Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2fa7c44293d0ae97ada0adbcdaec912e693dc82.cer
File:                     c2fa7c44293d0ae97ada0adbcdaec912e693dc82.cer (raw, json)
Hash identifier:          gSset3sUQy41H4chG516iZLNkMkK7MQ9stNb9xt36EI=
Subject key identifier:   EB:52:9F:EE:4E:40:45:A0:AC:6C:B4:8E:74:36:A1:7F:6D:48:DA:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100BFBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/31a9a06f-e9da-42e2-8993-b91cad833c0c/c2fa7c44293d0ae97ada0adbcdaec912e693dc82.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/31a9a06f-e9da-42e2-8993-b91cad833c0c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 12:02:08 +0000
Certificate not after:    Mon 16 Jun 2025 17:48:50 +0000
Subordinate resources:    AS: 273060
                          IP: 2803:a790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16826301 (0x100bfbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  9 12:02:08 2023 GMT
            Not After : Jun 16 17:48:50 2025 GMT
        Subject: CN=c2fa7c44293d0ae97ada0adbcdaec912e693dc82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:10:32:32:ce:86:99:d3:3b:31:47:e6:86:
                    28:a2:0f:18:cb:47:c6:34:1c:5d:42:20:26:99:94:
                    8a:a9:ab:05:cd:02:af:2f:14:2b:bd:f8:cc:aa:f3:
                    b9:bf:c6:b4:60:43:09:52:92:5e:b1:78:2f:09:f2:
                    17:95:96:c9:d4:0c:ea:30:05:13:4e:51:fb:0a:5f:
                    20:5d:b5:3b:b9:d5:37:7e:a8:f6:b4:7b:a0:7e:dc:
                    00:e8:d4:3b:4c:d5:93:70:63:58:0c:42:9c:ef:04:
                    4b:89:fd:2c:d0:21:55:dd:0b:74:4f:af:90:ca:32:
                    97:e4:b5:ac:4c:e4:a1:79:03:28:33:fd:b2:23:8c:
                    c7:0d:c8:08:b1:5c:23:fe:6e:e6:1c:31:6c:a0:d1:
                    9d:d9:9a:ae:84:f9:7c:f9:80:28:bc:a1:da:87:4e:
                    f1:c0:2d:da:78:f2:ea:be:7a:14:05:4b:5c:ed:4c:
                    6c:93:2a:62:39:0f:be:ae:af:7d:0a:a9:b7:50:da:
                    6f:62:af:e5:e2:2c:2b:60:11:06:09:3a:05:db:c8:
                    9a:72:1c:be:4a:9c:35:b6:21:32:8b:cf:dd:14:89:
                    5b:c6:a4:a9:b5:0e:68:46:47:ce:28:81:da:11:b1:
                    ea:c3:92:4f:61:e7:5b:0c:bb:3c:87:67:2e:61:04:
                    04:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:52:9F:EE:4E:40:45:A0:AC:6C:B4:8E:74:36:A1:7F:6D:48:DA:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/31a9a06f-e9da-42e2-8993-b91cad833c0c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/31a9a06f-e9da-42e2-8993-b91cad833c0c/c2fa7c44293d0ae97ada0adbcdaec912e693dc82.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273060

    Signature Algorithm: sha256WithRSAEncryption
         ba:a2:02:bc:b8:a4:d0:e2:d5:7b:e8:0f:62:12:92:cd:b9:3e:
         c2:17:b2:c6:c3:00:b8:62:42:06:62:89:0e:79:da:ba:17:46:
         03:24:af:3b:bb:c6:0a:85:7f:2e:fc:b6:a5:8a:ce:06:a1:4c:
         35:87:52:21:13:cc:9c:44:db:ba:84:12:52:73:d1:13:b9:d1:
         3c:d7:42:3f:66:ac:75:e5:cd:3e:71:47:ea:f4:bd:ff:0d:77:
         a7:8f:a5:3f:5b:c9:ae:4c:33:08:80:6a:b0:2d:35:70:f0:c1:
         18:86:6b:4a:69:39:85:c8:e9:12:fa:cc:39:4d:3a:48:e8:99:
         10:a5:f0:2c:83:e2:6e:ee:65:a1:c7:f2:86:50:e6:d6:a8:aa:
         b8:8d:90:1f:8c:fd:db:f3:92:79:2c:ee:59:c4:6e:26:7c:89:
         bb:74:b9:f7:e0:44:20:ee:d9:29:df:59:c0:53:db:94:0f:d8:
         4d:7d:97:ab:78:ec:e7:8d:bc:d8:0e:28:29:a3:95:0a:a3:04:
         60:38:b3:76:2b:68:2f:6b:40:f3:da:2c:5c:04:af:4f:b8:15:
         63:61:a6:58:e1:9f:a1:eb:a4:ae:8d:6c:a6:37:c1:a2:d4:7c:
         b9:10:26:d7:0f:8c:b6:da:e8:89:ce:01:72:d8:51:ad:c0:80:
         0a:08:e6:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----