Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb5736bbdfd0f62d990655309b3a6106c7278d1e.cer
File:                     cb5736bbdfd0f62d990655309b3a6106c7278d1e.cer (raw, json)
Hash identifier:          BvBuk6xiUA9aIpF/braQhIY/Vxh+PbMS9tr2cfY8QVM=
Subject key identifier:   B2:64:76:09:17:CA:9A:46:FE:01:1F:C2:15:BF:13:40:D6:8C:A5:99
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBB9EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4805149f-a1f7-479f-bf18-0fc324027919/cb5736bbdfd0f62d990655309b3a6106c7278d1e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4805149f-a1f7-479f-bf18-0fc324027919/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 21:01:15 +0000
Certificate not after:    Wed 19 Feb 2025 17:00:58 +0000
Subordinate resources:    AS: 272985
                          IP: 2803:7590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15448554 (0xebb9ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 29 21:01:15 2023 GMT
            Not After : Feb 19 17:00:58 2025 GMT
        Subject: CN=cb5736bbdfd0f62d990655309b3a6106c7278d1e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:5a:c0:62:67:1f:fb:a7:a8:19:e1:7e:fd:29:
                    76:85:ba:f0:3a:1b:dc:a8:80:39:c1:7d:06:01:17:
                    df:b5:ce:75:df:57:1d:04:a6:f9:30:be:51:53:21:
                    7d:30:6c:40:42:a9:a1:1f:12:9a:6f:00:59:20:2c:
                    a1:56:00:81:e4:03:3f:7d:88:8b:82:ee:3f:04:4c:
                    54:c1:12:2a:4d:ea:04:27:96:1d:84:0b:c1:18:c0:
                    ee:36:8d:23:5a:e9:d5:5b:df:45:1a:14:15:43:f7:
                    c7:34:a6:f4:28:c1:a2:ea:50:8e:01:44:df:28:3d:
                    87:49:85:4c:27:b7:64:e2:82:72:f6:fa:f7:01:c4:
                    53:a6:32:1f:5a:58:ca:cb:55:f2:9d:26:35:37:87:
                    c0:6f:10:ab:8a:92:57:27:69:6e:ec:f1:19:18:59:
                    46:47:ba:ab:03:9f:51:81:1b:3d:2a:26:38:d4:30:
                    54:7c:8f:26:54:66:d3:5f:8c:3c:2b:4a:cf:77:05:
                    34:e1:57:83:08:b7:40:0f:d9:cd:53:0a:8e:7c:17:
                    6a:66:18:1f:d2:ca:53:0c:f3:ed:70:10:d1:9d:4a:
                    2e:05:f1:5e:69:05:92:09:46:51:41:cf:3d:13:66:
                    0f:65:eb:65:02:6a:a8:3b:5d:fc:7d:41:1a:81:78:
                    d1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:64:76:09:17:CA:9A:46:FE:01:1F:C2:15:BF:13:40:D6:8C:A5:99
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4805149f-a1f7-479f-bf18-0fc324027919/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4805149f-a1f7-479f-bf18-0fc324027919/cb5736bbdfd0f62d990655309b3a6106c7278d1e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272985

    Signature Algorithm: sha256WithRSAEncryption
         a7:42:c6:d2:79:f9:a8:3d:e9:48:80:5a:ad:7d:6c:78:08:00:
         5e:95:a9:fe:bf:34:58:a2:ec:05:44:8c:19:f1:e0:f4:86:eb:
         c9:cb:4e:e0:ab:f0:15:ec:f5:5e:55:6c:07:5e:6e:86:df:de:
         3d:8a:05:3d:81:14:c5:a0:17:33:dc:40:5e:7d:d2:81:d2:25:
         89:4a:c3:a2:c2:75:b9:db:69:23:a5:0f:27:6d:01:62:29:a5:
         bf:8c:d0:e3:0e:e1:28:90:48:4b:7c:68:24:99:d0:a7:1b:93:
         e1:ea:df:fb:a2:e2:ee:68:f0:5d:23:2d:a9:58:0d:02:70:3a:
         9c:73:b0:c2:b7:8d:14:50:ac:0d:e5:55:ab:d9:ba:4c:0a:8b:
         46:ac:eb:88:a8:60:d3:42:e3:4b:c2:eb:2a:bb:80:dd:3c:8e:
         15:54:e2:8a:d3:e4:b3:55:1b:01:04:97:9f:90:e4:cc:92:a5:
         12:29:23:e9:69:32:54:9d:59:f1:88:07:54:56:67:5d:e0:e9:
         2f:57:e3:57:5a:6c:b4:45:a2:f9:7b:41:45:23:4f:2b:52:fa:
         47:41:52:e9:c1:ec:57:8c:cc:88:f8:10:aa:1d:91:4d:a5:56:
         a2:52:c9:83:68:bb:8a:af:1a:c9:d6:11:b8:e0:29:5a:d4:d1:
         a8:ed:57:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----