Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1a2d59229a10e0b6f73713bef944a3991dfd77d.cer
File:                     b1a2d59229a10e0b6f73713bef944a3991dfd77d.cer (raw, json)
Hash identifier:          csDiyFFe9KvpY3+rfJDr95TCJnkxPzWLOc0Vx+K8znE=
Subject key identifier:   6D:D7:BE:04:3A:16:D8:17:41:CA:A6:15:73:0C:E5:54:0C:D4:88:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101BDC5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3aa4b27-ff25-4fd5-aa7d-81b1ca22788b/b1a2d59229a10e0b6f73713bef944a3991dfd77d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3aa4b27-ff25-4fd5-aa7d-81b1ca22788b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 14:24:13 +0000
Certificate not after:    Tue 12 Nov 2024 17:18:22 +0000
Subordinate resources:    AS: 273106
                          IP: 2803:9190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16891333 (0x101bdc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 14:24:13 2023 GMT
            Not After : Nov 12 17:18:22 2024 GMT
        Subject: CN=b1a2d59229a10e0b6f73713bef944a3991dfd77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:5b:d4:1e:9a:45:ca:47:cf:6f:7e:98:fb:45:
                    cc:97:55:20:38:b8:d4:82:ea:0b:23:82:9f:35:eb:
                    ef:b1:a8:e9:01:23:6a:c3:51:f4:78:c3:af:27:8f:
                    22:43:b5:da:05:a8:96:64:14:45:13:ce:10:e6:ba:
                    2d:ad:b6:ad:e6:1a:ba:00:77:fa:45:0a:62:e7:01:
                    f6:e4:f8:e2:80:a6:81:4a:2b:7d:1a:e9:a6:d3:63:
                    22:43:77:3a:7d:39:af:59:e7:2d:1b:70:70:6b:57:
                    9f:d9:f8:eb:6a:a3:1c:89:f9:bf:db:6c:b0:1e:e1:
                    05:1b:39:51:23:33:42:9b:34:e2:f9:7b:42:a3:68:
                    37:6f:e1:f5:d7:15:55:08:2e:1e:3b:8c:80:fd:19:
                    e9:e2:d8:31:ba:dc:3c:9c:42:77:be:1e:61:85:a1:
                    67:96:0e:d5:c1:d7:02:31:6f:cf:9b:6e:e5:96:97:
                    87:c0:75:3c:15:fe:d1:65:de:d2:05:2c:22:6c:cc:
                    0c:29:a3:35:2c:88:d6:99:4e:85:48:58:c4:77:fe:
                    b0:c5:68:4e:17:66:58:12:97:ba:2e:57:6b:4c:27:
                    9d:88:2a:1c:7e:59:1a:89:48:7d:8f:ae:c0:81:49:
                    ea:e5:20:99:00:30:d0:8d:2d:ff:20:a7:97:d2:98:
                    2d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:D7:BE:04:3A:16:D8:17:41:CA:A6:15:73:0C:E5:54:0C:D4:88:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3aa4b27-ff25-4fd5-aa7d-81b1ca22788b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3aa4b27-ff25-4fd5-aa7d-81b1ca22788b/b1a2d59229a10e0b6f73713bef944a3991dfd77d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273106

    Signature Algorithm: sha256WithRSAEncryption
         61:69:67:70:db:e6:d2:87:64:32:25:01:fa:a7:40:b5:5d:3d:
         30:44:6d:22:34:84:7b:69:59:39:55:1a:59:32:47:50:a4:db:
         38:6f:c4:09:74:24:63:1d:97:b9:72:ba:a4:42:d7:78:03:3c:
         a2:b9:56:08:b3:28:2f:27:a5:49:f2:a9:cf:20:58:30:bd:8d:
         cf:d0:95:79:2b:d8:05:ee:b1:d1:d4:25:74:77:09:88:44:13:
         3d:84:6c:44:98:13:ce:43:07:73:e5:1f:ea:64:d8:02:50:32:
         83:0a:4a:da:e7:10:c2:4a:be:8e:0e:f7:98:27:1b:e2:ec:4f:
         0b:f1:21:c2:08:21:d7:53:98:05:95:73:90:1b:21:71:18:8d:
         64:65:68:cc:83:23:ae:db:8b:6e:a2:9a:cf:da:10:69:1a:7e:
         89:da:4c:3b:de:bf:66:1e:d8:3e:4d:01:39:bc:6a:b4:9f:c4:
         67:46:26:19:04:c4:6d:4e:6f:a1:51:7a:13:c3:45:87:9c:0d:
         86:0c:dc:0a:74:c3:5a:05:b1:5f:24:6a:8a:cc:79:d8:53:4e:
         36:94:78:f9:98:c8:fc:55:1b:65:f9:b5:e0:93:d9:70:a0:0b:
         2c:c7:ce:f4:d7:2a:ae:a1:83:6f:7e:36:dd:b6:7e:09:a5:4b:
         4d:b4:40:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----