Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d1e0bb312178b8a9593f19007bad41878067f979.cer
File:                     d1e0bb312178b8a9593f19007bad41878067f979.cer (raw, json)
Hash identifier:          Mtu0aOvxqCd4cDWh2qJI4JHaeZLGsOxcftS5kt5bnSM=
Subject key identifier:   BE:28:32:3C:91:49:DE:93:C5:DF:56:22:FB:CF:DD:42:8B:0B:60:53
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4429A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/19c7d099-e16b-4bcd-a252-a0abc04d6994/d1e0bb312178b8a9593f19007bad41878067f979.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/19c7d099-e16b-4bcd-a252-a0abc04d6994/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 08 Apr 2023 13:02:25 +0000
Certificate not after:    Wed 29 Jan 2025 15:40:57 +0000
Subordinate resources:    AS: 272970
                          IP: 2803:a590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14959258 (0xe4429a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  8 13:02:25 2023 GMT
            Not After : Jan 29 15:40:57 2025 GMT
        Subject: CN=d1e0bb312178b8a9593f19007bad41878067f979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:dc:d5:06:f0:2e:df:ae:66:f9:7e:db:30:53:
                    ee:f8:05:f5:0c:87:fe:35:a1:13:d9:28:89:b2:fc:
                    2d:0f:7a:de:88:5f:03:fe:c5:49:c4:1e:3d:91:80:
                    72:80:27:1b:4d:27:ab:30:00:f7:c9:67:bc:84:39:
                    47:ce:59:50:ba:34:5b:70:b9:71:60:86:c5:83:f0:
                    68:80:cf:e7:a3:92:7c:0d:e5:d7:91:24:9e:93:5c:
                    05:b2:49:e4:79:fd:d2:be:4f:c5:fb:b4:36:6f:49:
                    a4:0e:12:32:28:eb:7b:b0:9c:ef:3b:90:59:db:4a:
                    4e:a5:4a:87:9d:61:6b:42:ce:47:c0:5a:48:a6:e2:
                    8e:4f:ad:7b:f3:a0:0d:04:29:c2:1e:1b:74:2b:62:
                    23:48:be:73:7b:a1:48:69:e7:a9:1c:44:30:96:71:
                    81:e9:db:95:51:9b:3e:77:17:a0:1e:82:d4:b3:cb:
                    aa:fa:19:a5:fb:5c:e2:2c:bf:3d:db:44:81:88:be:
                    a0:e5:41:ba:a2:54:50:d1:6d:18:20:e4:be:f9:c9:
                    98:37:86:24:21:61:d5:9d:62:0d:44:f2:4f:4b:d5:
                    8c:35:26:43:26:4c:b8:a1:1c:9b:c3:69:48:90:80:
                    89:39:39:af:4b:ae:2f:83:ee:08:1d:0b:3a:f9:a6:
                    17:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:28:32:3C:91:49:DE:93:C5:DF:56:22:FB:CF:DD:42:8B:0B:60:53
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19c7d099-e16b-4bcd-a252-a0abc04d6994/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19c7d099-e16b-4bcd-a252-a0abc04d6994/d1e0bb312178b8a9593f19007bad41878067f979.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272970

    Signature Algorithm: sha256WithRSAEncryption
         9f:13:ee:0f:b3:5c:25:c3:d8:f7:e9:14:3c:6d:0c:b8:da:28:
         e8:de:82:10:c6:3c:61:f8:25:9c:50:10:8c:de:71:8f:3b:db:
         6a:b7:1a:ef:c0:60:18:d9:16:7d:3e:06:b7:7b:55:c4:8d:fe:
         95:e0:63:3f:10:97:e8:94:04:cc:c6:11:e7:f0:ab:9d:8e:62:
         a6:5b:4b:23:4a:0b:ed:d3:1d:dc:6f:0c:0f:60:dc:82:bc:dc:
         ea:2a:1f:8d:58:24:6a:31:94:d5:0d:ed:f1:9c:01:dc:1c:b5:
         c0:6d:9a:88:09:c0:25:b7:8f:03:cc:86:bc:9b:35:7a:f1:b0:
         f1:16:9c:cf:47:03:76:46:45:c6:e2:38:c8:c1:b2:be:74:c3:
         10:39:9e:05:8c:c6:61:ab:3e:83:ca:f8:d6:49:0c:e1:2c:e0:
         8a:e3:da:1c:e9:df:67:76:6f:67:11:9e:f7:f5:9b:d1:fd:2d:
         77:0b:6f:9a:b9:cd:98:9d:fd:8c:ab:01:7d:b7:27:cd:19:be:
         a5:9e:6b:9f:18:e9:9c:73:e4:6d:ff:05:38:e3:62:17:83:c2:
         26:b6:a6:1f:64:81:eb:28:7b:64:18:62:2e:88:cd:40:33:36:
         9c:70:60:5c:03:02:e6:24:09:c9:1e:a2:25:95:33:75:63:35:
         e9:c7:c2:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----