Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2ff4a8ab0d4dbbf4df6388f52b87c5a13626e46.cer
File:                     d2ff4a8ab0d4dbbf4df6388f52b87c5a13626e46.cer (raw, json)
Hash identifier:          CkEMU51/yp34zuO3UKBsyesN34a97bKCQNs8ac7lJGg=
Subject key identifier:   FF:C8:3A:51:7F:FE:E2:4E:D3:D8:A2:60:BB:7A:B9:8C:9D:AB:21:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAE0D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4e05b53f-5b03-4952-bc4d-9c990bcc223e/d2ff4a8ab0d4dbbf4df6388f52b87c5a13626e46.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4e05b53f-5b03-4952-bc4d-9c990bcc223e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 May 2023 13:34:21 +0000
Certificate not after:    Tue 21 Jan 2025 14:29:07 +0000
Subordinate resources:    AS: 272967
                          IP: 2803:4590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15392978 (0xeae0d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 23 13:34:21 2023 GMT
            Not After : Jan 21 14:29:07 2025 GMT
        Subject: CN=d2ff4a8ab0d4dbbf4df6388f52b87c5a13626e46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:fa:61:fa:11:8d:47:10:a9:1f:e4:54:24:
                    21:37:32:c1:e7:f2:00:93:2e:7f:95:ec:0b:0d:63:
                    79:cd:69:3d:b0:f3:96:22:a6:cf:7f:b7:b8:00:d5:
                    ea:2f:89:0b:2f:47:3c:3a:7b:ab:0c:dc:0c:64:b7:
                    5c:8c:c1:b9:55:e8:45:84:87:2a:13:43:55:b1:dd:
                    bb:8b:83:fe:dc:81:ce:be:87:3e:ca:1d:58:61:ac:
                    2a:31:40:1d:74:80:d1:9a:1e:fc:ba:03:43:72:2b:
                    d0:f2:73:64:2e:aa:8a:5b:a0:5f:c5:76:83:d0:25:
                    7c:13:ec:dd:ae:02:47:0a:bf:55:53:c0:8d:0e:56:
                    53:e8:6e:d1:48:df:74:5c:e9:09:23:05:91:f6:88:
                    d5:31:60:0b:62:12:44:e3:a8:18:cc:d4:4a:87:00:
                    74:d5:ef:5b:77:8f:46:21:4e:ea:86:fb:b4:a8:e1:
                    1b:d1:a7:dc:61:11:64:25:0f:d2:b7:b9:c7:6a:5c:
                    bc:93:95:12:9f:92:8a:bd:eb:97:85:74:1b:90:a1:
                    78:38:2b:54:47:ae:09:c4:f4:7b:0a:b2:33:c0:36:
                    1e:9f:83:bf:68:8e:5a:43:ac:00:29:cb:8f:5c:17:
                    63:07:c7:3f:86:c2:0c:9c:11:97:50:75:a4:40:d2:
                    a4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C8:3A:51:7F:FE:E2:4E:D3:D8:A2:60:BB:7A:B9:8C:9D:AB:21:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4e05b53f-5b03-4952-bc4d-9c990bcc223e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4e05b53f-5b03-4952-bc4d-9c990bcc223e/d2ff4a8ab0d4dbbf4df6388f52b87c5a13626e46.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272967

    Signature Algorithm: sha256WithRSAEncryption
         6e:7d:61:be:72:d5:8f:62:92:88:71:dc:64:14:3c:d9:ec:fd:
         6e:5d:4f:aa:a4:be:c8:3b:f6:25:53:89:f2:f3:4b:65:3c:a7:
         f7:6a:29:ca:bf:71:52:9b:75:21:56:87:7b:9f:db:40:2f:27:
         09:da:82:a6:6c:23:54:9b:94:c1:d4:73:3b:8a:f4:81:ca:80:
         f3:b8:25:dc:59:99:21:ec:cc:6d:7f:13:48:32:45:dd:83:ec:
         e2:7d:20:7c:c4:b9:c6:74:2f:5d:27:4b:7d:4c:00:de:ce:a4:
         b1:5a:00:9e:9b:5f:dd:87:f9:09:c6:f6:4a:ec:5d:af:8f:cc:
         5e:fd:d6:8e:13:f9:6c:72:a3:e2:be:de:84:e6:b6:ed:84:f4:
         31:27:0c:6c:9a:fb:39:7d:f0:fc:d7:da:09:29:13:01:2a:4f:
         b9:f7:b0:7d:73:08:9a:2f:3a:07:66:82:10:d5:1f:4c:2a:25:
         21:07:93:b9:c1:e5:fd:1b:28:d7:a7:c6:18:3a:2c:83:23:47:
         53:b1:24:11:a1:a1:09:46:eb:28:5a:0b:62:cf:86:97:dc:d8:
         4a:fa:48:30:f5:3a:93:ed:46:9e:b4:50:39:2e:74:b5:f5:49:
         68:58:94:00:a2:37:b3:46:9d:48:e6:83:53:50:bf:09:e6:a9:
         20:ff:e8:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----