Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5620db6d95921ffe5a29805479423583a9ae9a9.cer
File:                     d5620db6d95921ffe5a29805479423583a9ae9a9.cer (raw, json)
Hash identifier:          dpBXvM26wRjwusFFt375vlRJfd/80e0d3Ej22FGHWaQ=
Subject key identifier:   65:6A:46:4C:AE:36:EA:FA:39:53:C2:3B:4D:1C:EC:FC:D3:42:B6:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8D7BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c7d09245-f3d5-4f4c-ad79-8fca5321efe8/d5620db6d95921ffe5a29805479423583a9ae9a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c7d09245-f3d5-4f4c-ad79-8fca5321efe8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 07 May 2023 21:39:02 +0000
Certificate not after:    Thu 20 Feb 2025 16:53:12 +0000
Subordinate resources:    AS: 272986
                          IP: 2803:f590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15259582 (0xe8d7be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  7 21:39:02 2023 GMT
            Not After : Feb 20 16:53:12 2025 GMT
        Subject: CN=d5620db6d95921ffe5a29805479423583a9ae9a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:a7:12:1f:44:e7:0b:dd:31:ff:db:42:f9:92:
                    a2:07:a8:28:27:2b:fb:a6:8f:df:9d:9d:9c:07:91:
                    18:fd:b7:71:dd:53:db:be:7a:bc:72:9c:22:ed:75:
                    cd:42:d1:23:bc:3d:52:75:0d:fa:45:0f:26:83:13:
                    f0:49:3d:2e:80:bd:24:59:9a:61:a6:40:a4:18:ac:
                    7e:1b:40:89:a9:e2:ff:a4:bc:63:9a:0f:5a:3d:0f:
                    a7:15:53:44:e2:cd:36:17:b6:2e:e3:62:4f:56:65:
                    23:63:c7:75:e9:85:16:de:ca:dd:20:28:dd:48:79:
                    5f:e7:10:86:1b:80:57:cc:b4:91:8e:66:ad:23:4f:
                    85:0d:ad:6c:36:e6:ba:b7:44:d8:d5:b5:c5:cf:d5:
                    ad:41:58:c1:4e:98:ae:4c:c7:b4:9e:a9:96:f9:d5:
                    53:eb:23:5c:2c:87:26:44:e2:34:06:8e:92:9c:d6:
                    a4:92:66:83:03:3b:33:f1:1a:ce:7b:a3:b6:a4:f9:
                    5a:6f:d8:3e:94:ff:ad:6d:8c:d6:7d:cb:25:b7:90:
                    b9:91:b2:e4:3d:ab:ec:7a:c9:4c:93:da:7c:f1:34:
                    ae:2e:76:21:fe:e7:bd:bd:6d:a3:16:49:d2:40:19:
                    70:d3:f3:1e:6f:8d:17:12:8f:3f:86:72:ca:ee:13:
                    07:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:6A:46:4C:AE:36:EA:FA:39:53:C2:3B:4D:1C:EC:FC:D3:42:B6:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c7d09245-f3d5-4f4c-ad79-8fca5321efe8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c7d09245-f3d5-4f4c-ad79-8fca5321efe8/d5620db6d95921ffe5a29805479423583a9ae9a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272986

    Signature Algorithm: sha256WithRSAEncryption
         1d:f3:e5:7c:ce:84:cf:ec:a4:87:08:8f:cf:6c:00:1a:9b:d6:
         e5:4a:e2:5a:e3:e0:c3:ed:92:28:a2:08:2b:97:c9:3b:ad:6c:
         c7:ea:a6:21:cd:3b:0d:07:68:1c:61:dd:6e:e4:9e:27:a2:ec:
         42:55:f5:2d:09:e2:d3:aa:83:30:7b:5e:55:ee:6f:40:ba:24:
         43:9b:f6:04:86:46:d3:e7:e2:05:2d:6f:17:92:a4:b6:73:54:
         e6:b1:3e:68:75:9c:1b:0f:d1:f1:65:52:3e:6c:ed:4b:60:d7:
         54:f4:fe:a1:f3:73:86:99:b9:64:a2:ec:46:2e:90:0a:46:91:
         c5:f2:20:6b:e8:80:d0:83:80:71:dd:57:f8:09:f5:1b:37:e8:
         c4:23:6a:ad:58:8d:47:82:3e:b4:43:cc:d1:28:f3:4f:80:fe:
         85:ae:2a:cd:17:b4:17:06:30:f1:5f:f5:2a:fb:58:9b:bc:48:
         cb:de:2a:a9:02:07:92:3a:79:16:51:75:22:a3:1f:07:04:d4:
         3c:5d:2a:3f:ac:7c:85:b4:0f:6a:d4:0c:55:fc:36:c3:b6:ba:
         a9:81:fc:84:d2:a0:12:ab:aa:79:84:c8:68:3c:24:bd:62:6c:
         64:6f:47:f4:b0:36:f9:e5:04:61:fd:f3:5b:f9:95:b7:d4:e5:
         f6:2c:0f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----