Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb472ec26ff1d0aa77d106710a794ff356eba7ce.cer
File:                     cb472ec26ff1d0aa77d106710a794ff356eba7ce.cer (raw, json)
Hash identifier:          mcXGRTp3lqe5Kw9vnH2onizJLavXj6cY1K7zPolgmCA=
Subject key identifier:   BE:29:20:2D:A2:82:3A:FE:EA:37:67:75:11:E8:6D:73:AC:5D:D8:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01110ECB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6488068f-40a6-4024-901a-2ef9f4924bfd/cb472ec26ff1d0aa77d106710a794ff356eba7ce.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6488068f-40a6-4024-901a-2ef9f4924bfd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 12 Apr 2024 15:30:45 +0000
Certificate not after:    Wed 04 Feb 2026 21:41:14 +0000
Subordinate resources:    AS: 273212
                          IP: 2803:f650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17895115 (0x1110ecb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 15:30:45 2024 GMT
            Not After : Feb  4 21:41:14 2026 GMT
        Subject: CN=cb472ec26ff1d0aa77d106710a794ff356eba7ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:0c:28:7e:5f:30:62:f0:e7:1d:ad:22:04:0d:
                    5e:da:30:3b:4a:8e:1a:1f:e9:ce:3a:1d:9b:5e:ee:
                    b9:3f:eb:36:90:83:37:eb:d4:3c:ac:52:78:1b:84:
                    17:fe:91:0c:94:94:58:69:f4:16:bd:47:6c:db:72:
                    49:b8:c4:3a:d8:2d:bd:9d:02:90:d0:55:e8:cd:ce:
                    f0:c8:74:4a:7e:04:ec:e4:e5:c9:c9:ba:e1:a8:0a:
                    34:26:5c:9d:56:60:f8:82:55:1b:ef:dc:74:52:20:
                    fb:46:fe:f9:5b:5d:5a:17:75:6d:f2:05:34:73:8a:
                    33:98:07:58:c9:91:7e:70:d3:f4:0a:77:d1:7e:be:
                    e7:9a:e2:35:80:4f:9a:f3:8c:37:70:2f:9c:2b:9e:
                    50:ff:04:d1:29:05:40:aa:6c:04:e5:e6:b3:b7:e4:
                    a6:ae:48:76:be:f2:b3:a9:23:74:96:45:40:4a:42:
                    cb:ae:80:13:ee:a3:01:85:8a:0e:d1:61:94:49:ab:
                    69:39:98:42:46:ab:47:e5:ef:d8:06:a5:f7:3a:af:
                    43:28:51:5e:9b:1f:c3:70:2c:73:ab:13:34:c4:6b:
                    c1:c5:e1:cb:b9:b4:3d:66:68:20:9a:03:20:ce:77:
                    30:02:96:b3:b8:2e:0f:a4:ab:6d:e1:98:eb:7d:da:
                    02:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:29:20:2D:A2:82:3A:FE:EA:37:67:75:11:E8:6D:73:AC:5D:D8:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6488068f-40a6-4024-901a-2ef9f4924bfd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6488068f-40a6-4024-901a-2ef9f4924bfd/cb472ec26ff1d0aa77d106710a794ff356eba7ce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273212

    Signature Algorithm: sha256WithRSAEncryption
         a6:83:b5:87:9b:2b:c6:15:c1:52:f3:0c:26:71:80:2c:2f:b3:
         a5:10:55:76:67:d2:e2:a0:01:dc:ba:25:f9:ad:61:13:7c:d7:
         e1:32:53:cc:f1:ec:a3:ab:04:07:52:21:dd:ac:64:96:8f:02:
         05:06:d4:5a:e2:e3:de:ba:d4:f8:be:3e:cf:36:fa:6d:08:77:
         68:7b:bb:32:7f:f7:55:6f:c3:36:7f:65:87:8d:c4:99:ce:45:
         fd:81:b4:dc:dc:86:cb:2a:59:16:67:45:04:68:b6:e5:31:ee:
         42:14:75:14:6d:28:00:f2:b0:fb:5d:c4:db:e1:cd:91:be:e4:
         34:d1:c5:10:ec:a0:87:45:7b:3f:9f:5d:70:48:3f:98:08:a7:
         e2:99:d9:da:20:c3:b4:93:25:32:2c:b8:0b:9c:b6:38:45:f8:
         30:ef:b5:e7:00:bb:9d:00:1c:a5:20:74:4f:3a:2d:95:ca:62:
         b0:56:d9:34:95:fe:21:84:3f:4c:40:c3:fc:7b:5e:d4:70:30:
         ab:6d:db:6e:03:98:a9:55:78:e8:fb:e1:08:fd:15:a5:ca:f1:
         62:6f:e6:4a:23:e7:ae:d5:75:9b:ac:73:cd:23:f8:37:0f:a1:
         e4:09:de:58:fb:b3:c8:16:85:c5:19:8b:96:20:7f:c6:b8:98:
         4d:c6:da:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----