Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aff8b20fe002c6eb1b8d420be5376226ac7381bb.cer
File:                     aff8b20fe002c6eb1b8d420be5376226ac7381bb.cer (raw, json)
Hash identifier:          STR/1XOfuXbVTaJr/tapNrYtA36djcG8OeDoFQgf8tA=
Subject key identifier:   72:1D:4D:1F:E3:96:53:69:4B:B3:D0:04:54:82:3D:1A:BD:76:8C:7E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3B602
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/71acecec-fb75-4092-a179-f9a83cb9a118/aff8b20fe002c6eb1b8d420be5376226ac7381bb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/71acecec-fb75-4092-a179-f9a83cb9a118/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 22:04:19 +0000
Certificate not after:    Sun 22 Dec 2024 05:00:00 +0000
Subordinate resources:    AS: 272976
                          IP: 2803:5590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14923266 (0xe3b602)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 22:04:19 2023 GMT
            Not After : Dec 22 05:00:00 2024 GMT
        Subject: CN=aff8b20fe002c6eb1b8d420be5376226ac7381bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:26:dc:2b:78:11:d5:0c:0a:60:3c:a7:85:75:
                    cc:50:a6:42:f8:47:1f:ea:0e:46:d0:f2:09:17:05:
                    02:73:df:01:8d:22:ef:06:43:21:25:7f:83:9b:30:
                    d9:2a:d0:42:8d:59:fd:a5:18:46:81:e8:79:41:90:
                    cb:54:c7:b8:d7:9d:53:88:ec:e4:14:d0:6b:d5:fd:
                    8a:24:54:b1:f8:58:55:ae:d7:88:99:60:98:d5:b6:
                    bf:58:2f:c7:9f:96:36:03:f5:e0:61:0b:45:f5:b7:
                    e6:d4:ec:90:f6:df:e6:bd:fd:1e:43:b2:4e:38:9b:
                    0d:1f:bc:77:56:84:6f:4b:f4:75:09:13:c9:7a:d7:
                    54:d9:83:b5:3a:00:fa:6a:d1:73:29:8f:83:4e:1e:
                    c6:85:5c:33:38:cb:40:12:9e:b5:15:80:a3:28:16:
                    fb:80:f0:dd:10:f5:8d:dd:39:4f:63:f0:83:29:10:
                    7d:9b:d6:a5:ba:20:62:57:7e:60:39:e1:19:52:85:
                    00:69:3a:d4:1b:05:55:dc:05:d2:9b:0b:80:c6:6e:
                    fd:9e:35:5b:14:ab:ab:67:a0:b4:82:3b:a1:8a:02:
                    0c:d7:59:bf:ca:8d:13:c5:c3:aa:68:db:84:51:d2:
                    84:4a:85:ad:96:57:48:b8:5b:82:bb:e7:db:a6:27:
                    99:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:1D:4D:1F:E3:96:53:69:4B:B3:D0:04:54:82:3D:1A:BD:76:8C:7E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/71acecec-fb75-4092-a179-f9a83cb9a118/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/71acecec-fb75-4092-a179-f9a83cb9a118/aff8b20fe002c6eb1b8d420be5376226ac7381bb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272976

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:c8:e9:f5:5c:dd:d1:dd:71:c7:9c:9a:da:ae:3e:f8:5b:
         50:d2:c7:48:2f:f4:0f:66:78:96:06:7e:72:30:41:3c:73:c9:
         d2:cb:9d:36:32:59:b4:64:b6:40:d3:0c:be:24:a3:3b:ee:6b:
         a0:3e:c0:f3:51:52:12:17:e5:f9:a7:17:21:79:17:32:56:15:
         e7:f6:ee:bd:b5:83:2b:eb:f7:0d:9c:ec:4b:47:63:93:de:23:
         4a:2f:7b:61:3d:dd:0c:51:c3:2c:a1:6f:da:b9:79:54:d9:f5:
         25:e5:92:7a:27:22:41:0f:38:58:c9:ba:86:88:3f:27:1b:76:
         49:e7:c2:8a:ce:47:60:a3:21:a0:6d:04:79:ca:e8:10:47:eb:
         05:b2:ae:ae:4c:ff:47:4e:de:ca:c8:01:67:38:6e:e4:f0:de:
         85:a4:8a:65:60:69:63:dc:87:be:c2:d8:aa:16:03:b6:e5:c6:
         0b:66:1d:7e:82:88:78:58:2d:13:27:4b:96:58:36:06:6d:e9:
         be:3a:c7:cd:02:7a:45:78:f2:3e:79:18:fd:f4:60:83:e9:ac:
         9f:85:91:cd:c7:12:f4:ff:8e:57:d9:dd:58:68:14:9f:02:7d:
         de:9c:23:c8:24:79:a8:97:7b:9b:35:f6:d2:2a:55:7b:02:1c:
         a6:a8:2f:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----