Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799.cer
File:                     acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799.cer (raw, json)
Hash identifier:          2RXkVJ4XZgYTup5oE1ZwWT8DFmhdKlu8yS66dFigSAM=
Subject key identifier:   0B:5A:41:3B:66:F4:AC:69:7A:65:C9:00:82:87:31:9D:C9:6E:91:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01006A78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/83cf75b6-f65c-49f5-aa71-dbe3597f9ca5/acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/83cf75b6-f65c-49f5-aa71-dbe3597f9ca5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 16:10:35 +0000
Certificate not after:    Sun 16 Feb 2025 06:00:00 +0000
Subordinate resources:    AS: 273120
                          IP: 2803:b850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16804472 (0x1006a78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 16:10:35 2023 GMT
            Not After : Feb 16 06:00:00 2025 GMT
        Subject: CN=acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:4c:11:1b:49:93:a4:22:dd:9c:e5:21:88:11:
                    81:1a:04:2d:6e:f5:cf:40:8b:74:dd:ac:cd:06:41:
                    34:89:2e:08:f8:a7:77:fa:f4:e7:aa:44:1b:3b:67:
                    86:4b:2a:1b:9c:7e:07:6c:2e:9d:5b:0c:4f:1c:8b:
                    d9:e6:65:7b:88:c7:87:2b:6a:36:67:67:c0:82:79:
                    b2:b3:bd:2f:1c:cd:b6:ac:be:91:9e:01:67:26:77:
                    ae:2c:24:e1:d9:c4:8d:c8:7e:a8:1b:12:a8:83:f4:
                    60:f6:a5:d2:e2:b5:b3:7f:f9:d4:a9:21:bd:9a:f6:
                    0a:dc:e7:27:a0:43:e9:30:f4:1f:8b:fe:c9:e3:43:
                    cb:7f:65:a9:9a:04:69:17:2d:2f:83:c2:9b:23:6b:
                    2b:bc:e3:1e:c7:76:41:cd:fe:03:fa:3a:1a:f6:a0:
                    74:b1:5a:a7:f7:20:7d:e2:fc:90:20:42:26:89:53:
                    f7:67:28:c4:40:f3:83:0c:ab:49:f7:7a:42:e3:12:
                    8c:8a:6b:0b:01:59:31:78:69:57:85:91:62:26:a7:
                    84:fe:33:58:68:b4:54:6e:b1:d3:ce:8c:7a:2f:7b:
                    a0:02:64:04:12:f5:91:07:42:1e:52:e7:40:1f:c9:
                    97:2d:a8:b1:ef:83:9a:19:d6:ee:b2:d0:be:a9:22:
                    ae:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:5A:41:3B:66:F4:AC:69:7A:65:C9:00:82:87:31:9D:C9:6E:91:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83cf75b6-f65c-49f5-aa71-dbe3597f9ca5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83cf75b6-f65c-49f5-aa71-dbe3597f9ca5/acd1c86fc8f6fb858cf28f07cdb9164c4d2a7799.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273120

    Signature Algorithm: sha256WithRSAEncryption
         c0:7c:3a:c2:d6:0a:dd:31:bf:37:3a:d9:2f:1e:70:3b:40:e3:
         f8:68:71:22:4e:57:02:61:64:55:2f:37:c6:32:ce:0d:75:06:
         13:17:e8:cd:8a:c9:a1:ad:0b:7e:bc:36:35:31:99:c6:55:dd:
         4a:b5:55:69:83:c2:e6:2e:b3:a9:6c:37:0f:55:bb:67:51:70:
         99:21:d0:9f:19:b2:0d:ba:6d:03:8e:57:e0:32:31:ca:ee:87:
         d0:e5:77:0d:d5:b6:16:b5:03:7c:24:45:4f:f4:68:eb:d4:1e:
         a6:b3:06:df:02:e2:45:c8:53:56:0d:bd:43:9d:6f:cf:db:ab:
         84:2d:d7:68:61:aa:d8:97:43:87:76:0d:22:8d:0a:f5:5c:4f:
         c8:02:ea:df:85:e9:89:61:09:6a:49:f9:44:f2:06:78:67:fa:
         d4:39:ec:36:73:81:9a:84:2a:58:24:21:4c:9e:7a:a7:01:ad:
         9f:9d:89:da:cf:b7:9e:95:f8:e8:b6:d0:3c:1d:5b:c2:a2:68:
         f3:b6:c4:52:ee:c2:77:b9:4d:b2:5e:96:51:96:d3:fc:7e:d2:
         c8:8a:15:a5:1f:ce:64:c8:3e:66:40:3b:6b:ee:05:bf:77:56:
         7a:cb:8f:d9:b7:50:66:0d:6a:4c:3d:4c:ec:9a:b2:55:3e:1e:
         8c:8c:fc:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----