Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ae946cc9c707e5ce6195524f720cf4743e0df128.cer
File:                     ae946cc9c707e5ce6195524f720cf4743e0df128.cer (raw, json)
Hash identifier:          QSYUZH9BcJNSGqX6ptmOm0h0oe2JPtRv/Icn0O7kEmc=
Subject key identifier:   E0:C9:83:E4:EF:EB:7E:D3:0D:9B:A5:50:DF:0A:58:BF:FA:CB:4C:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4183E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/ae946cc9c707e5ce6195524f720cf4743e0df128.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 06 Aug 2023 04:46:47 +0000
Certificate not after:    Sun 25 May 2025 12:51:57 +0000
Subordinate resources:    AS: 270190
                          IP: 2806:409::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15996990 (0xf4183e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  6 04:46:47 2023 GMT
            Not After : May 25 12:51:57 2025 GMT
        Subject: CN=ae946cc9c707e5ce6195524f720cf4743e0df128
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:c4:eb:b8:d9:fe:f2:8c:02:04:09:61:2c:9e:
                    0b:00:64:a1:6a:8a:6c:1f:03:aa:45:1c:cd:39:76:
                    27:cf:02:77:4d:41:1f:21:e8:56:21:29:20:85:7b:
                    89:d7:fc:d8:7d:ac:03:98:70:73:2d:15:d4:19:b8:
                    49:a2:15:fd:5a:7f:84:07:88:35:d7:e9:fd:9d:57:
                    f3:50:e6:10:53:f3:d6:a6:56:eb:23:23:31:ee:fc:
                    e1:51:f2:37:a8:bd:88:ed:9c:8e:2a:1b:bd:1b:21:
                    3f:5f:8d:ef:e6:09:5e:55:24:11:42:01:59:39:39:
                    48:9a:29:de:ee:7c:0f:d0:42:c5:04:f0:d4:d5:14:
                    dd:39:9f:2c:36:f1:18:8b:f2:c0:e3:10:c9:a4:9b:
                    8c:e4:d7:02:4c:25:0d:79:17:e0:36:8c:9b:f1:7b:
                    fd:34:96:9b:c7:1a:02:09:bc:f8:76:97:91:ef:09:
                    09:35:38:0c:7d:22:7a:98:62:88:b6:9c:27:2a:6b:
                    6a:24:a4:11:41:b8:4a:f3:01:c8:8c:75:9f:fd:99:
                    c6:51:dd:d3:c8:51:01:2f:80:55:c2:1d:cf:88:c0:
                    61:e0:c3:3b:d2:97:a0:cf:8c:83:67:af:14:d3:bd:
                    ef:41:fd:c4:40:58:d7:9b:6c:aa:38:91:e7:05:97:
                    02:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:C9:83:E4:EF:EB:7E:D3:0D:9B:A5:50:DF:0A:58:BF:FA:CB:4C:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8ff43340-66a0-4919-8cbf-4d14ffc22b0b/ae946cc9c707e5ce6195524f720cf4743e0df128.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:409::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270190

    Signature Algorithm: sha256WithRSAEncryption
         a8:2a:5d:23:6d:da:e8:a4:d8:c2:ce:5b:e8:42:d7:30:22:d0:
         01:7b:eb:73:73:d7:0a:23:1a:d4:13:f6:6b:15:e0:15:1a:68:
         96:b3:cb:d1:13:ad:bb:d8:74:30:98:2e:52:3c:ef:ca:af:6f:
         6f:23:bc:82:ce:e8:63:9e:8d:16:6a:7f:e0:ee:52:17:fb:b0:
         0d:e5:d9:cd:04:41:bd:77:d0:66:cf:ad:cb:24:11:d4:6f:6d:
         3e:34:0a:18:f9:31:1e:1d:f2:ba:d9:95:6b:48:65:4a:ba:f1:
         e3:58:2f:56:3e:93:71:89:8f:1e:3f:e4:17:7f:39:03:80:a0:
         87:87:0e:9f:97:69:b7:98:32:64:76:24:0a:5a:97:68:bb:c1:
         09:1b:ba:9c:a9:71:68:28:e7:5a:f5:22:52:9d:f4:89:07:14:
         be:06:48:0f:c7:21:66:06:b3:99:c1:73:0c:90:3d:d3:82:24:
         23:7d:1f:08:f3:dd:9d:43:20:62:0f:04:43:39:ad:74:da:b5:
         39:af:34:05:a1:35:2c:2b:cb:3c:d7:2c:28:b9:77:e3:bd:fe:
         de:ff:35:e4:d6:cb:13:ef:b0:9a:36:24:72:2c:65:f4:0f:bb:
         79:cb:b5:9f:e7:3a:c0:70:40:9c:08:ae:2a:d1:e8:81:d3:54:
         e8:03:e3:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----