0bfe93bd8ec426a01db32ac671858.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ae9f50a5-ec34-4fe1-99d6-176098560439/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 16:54:35 +0000
Certificate not after:    Mon 08 Sep 2025 01:41:02 +0000
Subordinate resources:    AS: 270193
                          IP: 2801:c4:3d::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17237858 (0x1070762)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 17 16:54:35 2024 GMT
            Not After : Sep  8 01:41:02 2025 GMT
        Subject: CN=a87d7cb3c6d0bfe93bd8ec426a01db32ac671858
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:95:90:74:ce:b1:a1:8c:18:94:d3:20:b7:bc:
                    ec:5c:cb:ff:d8:14:15:5c:a9:b8:d3:a0:0f:f9:52:
                    35:d9:a4:04:6a:e2:1d:80:84:60:61:d7:1a:ea:f1:
                    1c:36:c8:76:f8:e0:2c:9e:c7:1b:7e:7a:1f:02:c2:
                    df:41:2b:d0:41:88:2e:86:3a:93:f0:1e:98:90:0e:
                    84:cc:6f:ee:fa:37:77:c1:36:79:52:8a:e9:3e:d4:
                    66:3b:6b:73:6a:79:45:44:de:90:b0:99:4e:6d:6c:
                    64:f3:20:68:4f:1c:f4:4b:51:8e:52:d9:c0:38:76:
                    97:55:43:51:41:7b:00:f6:0b:29:4a:65:29:53:9e:
                    14:7c:7d:34:88:57:84:8f:d8:6f:fe:a6:9f:f2:7a:
                    4a:34:91:71:d8:74:de:f2:40:4d:38:61:95:68:e4:
                    57:77:b3:7c:50:33:9d:6c:03:b4:42:f6:cf:43:98:
                    cb:fc:90:25:a3:b8:57:a2:71:6d:a7:0b:7b:79:4d:
                    29:dd:24:85:0a:60:a8:a8:0a:cb:ec:ee:1b:8e:e8:
                    b5:43:38:20:9d:3e:5f:c6:9a:2d:df:5b:ae:ba:e6:
                    e6:94:23:f7:ef:31:ae:3e:0c:e1:e3:31:55:e2:7d:
                    f9:f6:e6:0a:f0:af:ae:c0:ae:41:88:8d:37:54:47:
                    3b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:02:90:1A:BE:2A:14:E5:55:EC:73:93:19:94:B3:D3:19:F2:63:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ae9f50a5-ec34-4fe1-99d6-176098560439/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ae9f50a5-ec34-4fe1-99d6-176098560439/a87d7cb3c6d0bfe93bd8ec426a01db32ac671858.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:3d::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270193

    Signature Algorithm: sha256WithRSAEncryption
         75:77:5e:8b:cb:a1:d0:e0:d9:d3:92:f8:ff:9f:d6:b3:db:bd:
         d9:04:3a:dc:8f:ac:82:01:da:9b:d4:b9:1e:fe:aa:da:a4:b4:
         ee:ce:32:21:ff:c9:0b:a3:86:9c:b9:94:a6:1e:1a:00:92:c6:
         70:73:27:ba:78:cc:2a:5b:3c:fb:f5:5c:29:eb:35:7d:a1:81:
         53:9b:21:ce:d5:18:ff:ec:8f:d2:b7:1f:f7:73:f5:b4:2c:1e:
         46:49:53:2a:5a:08:75:c2:c4:ca:14:13:04:32:5f:7d:7c:18:
         40:02:25:fd:44:6d:1d:2c:47:fa:67:fa:e9:f9:4c:fb:e4:c4:
         e9:f5:2e:6a:df:f8:fd:db:81:f7:49:27:9f:28:19:d9:fb:cd:
         f8:25:37:21:76:8e:da:59:f9:be:36:ca:8c:9c:91:32:a0:98:
         b4:87:f9:af:4f:be:fe:6b:b5:4b:4d:92:27:ee:23:9a:96:29:
         e5:21:79:68:a3:a4:de:c6:99:7f:5b:c7:69:d8:58:60:80:f9:
         ff:60:f9:1c:cb:52:8b:e8:0b:12:dc:bd:43:39:74:3e:d7:ec:
         86:7e:66:35:0f:d3:30:46:ce:4e:91:64:e5:5d:4d:cc:65:e9:
         9c:62:c4:2e:5e:ee:5d:db:7a:2f:fc:8d:91:f3:fc:22:e0:5b:
         4d:5f:34:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----