Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb6b2cfd604ba7cffb5d9487f9ae4c58e4078a.cer
File:                     bfbb6b2cfd604ba7cffb5d9487f9ae4c58e4078a.cer (raw, json)
Hash identifier:          HZa5xIsrowm2R7VM/jED0b0gJcMzV3MV4S55lmzrwYk=
Subject key identifier:   66:6A:EE:21:FB:57:3B:B0:13:64:1D:26:43:D4:4A:3D:C5:7D:EC:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E749F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d781c5a-e81c-437a-8686-46dac9a521c0/bfbb6b2cfd604ba7cffb5d9487f9ae4c58e4078a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d781c5a-e81c-437a-8686-46dac9a521c0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 25 Apr 2023 20:58:48 +0000
Certificate not after:    Wed 22 Jan 2025 16:12:33 +0000
Subordinate resources:    AS: 270211
                          IP: 2806:3fb::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15157749 (0xe749f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 25 20:58:48 2023 GMT
            Not After : Jan 22 16:12:33 2025 GMT
        Subject: CN=bfbb6b2cfd604ba7cffb5d9487f9ae4c58e4078a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:f7:fc:1e:ac:d6:5e:33:1c:3a:e3:dd:68:
                    da:a1:76:a4:40:62:47:3a:d3:52:72:42:5f:6f:6a:
                    de:d4:6a:63:48:c0:15:67:e0:41:c4:a4:26:db:4e:
                    01:65:00:39:ee:c7:d1:da:ea:60:ff:82:1a:6c:50:
                    e3:71:d2:be:3c:ae:74:6d:72:3c:c4:ff:28:5f:da:
                    d1:47:a9:07:1a:8f:6e:3d:50:c9:e8:51:65:73:9c:
                    b1:dd:71:53:d0:4d:9c:ca:37:49:52:e7:bc:b8:27:
                    ec:fb:61:73:47:08:44:6a:dd:e0:e4:f6:2e:cd:20:
                    12:52:64:0b:f3:80:8b:0b:5d:89:5b:20:a5:26:08:
                    ca:48:7c:58:69:24:02:72:77:84:1c:f0:9f:e9:28:
                    5d:f9:ee:97:22:77:8d:67:ca:40:0a:21:e2:bf:79:
                    07:08:a1:ba:3f:88:23:c6:8d:bd:b8:05:c3:90:7d:
                    c9:ef:a7:62:6e:92:00:46:fd:3a:40:75:3c:4e:3c:
                    e5:de:0e:34:2a:2f:90:53:c2:c5:18:85:02:42:43:
                    f9:2b:5f:02:1f:7e:53:82:63:44:a9:82:6a:e0:80:
                    12:67:be:a1:a4:f8:66:c4:a3:c8:c7:18:a1:10:9c:
                    28:a4:30:5a:2e:8c:c4:cc:9c:5e:ef:91:a8:a8:85:
                    db:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:6A:EE:21:FB:57:3B:B0:13:64:1D:26:43:D4:4A:3D:C5:7D:EC:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d781c5a-e81c-437a-8686-46dac9a521c0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d781c5a-e81c-437a-8686-46dac9a521c0/bfbb6b2cfd604ba7cffb5d9487f9ae4c58e4078a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3fb::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270211

    Signature Algorithm: sha256WithRSAEncryption
         6e:88:cb:f5:a0:4d:df:f5:48:0e:e9:f3:f9:cb:04:08:78:f7:
         01:65:7e:6e:45:a6:a0:6d:a0:38:1f:f6:e2:77:61:c7:98:8f:
         fa:0a:ce:39:ec:71:d8:52:da:53:8d:63:da:73:6c:0c:97:f4:
         6f:91:f3:17:86:a1:c0:55:82:81:b3:80:5f:83:05:2c:7e:26:
         6c:8b:72:e3:67:47:48:9b:ce:c6:90:db:4f:20:30:ad:a8:55:
         6e:3f:68:9a:fc:2d:9d:a1:a9:f7:25:f5:a1:a5:e0:ff:bd:30:
         ab:a1:3c:42:78:af:d9:86:3a:2d:1d:b3:6c:f9:23:42:e6:03:
         de:df:9f:f5:28:ef:80:0c:95:6f:cd:5e:06:ea:fd:90:16:6e:
         0b:f6:62:d3:f2:ee:0a:2f:4a:e9:39:bb:49:a3:2d:a2:e3:e0:
         fe:e0:bf:09:99:18:3e:78:cf:f9:27:6c:2b:6e:c6:53:99:73:
         b3:c3:27:78:f5:29:5d:c7:0b:24:6c:e5:1a:a2:a9:12:9b:6e:
         76:70:94:73:a7:43:0a:3e:46:6e:ac:e1:59:5c:2d:cb:e2:fa:
         19:a5:43:a5:c6:6c:93:f2:6a:37:b8:d8:97:6a:2c:9c:bb:e8:
         dd:94:52:db:e2:5f:d0:d2:23:f6:dd:66:40:ca:c6:e1:cb:5a:
         b7:ee:04:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----