Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ad065aa23b9d845c69244ed137643f2db242863c.cer
File:                     ad065aa23b9d845c69244ed137643f2db242863c.cer (raw, json)
Hash identifier:          CaB9R4kaAgZD6KQEsKy2LbsLM66yISmav7eLoQ9sudA=
Subject key identifier:   DB:33:74:B5:93:46:27:19:52:C1:C9:26:C0:D7:2F:F4:50:AD:5F:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F08422
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0a7af075-cc3f-466b-b50f-7bf5bf969c3c/ad065aa23b9d845c69244ed137643f2db242863c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0a7af075-cc3f-466b-b50f-7bf5bf969c3c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Feb 2021 16:13:16 +0000
Certificate not after:    Tue 26 Nov 2024 16:14:08 +0000
Subordinate resources:    AS: 273030
                          IP: 2801:17:6800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15762466 (0xf08422)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 25 16:13:16 2021 GMT
            Not After : Nov 26 16:14:08 2024 GMT
        Subject: CN=ad065aa23b9d845c69244ed137643f2db242863c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ed:1d:66:f4:6d:b8:68:88:e1:7e:04:cf:ba:
                    16:c5:9f:ef:8a:eb:5f:e7:83:f9:4d:69:4a:1e:10:
                    db:23:17:e9:9f:7d:1e:78:79:19:27:a4:ec:d4:61:
                    7d:7e:c4:58:c0:24:5e:85:3d:ad:1a:d5:be:61:1a:
                    e7:a3:54:dd:1e:59:b4:77:a2:cb:95:c5:74:28:95:
                    0d:73:e6:94:f5:42:ac:90:97:59:c0:c9:02:7f:9f:
                    47:b0:b1:05:f7:4a:9d:d5:6a:b7:ed:31:3e:84:c1:
                    49:72:51:10:81:9c:b3:73:ac:d6:39:ce:a2:9b:9b:
                    b8:a5:b1:13:f4:71:6a:48:39:2b:3f:5b:ff:3d:d3:
                    cd:c7:81:89:c9:f6:2e:a1:9f:a2:33:11:9d:5c:ea:
                    eb:a8:63:2b:26:6a:31:92:59:43:a1:41:62:17:f6:
                    97:6c:6c:fe:e5:a1:3f:a3:0b:46:37:36:a6:f5:c9:
                    66:66:70:42:e9:62:fb:3c:ff:73:66:20:32:6f:fe:
                    e6:7f:bf:85:eb:e8:9b:52:20:99:de:06:c4:ff:e8:
                    e7:f4:39:94:2f:53:b1:d4:73:48:d5:3b:8c:d7:dd:
                    12:23:bf:fc:d0:72:75:e1:06:a0:05:f1:6e:0b:d4:
                    c0:ae:f0:92:1c:33:16:9a:71:10:ec:05:94:ff:b4:
                    e4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:33:74:B5:93:46:27:19:52:C1:C9:26:C0:D7:2F:F4:50:AD:5F:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0a7af075-cc3f-466b-b50f-7bf5bf969c3c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0a7af075-cc3f-466b-b50f-7bf5bf969c3c/ad065aa23b9d845c69244ed137643f2db242863c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:6800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273030

    Signature Algorithm: sha256WithRSAEncryption
         ad:06:ba:a3:00:2f:11:54:55:f3:86:4f:56:b1:e5:60:23:e1:
         84:31:72:ee:e8:26:03:18:25:6b:4b:1a:57:4a:c8:95:82:28:
         26:62:f6:9a:49:22:59:22:dc:d8:69:0d:0a:41:00:94:8f:8d:
         90:0f:de:1a:b6:78:1d:8a:c2:22:3d:0f:0c:64:a0:e1:7a:10:
         c4:00:7a:70:d1:e9:8e:d3:eb:96:4c:4f:e8:7a:f3:a9:43:3b:
         d5:23:50:09:34:ca:f2:6f:e3:43:05:f1:18:70:7d:0e:69:66:
         50:33:d3:e9:4a:05:76:b6:ca:1a:8f:b8:17:9e:5d:b6:f2:60:
         18:6f:4e:86:7b:11:57:b2:1e:40:ec:75:72:ff:3d:8b:ad:e5:
         13:76:e4:99:a2:3a:84:14:e6:a3:85:28:d0:1b:61:a2:7d:07:
         32:54:21:49:c0:ea:88:88:06:0d:0b:b7:74:3d:72:10:ae:c5:
         77:18:74:86:84:af:b6:f9:f5:d8:5f:27:1b:58:95:5c:52:83:
         ef:56:c4:4b:d2:06:04:56:5c:70:fa:76:0f:0a:a4:da:18:22:
         1c:05:44:d9:03:21:d0:0c:b8:dd:88:a5:af:4e:d1:7a:ec:34:
         78:5b:58:89:6d:4d:fd:76:bf:27:8d:5f:40:67:e7:d7:c0:d2:
         15:f1:14:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----