Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd7aa7a6ffd8982d5a389fdd49084f9e2121aadd.cer
File:                     bd7aa7a6ffd8982d5a389fdd49084f9e2121aadd.cer (raw, json)
Hash identifier:          Y4w7CRDgHEkMXdObqYQ+DQ5dyNb22HciumovjLRtM6Y=
Subject key identifier:   80:9D:41:72:45:A5:7B:6C:B3:03:45:DB:EC:F7:C4:C7:03:00:12:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E866BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a767471-0f3b-4090-9253-8fd0c686e4ba/bd7aa7a6ffd8982d5a389fdd49084f9e2121aadd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a767471-0f3b-4090-9253-8fd0c686e4ba/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 17:54:22 +0000
Certificate not after:    Tue 18 Jun 2024 20:56:58 +0000
Subordinate resources:    AS: 271961
                          IP: 2801:10:1800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15230653 (0xe866bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 17:54:22 2023 GMT
            Not After : Jun 18 20:56:58 2024 GMT
        Subject: CN=bd7aa7a6ffd8982d5a389fdd49084f9e2121aadd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b6:34:9f:48:0b:5c:47:93:1f:68:10:18:54:
                    ec:ab:e6:95:3f:ff:d2:2d:01:49:9a:ce:e1:20:50:
                    ed:d3:5e:ce:03:8b:62:2d:09:15:58:80:3d:1d:09:
                    3e:f6:27:8b:de:7c:0e:62:43:38:54:fa:d5:40:41:
                    56:d4:67:4b:bd:4b:0d:ec:6b:92:c0:8d:57:70:26:
                    a6:2e:30:97:d5:b1:8b:20:5b:16:f9:75:75:b9:f2:
                    66:61:bd:bc:ca:ed:b6:ab:34:1b:12:a9:34:93:da:
                    b2:6b:2f:0a:79:99:2b:8e:fc:7d:57:5b:61:96:be:
                    dc:86:b8:76:09:08:65:44:7e:0c:11:ff:8b:26:8b:
                    3a:68:fc:bb:05:9a:5d:77:a6:55:2e:98:60:90:ef:
                    64:69:a7:b9:f3:21:1e:ee:e0:26:64:07:2e:d3:51:
                    f8:f9:9c:c6:25:8e:eb:fc:1a:84:cf:2b:15:3f:09:
                    7a:af:04:16:59:2b:11:ea:d1:cf:02:29:66:4d:ee:
                    07:38:bf:cc:7e:c0:f2:db:5b:9d:d4:ca:fb:70:72:
                    d3:51:e6:c4:13:94:18:7e:92:7e:91:e1:dd:a0:86:
                    6a:02:20:be:a8:1b:3a:aa:8e:0c:71:9e:19:94:6f:
                    04:24:8d:4f:cb:bb:74:99:f3:71:3d:3f:bc:82:91:
                    70:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:9D:41:72:45:A5:7B:6C:B3:03:45:DB:EC:F7:C4:C7:03:00:12:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a767471-0f3b-4090-9253-8fd0c686e4ba/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a767471-0f3b-4090-9253-8fd0c686e4ba/bd7aa7a6ffd8982d5a389fdd49084f9e2121aadd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:1800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271961

    Signature Algorithm: sha256WithRSAEncryption
         8d:1e:d9:72:71:8f:00:09:76:30:5f:6e:27:e2:67:85:ce:bb:
         18:9f:a4:2e:39:6a:d5:f4:20:cd:46:30:97:ff:88:dd:87:0b:
         1a:f0:b3:f6:c4:86:c1:43:80:da:bb:63:00:77:22:91:b4:36:
         1c:64:2b:16:5e:27:11:7c:88:95:bb:5a:42:95:c1:fc:0b:b5:
         29:87:8f:13:f5:48:ec:dc:37:7f:a0:ef:7a:cf:75:cc:a6:27:
         26:32:70:05:e9:09:3f:49:89:19:0e:07:1f:cd:b4:40:d2:0d:
         1f:4a:b4:a0:77:d9:20:9d:16:f6:c2:bb:e3:d2:75:02:58:05:
         c0:ce:f9:e7:ed:d2:41:ae:9e:d1:83:37:e6:0d:9f:76:17:a4:
         7a:bc:73:60:2c:0f:7b:22:46:02:8c:1c:b5:8f:f3:67:d1:c3:
         62:eb:08:e3:4a:73:31:0d:62:80:07:98:3f:f4:c9:ff:9c:ce:
         8a:a4:86:14:10:1f:42:0a:38:67:07:d6:b6:a8:ac:36:fe:81:
         a1:3b:0c:91:cc:ce:c7:55:f8:ed:f0:19:46:f8:ae:ec:ba:22:
         42:49:d9:e1:ef:35:53:a4:fb:eb:64:f2:a7:32:bc:91:23:ea:
         67:a6:90:08:57:b0:a8:58:20:3b:10:d7:ce:70:75:35:63:5f:
         25:b2:76:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----