Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc486a490b537783675972250b1d979e13d62040.cer
File:                     bc486a490b537783675972250b1d979e13d62040.cer (raw, json)
Hash identifier:          wtqtDb0ywvHI+zD3qkXfsh9TvSexkZkxZ9IyqlYgPrQ=
Subject key identifier:   E2:3E:4A:E7:A5:8F:B7:73:6F:DC:50:E8:CF:BE:50:AC:D3:17:D0:53
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1D88C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b4716ca0-61f0-4095-a9c0-3a5428c49d03/bc486a490b537783675972250b1d979e13d62040.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b4716ca0-61f0-4095-a9c0-3a5428c49d03/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 19:50:08 +0000
Certificate not after:    Wed 08 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 271874

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15849612 (0xf1d88c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 14 19:50:08 2023 GMT
            Not After : Jan  8 05:00:00 2025 GMT
        Subject: CN=bc486a490b537783675972250b1d979e13d62040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:15:7e:4f:4b:48:f5:c5:a2:79:76:cc:1e:b2:
                    38:97:c5:12:1a:f3:76:dc:6e:1e:ad:41:3f:ff:0e:
                    1c:ea:bd:6d:9d:10:06:e5:88:41:69:71:be:cf:28:
                    ef:27:81:b2:92:7f:79:7b:af:61:50:ed:36:8f:2e:
                    83:ee:7e:7f:3b:fc:9a:7c:20:89:8c:16:71:09:d6:
                    05:b4:03:ea:f5:50:58:12:b2:5d:29:90:89:95:32:
                    7e:fa:53:83:92:e6:51:58:2d:8e:54:16:4a:3f:59:
                    de:9d:1f:a4:62:d7:eb:64:5e:2f:b0:1c:d4:c9:9d:
                    58:da:62:6c:f8:f0:24:0d:61:c5:fc:05:59:69:da:
                    02:84:00:fe:16:d8:9b:d7:72:51:82:00:3f:9f:6d:
                    bb:3e:d4:5a:33:f4:0b:2e:b2:40:35:95:e6:58:05:
                    e9:20:6e:dd:03:2f:72:8f:50:d7:98:69:9c:4e:6f:
                    b8:8e:d9:d4:7e:05:76:e6:e6:15:c5:22:ab:a9:e4:
                    0a:61:6b:be:c7:b6:5f:90:12:ee:8d:b4:ab:bb:fe:
                    c6:d8:7b:d9:db:df:0c:a6:76:30:4d:03:fa:f0:e4:
                    ea:8a:8f:7e:1c:74:43:b4:7a:98:3e:1f:bd:47:da:
                    4a:83:60:68:e9:e8:19:89:43:58:00:87:04:84:3c:
                    7a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3E:4A:E7:A5:8F:B7:73:6F:DC:50:E8:CF:BE:50:AC:D3:17:D0:53
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b4716ca0-61f0-4095-a9c0-3a5428c49d03/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b4716ca0-61f0-4095-a9c0-3a5428c49d03/bc486a490b537783675972250b1d979e13d62040.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271874

    Signature Algorithm: sha256WithRSAEncryption
         bd:c1:02:a3:14:20:7b:68:6e:7a:7b:92:7d:83:62:1e:f0:9d:
         af:14:07:a2:07:c3:35:c2:36:74:df:59:13:49:f1:91:a8:c4:
         8b:77:b1:c2:d2:90:25:e9:d1:2e:ae:4e:28:59:cc:b3:27:ba:
         51:f7:30:93:88:ac:74:e2:d0:01:03:2c:86:ed:8f:f5:1a:15:
         4a:25:ff:47:fd:ca:73:51:25:28:59:34:ad:6b:50:70:80:0c:
         f6:91:5f:d4:de:20:1e:0b:08:a9:54:d8:fc:70:f0:96:1e:03:
         c7:e5:36:85:ce:7a:75:78:26:da:b4:d3:5c:d5:80:5c:c4:09:
         7d:0f:2f:45:38:c7:de:9a:d6:f8:9b:7c:6c:b0:38:44:b5:60:
         44:72:15:56:37:57:f8:c9:96:6b:e0:39:f0:b0:9d:bc:40:ba:
         9b:fa:83:a2:f3:bd:c5:e5:8c:4b:ff:7e:10:d7:68:45:4f:9a:
         fd:01:93:58:48:1d:13:26:bd:1c:b7:2a:95:e4:77:03:a1:09:
         e6:15:c4:3f:9f:7a:e7:ae:b4:50:62:ed:23:23:dc:7b:01:04:
         43:4c:76:6b:45:d2:99:ab:0a:39:d7:66:9e:ea:b3:df:7f:54:
         8b:7f:a7:5e:fc:e9:34:71:1e:1c:6f:d8:4c:eb:23:41:94:c7:
         df:31:12:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----