Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d49e4d108855a0084181e77ee341f6ad613c6e1a.cer
File:                     d49e4d108855a0084181e77ee341f6ad613c6e1a.cer (raw, json)
Hash identifier:          cITFuyoPbtW4o/1aPMSmKmpu4BeXanHAzj0yDtsvcZY=
Subject key identifier:   7D:80:BB:E9:CA:3C:3F:1D:A2:94:E3:7D:AA:50:8B:C2:09:15:FF:5E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F174FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5d46ce1-d7d3-4889-b51e-7ef9b1e012c2/d49e4d108855a0084181e77ee341f6ad613c6e1a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5d46ce1-d7d3-4889-b51e-7ef9b1e012c2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 22:47:03 +0000
Certificate not after:    Mon 11 Nov 2024 20:17:17 +0000
Subordinate resources:    AS: 272933
                          IP: 2803:1190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15824123 (0xf174fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 22:47:03 2023 GMT
            Not After : Nov 11 20:17:17 2024 GMT
        Subject: CN=d49e4d108855a0084181e77ee341f6ad613c6e1a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:19:f8:b8:c3:17:fc:40:e1:7c:5b:47:6c:96:
                    73:ed:20:64:f9:7f:f6:d8:29:6c:11:38:4f:51:52:
                    cd:e4:da:37:fd:29:10:d2:24:c1:b1:dc:51:ae:99:
                    43:30:4f:ed:a0:e0:48:af:0e:26:14:cc:1a:12:da:
                    3a:78:60:b3:1d:e6:9a:e5:ac:7a:92:30:42:cf:36:
                    bd:ee:e1:f8:a0:c0:0a:04:10:82:a0:c5:21:c8:3d:
                    94:db:a2:d5:9a:c8:e7:43:d5:cb:3a:9d:96:49:7d:
                    d3:de:88:da:43:e0:05:4e:75:21:e4:17:6a:50:18:
                    16:76:ee:ed:ee:16:65:b7:81:02:bf:cd:db:d9:7c:
                    5d:61:f1:40:cb:af:1c:60:8b:a0:57:94:6f:31:22:
                    7d:74:64:cc:2d:66:97:20:40:a3:0d:97:cb:8b:a8:
                    0f:a1:ee:5b:aa:e9:e0:66:1e:b2:b3:98:90:09:a5:
                    e2:06:cf:fb:55:3a:fd:ce:10:5b:1f:99:ff:fd:1a:
                    fb:89:63:f8:e1:1d:61:4f:15:ac:09:36:ff:e8:91:
                    44:82:b4:f1:a7:78:18:cb:9a:8a:d5:d8:0d:97:fb:
                    14:dd:db:39:ec:36:2f:c7:fe:0b:de:96:1d:37:1e:
                    26:b6:6d:49:cf:ca:12:c2:42:20:0d:2a:40:f7:10:
                    fc:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:80:BB:E9:CA:3C:3F:1D:A2:94:E3:7D:AA:50:8B:C2:09:15:FF:5E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5d46ce1-d7d3-4889-b51e-7ef9b1e012c2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5d46ce1-d7d3-4889-b51e-7ef9b1e012c2/d49e4d108855a0084181e77ee341f6ad613c6e1a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272933

    Signature Algorithm: sha256WithRSAEncryption
         a8:a3:5f:c7:51:70:42:ee:63:e6:4f:f7:3c:f8:43:dc:10:95:
         c4:6d:e6:1c:8d:70:94:ef:a9:9e:16:03:59:b3:ae:41:5a:96:
         f7:06:69:4d:ca:3b:22:15:c7:b1:0d:88:26:95:86:ac:ff:60:
         41:b0:af:df:3a:9f:38:22:65:df:ea:68:33:1b:92:fc:49:77:
         df:97:46:a0:4d:e1:13:b4:98:bd:8a:be:62:74:39:0b:0d:f5:
         7f:d2:a2:71:23:d7:b1:33:6e:90:23:76:bc:44:ec:92:ed:f4:
         ee:e1:a8:ad:11:14:d8:35:ce:88:55:dd:62:e7:75:b5:45:ef:
         04:22:17:b1:70:ba:65:ff:f5:13:bd:b3:28:6d:5c:12:0e:a9:
         dc:a4:47:ea:05:44:09:a4:29:1c:0d:60:d8:a6:38:3e:33:d1:
         f9:de:a1:d4:d4:b2:ef:7f:86:fe:2f:9a:d6:f2:a2:e9:a9:e7:
         fb:e6:d6:b4:ce:3f:2f:0a:d9:26:ea:a8:9b:f4:83:46:cb:f4:
         23:32:57:a1:c8:42:d2:52:c2:83:c7:95:94:42:eb:a3:96:7a:
         6e:d8:b5:5b:d2:e6:69:9f:f7:74:fc:2a:27:ff:12:5b:4c:f4:
         56:1c:fb:9b:15:65:1c:c3:ad:7e:20:cc:a2:f4:2b:af:d5:9b:
         26:1c:8a:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----