Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd1c7e467865a84c133db0d20762a36094de934b.cer
File:                     cd1c7e467865a84c133db0d20762a36094de934b.cer (raw, json)
Hash identifier:          924YLt2hY2k8/GJJy0Ox5qqtGfKo5Tp7ZM1MefDCQ7U=
Subject key identifier:   08:B0:C0:84:15:9D:F8:22:27:72:C8:79:5B:5B:C6:B7:33:A2:DF:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100D17C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/32b19a71-232c-4a8e-ae5c-a2d96d882d42/cd1c7e467865a84c133db0d20762a36094de934b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/32b19a71-232c-4a8e-ae5c-a2d96d882d42/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 18:11:05 +0000
Certificate not after:    Sun 09 Feb 2025 05:00:00 +0000
Subordinate resources:    AS: 273130
                          IP: 2803:6450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16830844 (0x100d17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  9 18:11:05 2023 GMT
            Not After : Feb  9 05:00:00 2025 GMT
        Subject: CN=cd1c7e467865a84c133db0d20762a36094de934b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7c:c8:4f:65:e5:85:ee:55:3a:ad:71:37:fa:
                    36:bd:81:eb:70:e7:05:76:da:37:bd:90:60:ea:2f:
                    de:d2:11:be:0a:36:41:fa:8f:7a:75:14:b7:3b:8f:
                    f5:5a:af:28:60:36:2c:ee:31:2e:ea:b9:57:af:a5:
                    8a:7a:9f:a5:55:7f:c8:c7:46:ab:2d:33:ed:aa:2c:
                    c2:1d:d0:e0:9a:38:ed:21:48:84:60:e5:c2:e0:a1:
                    2e:48:95:37:85:fd:ee:1d:14:5e:b9:22:a1:02:cf:
                    16:70:c0:60:53:8f:64:e6:55:5e:87:f7:0d:bd:2f:
                    f6:cc:0b:c6:6e:68:08:c7:33:41:6b:65:ce:3a:f8:
                    c6:d2:83:b5:7e:e5:97:56:f6:82:21:f1:53:98:23:
                    81:ee:95:ea:d0:02:05:ad:5f:5a:29:ed:02:77:42:
                    67:b8:ba:8a:23:91:ca:c8:7a:be:95:24:2a:58:4a:
                    b4:e7:70:ea:c8:09:c0:92:4f:31:57:1e:c9:49:cf:
                    d3:15:6d:20:dc:bf:e4:73:63:85:8e:f3:1a:93:0b:
                    c7:c2:cf:b2:ff:c1:20:87:db:98:23:f3:6a:dc:4a:
                    7f:79:10:0e:37:25:a6:91:9a:18:54:1d:be:95:17:
                    50:d3:fd:e2:35:dd:97:31:b3:60:50:65:54:35:24:
                    a5:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:B0:C0:84:15:9D:F8:22:27:72:C8:79:5B:5B:C6:B7:33:A2:DF:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/32b19a71-232c-4a8e-ae5c-a2d96d882d42/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/32b19a71-232c-4a8e-ae5c-a2d96d882d42/cd1c7e467865a84c133db0d20762a36094de934b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273130

    Signature Algorithm: sha256WithRSAEncryption
         26:56:ef:64:bb:76:fb:bd:ce:06:0a:34:c9:6c:52:87:5f:64:
         bd:19:3e:a7:4e:c2:95:9b:f3:1e:ff:5e:f9:38:7a:80:f9:f3:
         61:9b:a3:f7:e3:97:85:c0:29:44:df:e4:8c:a4:3b:c3:8e:3b:
         da:61:b1:e2:b9:e1:e2:ef:b4:7d:05:93:91:82:d7:85:3b:e2:
         3f:5b:d1:b1:72:a6:98:4c:3f:fe:69:5d:f5:71:19:90:31:1d:
         c2:1f:8c:2b:c1:de:f9:f8:19:7f:31:db:b8:b2:6c:ec:42:b8:
         d1:4d:74:d0:d8:3c:73:5e:c9:b7:e0:62:ef:a4:08:6a:45:1e:
         89:bd:bb:16:42:ed:6c:2f:8e:ec:71:18:31:33:b7:4e:6f:72:
         95:79:6a:ed:88:47:f5:50:fb:d0:09:e4:bf:17:54:12:46:9c:
         85:8e:e0:25:cb:ba:47:f4:97:9f:96:84:b5:45:e7:70:40:4d:
         1c:d4:85:fa:8e:e3:ba:9e:67:87:a8:fc:b2:21:19:b8:cc:49:
         b2:db:d2:32:69:54:6d:f3:2a:0a:95:3f:1d:5a:7b:96:29:0a:
         24:2b:75:a8:3c:8a:35:73:18:27:43:e4:48:bc:9d:b3:f4:a0:
         04:de:a4:79:d6:78:50:a3:85:d2:d4:01:1e:51:06:cb:3e:9f:
         1d:ad:2b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----