Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.cer
File:                     ab373e07fc1eef07e09092b13bd9e2e3753cca7f.cer (raw, json)
Hash identifier:          ALa/a6EMiuiCvmwYpzdMKZghvNxpaB258Xwn4gavOiE=
Subject key identifier:   88:91:64:6E:0A:A3:34:DA:50:A4:6E:87:C4:42:ED:55:A5:3C:6D:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F15572
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 14:56:15 +0000
Certificate not after:    Sat 05 Apr 2025 21:55:46 +0000
Subordinate resources:    AS: 273019
                          IP: 2803:3c90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15816050 (0xf15572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 14:56:15 2023 GMT
            Not After : Apr  5 21:55:46 2025 GMT
        Subject: CN=ab373e07fc1eef07e09092b13bd9e2e3753cca7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:4d:b5:81:8c:7c:25:22:6d:88:bc:af:a7:a2:
                    b2:cf:89:b6:a4:9f:c2:95:6e:de:a7:e7:c3:99:bf:
                    95:71:13:96:08:3a:c7:3f:9a:21:06:57:4c:84:7d:
                    29:1d:aa:64:e5:75:6f:17:03:0d:a6:d7:65:f6:1e:
                    b6:87:68:5d:72:0a:11:8f:9e:25:5e:9a:3f:5c:58:
                    f8:f4:b9:85:6e:3e:bc:94:9a:db:d3:08:9f:40:36:
                    66:e5:29:a7:66:de:96:dc:16:61:46:7a:7e:a0:9d:
                    83:49:90:df:d0:8f:3c:61:8d:73:66:e5:36:e5:8f:
                    47:d7:46:b9:79:4e:da:bb:1f:22:4e:19:e2:43:41:
                    6d:4f:67:54:89:a1:89:f9:00:29:ed:13:ae:0a:ec:
                    a6:99:08:24:5e:bb:b1:1e:e4:72:d9:e6:71:d3:49:
                    d4:c3:72:b1:fe:78:fc:4c:1b:cd:c5:d3:92:d5:7d:
                    70:70:18:69:cc:7b:75:b0:44:58:2c:e7:e9:e2:27:
                    28:d4:f8:aa:28:05:ee:79:ec:a1:c2:e4:99:32:46:
                    ed:8f:1a:63:02:0e:ee:1e:a3:54:4e:e8:60:fd:c8:
                    31:b1:3c:7b:69:ad:bf:fe:ba:0f:1b:fb:43:90:57:
                    7b:e8:f7:c8:5b:41:53:c2:90:10:80:fc:d7:d5:3d:
                    37:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:91:64:6E:0A:A3:34:DA:50:A4:6E:87:C4:42:ED:55:A5:3C:6D:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02b09171-2e77-4579-b8bc-d18f56e768df/ab373e07fc1eef07e09092b13bd9e2e3753cca7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273019

    Signature Algorithm: sha256WithRSAEncryption
         af:af:87:98:a0:3f:35:8f:39:34:80:1c:39:02:57:b9:0e:42:
         1b:28:77:9b:6f:a0:f6:79:df:d3:6d:0e:a6:e0:97:0d:36:ff:
         be:7a:4c:21:9e:cf:ed:b6:87:5e:11:e9:46:6c:ae:6e:94:8b:
         40:92:0f:40:84:21:be:ef:26:47:73:13:92:c9:db:5c:58:c6:
         32:5d:bc:ee:df:81:72:d7:43:08:23:0b:39:2a:ba:bf:f7:ca:
         3b:8f:bd:bc:d4:28:04:ce:3a:99:a3:c9:30:d5:7f:ba:d8:32:
         41:56:60:db:da:df:4e:02:b8:61:06:fc:6e:93:a8:67:75:6f:
         03:e5:3b:a2:9d:3c:ee:89:c5:c6:a7:37:25:5f:4a:a7:a8:7a:
         9b:95:05:7e:33:73:10:b6:cb:a7:c7:08:77:dc:ff:59:d6:fd:
         0c:3b:63:3a:e4:38:96:43:fc:bc:37:31:83:b4:0c:c5:3f:ea:
         33:4f:1b:f4:0c:bd:5b:16:b2:b7:30:b1:d9:3c:e2:81:2f:e7:
         98:ac:42:7f:80:2b:12:94:b8:e3:31:eb:a7:12:5a:dc:37:78:
         94:66:4a:3b:ca:e7:58:f4:ec:b1:fe:b7:b9:d7:5a:a2:90:bf:
         a2:7e:cb:de:64:00:07:c7:12:2b:ae:ac:79:d4:6e:9d:db:2c:
         76:bb:f9:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----