Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d388fe5e7317b19385e6440865337ba54b601777.cer
File:                     d388fe5e7317b19385e6440865337ba54b601777.cer (raw, json)
Hash identifier:          NcggDHmNzkIfyPiJDbiUpGHZewHmr3r3JebMJAxJ5/c=
Subject key identifier:   30:4C:E2:04:95:6F:3F:F7:85:41:07:7D:42:23:55:CC:A6:63:B7:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC1A03
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b16b2442-6ded-4741-b208-c411f31a723a/d388fe5e7317b19385e6440865337ba54b601777.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b16b2442-6ded-4741-b208-c411f31a723a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 13:27:49 +0000
Certificate not after:    Tue 05 Aug 2025 18:40:20 +0000
Subordinate resources:    AS: 273099
                          IP: 2803:5050::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16521731 (0xfc1a03)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 13:27:49 2023 GMT
            Not After : Aug  5 18:40:20 2025 GMT
        Subject: CN=d388fe5e7317b19385e6440865337ba54b601777
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ba:e0:5e:13:f4:e9:60:0b:e6:0a:d7:19:2b:
                    be:7b:34:25:c7:68:fc:0e:13:17:bb:a4:f4:97:94:
                    2c:ac:3c:f2:96:85:28:5d:13:ed:d3:42:a0:ee:19:
                    20:60:e1:fa:f4:45:b1:6d:4d:02:e7:d5:01:39:34:
                    2b:fe:eb:9e:0c:2e:ba:f8:50:da:1b:77:5e:7a:06:
                    36:37:02:b7:0a:b3:de:83:ef:30:e1:b3:53:35:7f:
                    ed:a9:86:7b:20:7a:96:28:76:3f:5b:7c:18:b6:ca:
                    01:aa:19:f2:06:e0:59:5e:1e:4e:9b:71:f0:42:03:
                    bb:f1:ad:4c:ac:2e:c0:21:8e:b3:b2:4b:fa:a5:72:
                    79:97:70:24:f5:fd:41:a0:ad:fa:f7:1e:a0:08:09:
                    63:c2:8f:f6:18:3d:a9:b4:fc:e7:bd:e0:81:ad:5f:
                    fe:3b:56:65:dd:9b:fa:c0:ec:37:50:39:b4:75:55:
                    29:55:8b:ce:46:a0:64:79:a1:f7:f6:77:cc:89:2a:
                    3c:5d:99:53:21:4e:9a:34:e0:82:f7:8b:27:22:2d:
                    38:3f:0e:d9:02:99:3a:03:6f:d8:5f:71:74:f8:40:
                    59:eb:a5:00:1f:75:42:8b:a9:13:56:7b:f5:8c:eb:
                    46:22:25:21:d2:20:4d:f5:4e:58:35:27:77:5e:20:
                    84:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4C:E2:04:95:6F:3F:F7:85:41:07:7D:42:23:55:CC:A6:63:B7:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b2442-6ded-4741-b208-c411f31a723a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b16b2442-6ded-4741-b208-c411f31a723a/d388fe5e7317b19385e6440865337ba54b601777.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273099

    Signature Algorithm: sha256WithRSAEncryption
         41:e2:91:9e:f5:4f:bd:5b:90:c7:9f:a4:1b:73:e7:0a:e8:d1:
         75:18:0b:6b:c6:a8:32:70:89:40:98:c5:9f:6f:80:e7:5c:20:
         6d:25:ce:37:2b:c0:e3:54:37:39:73:a5:22:d1:13:e7:e8:c0:
         a3:bf:af:52:ae:79:2d:d4:50:18:4e:1a:a2:bc:53:24:4c:d4:
         d1:35:00:f5:12:a7:55:89:9c:b1:7d:b3:63:6d:41:8c:06:d1:
         e0:1e:13:91:44:14:55:d7:57:52:0e:d1:39:e7:0d:41:91:0d:
         af:93:f3:f2:76:bd:da:9c:aa:a0:2d:e4:f4:bc:0c:34:f9:10:
         6a:8c:d0:2e:d8:57:ca:c9:1d:9a:83:b1:ca:9f:45:62:30:3d:
         e5:3b:94:b9:b2:f3:0a:65:3a:d8:dd:36:34:72:2d:80:01:94:
         48:9b:e6:1a:58:f6:8e:91:b8:16:f5:03:a3:4a:31:46:5d:dc:
         c9:02:fc:e5:c7:97:e4:dd:39:ca:a8:2e:04:4c:19:06:71:ef:
         a9:ad:41:98:82:79:bb:25:a3:2e:be:c4:dc:d3:27:7d:a3:55:
         2f:38:55:7e:60:e5:69:f9:b8:38:09:bf:45:3e:be:67:d8:51:
         d3:d4:da:1e:ce:6c:26:71:77:59:28:62:a1:01:3d:f8:72:44:
         d8:23:2c:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----