Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cad0e33585eb55c64673942a5a6b8d23b15c1ba7.cer
File:                     cad0e33585eb55c64673942a5a6b8d23b15c1ba7.cer (raw, json)
Hash identifier:          jdrITCDbgrU6HWEAdqxEGDn4MKv4pu3dFJp04EylEhQ=
Subject key identifier:   5E:3B:63:2C:82:18:AB:C1:0F:19:51:AA:09:01:C8:1B:EB:53:5A:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB55C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/81018eac-d2a8-430c-9375-e11a72c036e7/cad0e33585eb55c64673942a5a6b8d23b15c1ba7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/81018eac-d2a8-430c-9375-e11a72c036e7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 May 2023 16:22:13 +0000
Certificate not after:    Mon 14 Oct 2024 17:19:55 +0000
Subordinate resources:    AS: 272921
                          IP: 2803:9e90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15422916 (0xeb55c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 25 16:22:13 2023 GMT
            Not After : Oct 14 17:19:55 2024 GMT
        Subject: CN=cad0e33585eb55c64673942a5a6b8d23b15c1ba7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d4:ba:87:55:28:88:5f:aa:7e:98:02:e5:2f:
                    39:aa:6b:f2:82:bd:dc:9a:eb:76:1c:f2:29:34:a8:
                    d6:55:81:83:4f:5b:02:7e:43:88:35:4f:36:50:9c:
                    ab:90:7d:f4:e4:fa:fc:dd:7a:1d:6f:ae:d5:1e:8f:
                    77:7c:45:d7:fc:d5:11:48:6e:fa:a6:cb:25:fe:0b:
                    65:9f:f9:51:6b:d3:b8:65:bc:02:47:da:f0:35:0c:
                    a4:b0:5f:42:7d:25:24:25:48:63:1c:27:51:c5:17:
                    c6:42:e6:49:dc:c2:b4:3c:8c:c7:f1:d8:99:ba:87:
                    91:0f:ab:37:16:1a:d6:d1:00:07:1b:8e:1b:17:28:
                    6d:79:a4:5b:8d:98:bd:05:56:5c:03:4c:82:08:66:
                    8b:a3:ce:76:13:b9:3d:77:c5:f4:48:bc:c0:a0:87:
                    67:a3:82:8e:b4:ba:aa:47:4f:d2:ef:f6:28:41:86:
                    a4:db:4a:bd:d8:e8:a4:60:ba:19:da:a9:cb:98:66:
                    37:44:23:38:f6:18:c9:9d:d6:d6:12:30:f8:30:44:
                    a1:99:18:bc:48:cc:92:c5:3b:96:68:38:7a:6a:1f:
                    1d:38:c5:54:65:5f:b0:a8:f7:fb:da:6c:3f:38:70:
                    cd:69:4d:01:9d:86:c6:69:d6:b1:97:ba:ba:56:9a:
                    4c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:3B:63:2C:82:18:AB:C1:0F:19:51:AA:09:01:C8:1B:EB:53:5A:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/81018eac-d2a8-430c-9375-e11a72c036e7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/81018eac-d2a8-430c-9375-e11a72c036e7/cad0e33585eb55c64673942a5a6b8d23b15c1ba7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9e90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272921

    Signature Algorithm: sha256WithRSAEncryption
         15:9e:f0:00:74:ac:b0:40:7a:be:9d:b0:f3:cd:d5:29:3e:c6:
         89:f9:64:97:ce:ef:46:70:c8:54:d0:2e:7d:dc:66:42:a7:ab:
         49:f4:7b:b4:d2:50:8a:89:3a:da:6e:53:2d:89:95:7c:6b:b5:
         15:5f:56:9c:ba:a8:62:58:f7:9a:8c:77:66:0b:93:02:48:78:
         d9:0e:4e:27:76:82:dd:f6:c0:2d:1c:13:03:8c:a3:4a:76:7c:
         b6:d0:8f:62:d2:07:31:74:67:aa:0e:30:c1:17:b1:20:e5:da:
         84:76:11:ba:db:fe:cd:04:5e:7a:9f:42:de:15:33:49:69:ff:
         2f:db:8a:d1:89:8b:86:a3:7f:9a:8e:d2:2c:9d:17:a3:cd:e5:
         48:54:95:69:4b:07:5d:c4:f6:0e:78:30:1a:d3:8a:bd:05:70:
         89:9b:09:71:45:1d:77:ab:b6:80:66:51:1d:f8:0c:3d:f6:80:
         f4:1d:cb:fa:69:31:07:cc:3f:b4:6c:df:c5:d6:54:2c:52:a6:
         c2:8a:39:6a:5d:d8:a4:92:a7:29:7d:54:65:d7:81:29:33:a0:
         89:be:75:71:1f:79:dd:db:38:ec:4e:b7:51:d7:1e:f8:cd:ad:
         e5:49:11:54:ce:ce:49:a0:29:71:f1:4b:0a:3a:80:11:da:2b:
         b5:39:1a:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----