Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d00ea9f7382c4afdcf5cad9c66ed7080d947cd9b.cer
File:                     d00ea9f7382c4afdcf5cad9c66ed7080d947cd9b.cer (raw, json)
Hash identifier:          NNsLIWaAmSrj1JrtT4pDwe3UbcH3ZUqSE7191l8CJSc=
Subject key identifier:   79:77:08:20:4A:6D:5B:35:02:F1:36:A0:E0:20:10:88:24:D5:10:E5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01105F49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5ee387f7-3d37-4b5f-8ee7-16c82e1c885b/d00ea9f7382c4afdcf5cad9c66ed7080d947cd9b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5ee387f7-3d37-4b5f-8ee7-16c82e1c885b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 16:22:12 +0000
Certificate not after:    Mon 28 Jul 2025 21:59:02 +0000
Subordinate resources:    AS: 272294
                          IP: 2801:c4:213::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17850185 (0x1105f49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 16:22:12 2024 GMT
            Not After : Jul 28 21:59:02 2025 GMT
        Subject: CN=d00ea9f7382c4afdcf5cad9c66ed7080d947cd9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:02:8e:a2:e4:72:f0:91:bf:41:bb:56:7b:
                    c4:ca:89:de:cd:3f:c3:64:1c:83:21:08:bd:67:bc:
                    0e:c0:0b:f7:6d:12:45:58:9d:90:a2:3d:71:63:60:
                    ce:11:76:84:ac:4b:2b:e5:40:e5:77:52:e5:a8:d7:
                    7f:48:b0:fb:0b:50:3f:d6:89:01:ea:35:49:80:9f:
                    8e:32:2d:1a:b4:95:07:9b:16:2a:0d:e8:37:58:b4:
                    e7:01:2a:ce:ee:ca:0a:8b:44:7f:3b:60:9b:0b:c4:
                    04:19:4a:30:7f:11:44:8a:0a:ef:99:dd:57:7e:43:
                    90:28:83:a1:99:62:65:3e:01:02:d4:28:8c:cd:6c:
                    78:77:0e:c3:fb:58:0a:2a:dc:7b:b7:eb:d7:39:01:
                    d6:f2:02:9c:43:52:58:8f:3a:b2:75:b6:52:9f:4d:
                    80:6a:62:16:6a:7d:48:1c:97:eb:43:fc:76:70:57:
                    1e:0e:67:30:b9:4d:6b:63:4d:69:f2:c6:48:5c:10:
                    c0:b4:cc:65:b5:78:f6:56:9c:49:39:97:ee:fe:df:
                    3a:e7:8b:7c:fe:49:05:fa:96:09:88:81:3a:b7:a5:
                    72:0a:94:92:53:45:70:3e:32:6f:81:94:ae:60:c0:
                    ea:60:73:21:9a:d3:60:18:63:68:ec:b9:da:ec:8e:
                    8c:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:77:08:20:4A:6D:5B:35:02:F1:36:A0:E0:20:10:88:24:D5:10:E5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee387f7-3d37-4b5f-8ee7-16c82e1c885b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ee387f7-3d37-4b5f-8ee7-16c82e1c885b/d00ea9f7382c4afdcf5cad9c66ed7080d947cd9b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:213::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272294

    Signature Algorithm: sha256WithRSAEncryption
         2a:81:53:7f:dc:7f:6f:af:0c:cd:82:24:45:d1:28:e4:fd:f2:
         d9:19:b7:e4:37:57:1a:03:76:2d:54:67:30:b3:61:4f:ac:ec:
         f0:1d:32:59:4d:4f:96:de:06:0a:49:89:2f:e7:5a:cd:2a:13:
         e3:c0:c4:51:6f:47:4f:56:a6:df:0d:9b:6b:43:43:e4:0a:b5:
         68:98:0b:29:0d:04:af:3a:4d:0e:d7:eb:eb:86:cf:68:89:e5:
         d8:7c:76:fa:a3:1e:eb:fa:c4:7e:78:88:9c:41:03:e7:7a:e8:
         34:40:04:a7:5f:7a:cd:13:b7:54:90:4f:81:74:c8:67:3c:9d:
         4e:5b:a4:3d:b2:a7:ae:21:4b:32:67:3a:91:4b:f0:80:e7:28:
         3e:e9:3d:f2:65:3d:fd:ae:a4:19:61:ce:19:d8:60:46:2f:2f:
         0b:3f:21:99:da:fb:25:b6:b9:a5:3f:13:f4:07:32:a2:6e:f2:
         4b:88:8a:61:ed:94:79:67:66:0d:e2:ba:0e:6e:c9:17:a8:f4:
         48:2b:7d:05:8e:aa:97:97:c2:31:7e:45:37:fa:b9:6c:c6:c2:
         c3:99:05:b3:0d:91:0b:70:e6:82:be:8d:43:e1:be:0d:3c:14:
         a2:58:cb:0b:20:d8:83:f8:6f:79:6f:9d:d5:7a:c1:e8:91:ab:
         72:b8:2c:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----