Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d91aa212f217640428eb6bc488ccbfc4f7bb65a9.cer
File:                     d91aa212f217640428eb6bc488ccbfc4f7bb65a9.cer (raw, json)
Hash identifier:          hthWnz9cKV+ZGojd+1Afw+K2vpeyIAIL4zcHVc7PH7Y=
Subject key identifier:   BE:60:89:83:49:29:68:6D:2E:F6:8C:F7:0A:29:C4:FE:3B:DC:C6:D6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC2D59
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bdb12a43-100e-4fc4-b7f2-2f4825e8f006/d91aa212f217640428eb6bc488ccbfc4f7bb65a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bdb12a43-100e-4fc4-b7f2-2f4825e8f006/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 07 Oct 2023 12:36:47 +0000
Certificate not after:    Sun 13 Jul 2025 17:27:19 +0000
Subordinate resources:    AS: 272866
                          IP: 2803:d290::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16526681 (0xfc2d59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 12:36:47 2023 GMT
            Not After : Jul 13 17:27:19 2025 GMT
        Subject: CN=d91aa212f217640428eb6bc488ccbfc4f7bb65a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:63:57:21:9e:b8:40:98:73:de:4a:64:77:11:
                    8b:fa:87:09:d6:d4:da:13:ac:39:72:49:53:4f:31:
                    0f:9d:2e:cd:6d:ca:7e:cf:07:a1:7a:10:2e:5d:1a:
                    e5:a5:17:d4:38:1a:e0:4c:75:44:6a:2b:9d:ba:4a:
                    63:87:c1:c2:49:04:3f:67:14:d3:2f:e0:9c:0d:88:
                    d3:a3:c6:ed:57:3b:93:6d:f1:4c:b5:91:a7:39:56:
                    8a:40:ce:80:f5:ef:64:96:cf:2c:d7:27:eb:b7:b1:
                    f0:6d:b2:01:07:73:2b:31:40:16:4a:d4:4f:ba:18:
                    e2:c1:0e:a3:3d:d7:49:99:61:5c:8f:a2:5b:5c:46:
                    0c:1a:88:c9:0a:a0:b6:fd:68:01:f4:54:ff:34:7d:
                    50:f5:47:fe:1b:0c:27:47:ea:e1:e9:7f:23:81:24:
                    8d:7e:fc:09:d8:a2:9f:39:c5:c4:43:59:66:72:cd:
                    cc:22:19:b1:c5:68:7a:33:cc:db:af:0d:fc:d7:80:
                    2a:84:6a:56:6c:0e:72:07:2d:6c:45:5c:62:2e:90:
                    7a:af:6e:95:cc:0e:f8:3d:31:52:4b:f1:f6:e4:0e:
                    db:c3:c6:fc:3d:78:76:28:34:72:8f:77:3d:90:61:
                    ed:8f:ff:69:66:9e:67:f0:f5:40:97:f7:ab:28:28:
                    3a:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:60:89:83:49:29:68:6D:2E:F6:8C:F7:0A:29:C4:FE:3B:DC:C6:D6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bdb12a43-100e-4fc4-b7f2-2f4825e8f006/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bdb12a43-100e-4fc4-b7f2-2f4825e8f006/d91aa212f217640428eb6bc488ccbfc4f7bb65a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d290::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272866

    Signature Algorithm: sha256WithRSAEncryption
         7f:05:e3:2a:ac:12:77:ec:25:f8:c8:af:d6:7a:a9:75:24:e4:
         8d:d5:1b:d6:f7:4a:03:a2:25:7b:c6:1f:03:9c:fa:52:10:be:
         56:7a:49:73:81:f0:a8:33:3c:05:b1:32:cc:a2:87:00:5b:2b:
         2d:88:84:27:b5:7e:14:d8:f8:06:bc:24:8a:a7:12:d6:d3:8d:
         e6:01:43:60:71:e0:f4:66:70:84:13:0b:cc:3c:91:f1:ba:1e:
         f2:eb:d3:f8:46:26:d9:79:88:f1:c2:99:a6:58:fe:61:43:3f:
         d9:ba:31:7a:e4:7f:a3:6e:38:25:ad:58:c2:e5:56:f4:67:af:
         19:a2:4f:20:53:9c:f3:e9:0a:0d:ab:72:0a:0c:53:91:9b:ea:
         cb:17:43:b8:f8:bb:17:4c:40:e3:e7:20:e4:4e:22:a2:de:e7:
         ec:e0:27:c4:2f:25:f0:0a:40:58:b4:77:10:fc:b6:60:88:8c:
         8b:da:08:e4:ce:99:99:50:36:4b:35:5e:61:9d:7f:b9:ac:03:
         ea:24:33:00:39:17:bc:30:f5:ba:db:fd:30:89:ef:2a:51:9c:
         8d:d8:04:ed:f5:95:85:96:52:8d:c4:d5:7c:2d:61:29:ad:d9:
         09:81:7b:6f:d5:bd:86:e1:92:24:d0:c8:7f:1f:05:e1:48:5b:
         0b:9a:67:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----