Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3a770eb73a360a46fb7de855fc95e2bee83938c.cer
File:                     c3a770eb73a360a46fb7de855fc95e2bee83938c.cer (raw, json)
Hash identifier:          l8fTUES6vrlZ+TaoJFOEt2JRevwZxFKRwLZoBKFcs5s=
Subject key identifier:   D4:AF:E8:DB:49:5A:D2:CA:5C:FA:40:D0:E9:37:17:9D:57:2B:05:F2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010FE123
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e554cb30-2a31-4e45-8430-18e36ebbeb1e/c3a770eb73a360a46fb7de855fc95e2bee83938c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e554cb30-2a31-4e45-8430-18e36ebbeb1e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 Apr 2024 14:48:22 +0000
Certificate not after:    Sat 31 Jan 2026 23:51:56 +0000
Subordinate resources:    AS: 270218
                          IP: 2806:401::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17817891 (0x10fe123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  1 14:48:22 2024 GMT
            Not After : Jan 31 23:51:56 2026 GMT
        Subject: CN=c3a770eb73a360a46fb7de855fc95e2bee83938c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:99:dc:c8:a2:f6:dd:a5:04:18:96:c6:78:d5:
                    a9:94:ca:4e:b4:dd:41:ba:40:4c:4c:31:72:67:36:
                    ce:ee:a7:d2:77:ac:cd:8c:78:a4:de:67:9f:be:d7:
                    a1:27:c3:71:b2:3d:4d:2a:26:3c:ca:1e:03:9b:35:
                    16:79:8b:f9:be:9e:b5:54:73:3e:c0:5a:f3:91:b6:
                    33:82:f3:46:ab:44:81:20:9f:19:89:dc:68:97:88:
                    db:1a:04:72:23:11:ce:cb:e0:1f:5b:8c:8c:85:a4:
                    76:cd:25:86:48:c9:ec:3c:fa:63:3e:59:9b:de:de:
                    e6:e3:b6:5f:99:6b:48:bc:22:3f:e3:26:06:e4:4a:
                    c6:58:af:66:b9:b4:18:3b:e6:5e:dc:fd:48:5c:06:
                    dc:f4:83:a5:51:6d:aa:dd:aa:4a:37:91:62:4d:ad:
                    73:5b:36:39:21:c2:1d:f9:6f:66:f4:12:00:47:5b:
                    6b:b1:a0:9a:61:61:48:4d:b5:5e:9b:39:99:ba:d8:
                    aa:b3:61:0e:0e:c1:16:6c:19:d3:e7:8a:74:f8:26:
                    2b:85:83:63:10:a8:87:05:6d:6b:af:40:c9:74:aa:
                    cd:11:b1:a7:a9:ca:9f:d8:e8:12:2f:08:c2:15:9b:
                    b0:f5:21:d7:95:fe:fb:2b:36:3e:79:3a:8f:f7:37:
                    19:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AF:E8:DB:49:5A:D2:CA:5C:FA:40:D0:E9:37:17:9D:57:2B:05:F2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e554cb30-2a31-4e45-8430-18e36ebbeb1e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e554cb30-2a31-4e45-8430-18e36ebbeb1e/c3a770eb73a360a46fb7de855fc95e2bee83938c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:401::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270218

    Signature Algorithm: sha256WithRSAEncryption
         99:29:66:1a:8f:bb:5e:a8:b6:93:6a:c0:78:7a:6f:19:f3:fc:
         e3:f8:bf:09:78:16:29:95:f3:f2:63:4b:82:a7:67:63:80:ef:
         21:31:41:54:5a:73:13:a1:2a:3a:95:f4:d6:90:ea:4c:29:2e:
         c7:fb:a5:5d:17:e7:97:7a:51:30:06:4a:67:65:2d:78:ee:f1:
         a8:81:7f:fd:bd:fc:5e:09:12:fa:0e:1a:c6:54:ce:b4:86:50:
         ec:18:b4:5c:b1:b0:39:50:7c:c0:c7:f7:c0:df:7d:08:f9:60:
         f3:55:c6:b3:22:6b:69:1a:32:a3:fd:cd:cf:84:f6:92:0f:fb:
         64:3a:5e:9d:a1:4c:2c:6b:da:dc:3e:6a:cf:13:4f:3d:ec:57:
         65:af:5a:fb:bc:50:dc:65:97:d4:c7:9f:37:c6:ce:28:d6:fd:
         97:f9:55:50:dc:0d:55:37:80:f8:73:a0:2f:10:93:eb:c7:12:
         cc:05:91:02:79:50:54:95:f3:5c:a0:5f:12:d3:d1:13:3d:96:
         7b:75:06:4c:bb:39:45:12:5f:20:ae:0f:e3:01:7b:7a:51:56:
         49:2d:aa:bb:b8:c8:9a:03:5b:66:c9:a5:8c:d3:53:0d:70:f0:
         bd:6d:81:9c:75:25:61:8c:7e:35:50:6d:f9:25:1b:10:f7:bd:
         b6:d6:1a:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----