Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d5a967db036ee0f604f72e40829d624c3aad70c9.cer
File:                     d5a967db036ee0f604f72e40829d624c3aad70c9.cer (raw, json)
Hash identifier:          7buX8RmcwKJxUWL8OhS5DdS8JWSbhn5+tOfJldaPShw=
Subject key identifier:   48:C5:32:96:96:1A:F8:2A:68:5D:EC:F8:FF:BC:8D:C9:5C:D2:E4:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C3FE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4f9e311f-20e7-453f-979b-aa00941aa256/d5a967db036ee0f604f72e40829d624c3aad70c9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4f9e311f-20e7-453f-979b-aa00941aa256/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Feb 2024 19:04:16 +0000
Certificate not after:    Sat 27 Sep 2025 18:37:00 +0000
Subordinate resources:    AS: 273135

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17580000 (0x10c3fe0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 19:04:16 2024 GMT
            Not After : Sep 27 18:37:00 2025 GMT
        Subject: CN=d5a967db036ee0f604f72e40829d624c3aad70c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3c:99:95:2a:0c:d9:b2:0e:70:69:ac:7d:a9:
                    45:c0:ec:9f:67:3a:60:9f:f8:82:37:0f:9f:bc:06:
                    c8:a8:8a:a8:37:e9:fd:04:e9:45:42:ea:aa:42:51:
                    e6:97:05:5d:d2:14:ea:82:04:c5:53:11:ab:cb:79:
                    3f:28:b4:58:ba:a4:ca:95:f2:15:8c:1e:02:41:b7:
                    d6:21:d7:07:56:a1:8e:f9:ef:57:a3:ef:05:78:6c:
                    c1:60:28:93:4b:c3:f2:60:46:70:f9:dc:11:00:ab:
                    3b:f7:ff:5e:04:9d:8c:11:9f:b5:1d:6b:42:a7:9c:
                    10:24:cb:97:a6:e7:d2:e3:05:6a:cc:ab:51:83:f7:
                    e3:0a:29:72:9f:01:83:f8:47:28:4c:19:97:ac:c2:
                    23:c2:86:f4:43:50:ed:4d:c5:4a:cd:61:87:a6:c4:
                    c5:13:f2:4b:62:c8:b2:11:6e:e0:35:97:a2:5c:6d:
                    79:6f:23:8c:fc:fe:66:eb:a1:38:89:30:5d:05:d5:
                    60:5e:74:b1:86:a6:3f:63:8d:e2:c3:8f:b6:47:d7:
                    cb:62:40:b4:af:db:91:5e:dc:96:d2:cc:56:fe:f6:
                    de:99:7b:1b:67:26:72:cd:e7:b5:85:e2:18:58:40:
                    4d:f6:93:46:b1:05:2b:9b:a6:e2:14:bd:ce:96:b3:
                    fb:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C5:32:96:96:1A:F8:2A:68:5D:EC:F8:FF:BC:8D:C9:5C:D2:E4:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4f9e311f-20e7-453f-979b-aa00941aa256/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4f9e311f-20e7-453f-979b-aa00941aa256/d5a967db036ee0f604f72e40829d624c3aad70c9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273135

    Signature Algorithm: sha256WithRSAEncryption
         16:81:81:3e:41:3e:3c:fa:bc:60:49:f6:41:b6:a1:12:19:01:
         6e:1d:92:e2:36:f7:03:74:58:bb:9d:34:0c:b9:8b:6d:04:d1:
         ac:1a:87:bb:23:51:94:6c:0d:a1:2f:a7:cd:ca:1d:38:bd:20:
         5b:6e:c7:85:a5:6e:b6:0f:48:ef:02:50:6c:1a:29:31:7e:d5:
         1c:99:6d:e3:a4:6d:6c:a4:df:55:f6:9f:2a:63:ef:52:53:83:
         97:56:54:aa:ae:0b:83:9b:d5:81:39:9f:51:5b:7e:3c:6d:8e:
         84:bc:be:01:58:d2:8e:39:31:fb:96:26:c0:bd:c3:6a:1f:08:
         53:75:70:fb:a2:85:b9:a0:d0:ab:95:33:1a:c6:92:ca:00:3a:
         60:3b:b2:f7:04:e3:b6:9d:ad:9e:7f:74:5f:56:6c:0d:b0:68:
         38:84:81:d5:a1:45:3c:b7:4b:fc:09:47:80:f2:d7:34:cc:3a:
         89:e3:02:d0:8f:b7:21:67:e8:d5:14:47:13:a0:4d:e5:2f:b9:
         98:76:ba:df:98:ce:bc:75:b5:9c:d0:bd:87:98:1e:7b:cb:02:
         6d:15:a0:43:38:84:2d:5f:09:da:b8:62:73:ba:53:f8:7b:c7:
         80:f2:c1:cb:d3:31:4c:bc:90:ef:41:c3:60:8e:f6:2c:e0:56:
         55:7a:c2:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----