Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc31055a044e376932287663d98b1bd5fa29f45e.cer
File:                     cc31055a044e376932287663d98b1bd5fa29f45e.cer (raw, json)
Hash identifier:          Cqbjr6YChzjSsspEgjvvtp4SUGHskJCEUyqwKuoeT3Q=
Subject key identifier:   4D:2F:97:D0:FA:EC:E5:86:1D:4B:3A:F4:ED:36:76:5B:17:05:FD:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB3CD8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0376fecb-f9be-46d5-83f1-38944bf1b7ec/cc31055a044e376932287663d98b1bd5fa29f45e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0376fecb-f9be-46d5-83f1-38944bf1b7ec/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 29 Sep 2023 21:08:31 +0000
Certificate not after:    Mon 21 Jul 2025 19:47:48 +0000
Subordinate resources:    AS: 273088
                          IP: 2803:ff90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16465112 (0xfb3cd8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 29 21:08:31 2023 GMT
            Not After : Jul 21 19:47:48 2025 GMT
        Subject: CN=cc31055a044e376932287663d98b1bd5fa29f45e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:f9:50:8f:c0:4a:c0:9b:4d:30:6b:95:bf:b6:
                    45:e4:ab:a9:db:ef:90:07:f8:a1:fe:b9:36:79:a9:
                    6f:05:c5:bf:3d:48:51:25:7c:bd:b1:92:e3:dd:1d:
                    56:ea:7a:a6:33:86:f9:35:69:05:f5:f5:6b:3f:a9:
                    32:dc:67:ed:6b:e3:e5:08:f2:a7:eb:d9:cd:8f:d2:
                    3d:80:7b:86:f6:b9:88:17:71:b3:2a:b3:bb:9b:96:
                    d1:1f:44:49:3f:07:36:07:26:3b:ef:40:5c:b7:bd:
                    7c:a0:ab:52:7b:53:d5:6b:bb:d3:cd:b6:26:c9:14:
                    4a:10:14:3e:29:06:15:26:23:b1:cc:69:0c:2c:2a:
                    9c:b7:f4:2e:39:9d:c5:74:09:e0:a9:3a:bb:3a:39:
                    a9:46:c4:fd:c3:8b:8a:b2:da:eb:50:1c:49:ee:ef:
                    58:eb:02:ff:21:e5:7f:6c:4a:c1:d7:dd:e6:10:10:
                    6c:70:3e:b9:a1:5e:b0:0d:56:bf:1b:34:bc:63:97:
                    5e:50:40:14:e7:20:92:bd:13:52:12:a3:3d:3d:b8:
                    77:84:f6:9c:1c:75:e5:0d:1e:a4:89:41:5a:67:4d:
                    23:ea:fc:a5:6f:d2:ff:b0:74:c9:89:00:38:1a:fe:
                    38:7d:b9:bf:f3:59:de:f0:82:ce:5d:77:59:51:7b:
                    23:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2F:97:D0:FA:EC:E5:86:1D:4B:3A:F4:ED:36:76:5B:17:05:FD:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0376fecb-f9be-46d5-83f1-38944bf1b7ec/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0376fecb-f9be-46d5-83f1-38944bf1b7ec/cc31055a044e376932287663d98b1bd5fa29f45e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ff90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273088

    Signature Algorithm: sha256WithRSAEncryption
         97:96:51:02:9e:d6:d0:c6:35:d0:3f:3f:fd:71:cc:5e:30:13:
         e4:1a:11:91:cf:6d:a5:26:10:0a:05:ae:04:0a:04:c6:f5:e2:
         9f:e3:30:dc:d8:12:c9:b0:8f:b5:42:33:de:14:73:fc:f6:94:
         12:c0:fb:63:1d:dc:43:e5:1c:fc:c9:b7:29:ca:1c:fb:10:c7:
         e4:7a:61:1b:1c:1a:07:5e:2f:3e:53:e8:72:f8:97:87:15:fd:
         f4:ca:3e:81:31:b4:9b:d7:c8:2b:65:8d:0a:e9:3b:14:be:69:
         e7:98:b9:a4:fb:2d:28:d9:c0:5e:b8:1f:49:30:53:7a:e2:a2:
         64:13:90:ff:20:06:a4:73:f2:97:be:af:11:2b:25:36:95:18:
         87:6e:78:c6:39:bb:42:7b:f4:5b:23:47:d9:4a:31:ee:53:21:
         29:bf:0c:46:0c:8a:1e:a6:4d:87:5b:1b:a1:78:2d:14:d2:de:
         f4:d6:b1:54:be:ae:70:d5:a6:7a:c1:a3:95:f2:10:d5:a5:11:
         27:a3:5c:b0:8c:51:9a:19:e7:42:78:23:65:15:50:c5:fd:c9:
         c3:e9:0c:71:94:40:a7:ba:08:b9:04:0b:cd:44:c6:c7:61:d0:
         2a:d9:df:ff:c8:83:aa:ec:da:f3:b8:fa:a4:b5:f3:3e:53:1e:
         0b:b1:7c:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----