Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d935be266c0ad05b908bb34ff77706b51f8bb71f.cer
File:                     d935be266c0ad05b908bb34ff77706b51f8bb71f.cer (raw, json)
Hash identifier:          JuVmg5jj+dXFAdOZ9pwlTCYnPbfi7TqtAROZ4vrGRoY=
Subject key identifier:   1D:60:2D:B9:5C:39:70:70:2E:FC:80:EE:E5:DB:46:88:D1:6A:08:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F43805
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7ef440ca-665b-402d-9393-2fb4b0923ad2/d935be266c0ad05b908bb34ff77706b51f8bb71f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7ef440ca-665b-402d-9393-2fb4b0923ad2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 07 Aug 2023 12:58:39 +0000
Certificate not after:    Mon 15 Jul 2024 15:20:39 +0000
Subordinate resources:    AS: 271979
                          IP: 2803:3e10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16005125 (0xf43805)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  7 12:58:39 2023 GMT
            Not After : Jul 15 15:20:39 2024 GMT
        Subject: CN=d935be266c0ad05b908bb34ff77706b51f8bb71f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:2e:da:9e:fe:80:6e:08:42:e1:51:9a:02:
                    c9:3a:78:8a:23:da:47:c6:04:3c:c5:9d:82:f7:7d:
                    3c:11:5f:23:2d:6f:f0:5c:82:e5:5a:0e:75:e9:5f:
                    3e:4a:03:48:1e:db:38:9a:34:e4:29:e6:7c:94:15:
                    96:e8:be:47:61:df:32:50:2d:34:8c:43:99:3b:2c:
                    b7:06:9c:b4:e2:6a:64:8f:78:1d:7a:35:f9:e7:9f:
                    e2:14:c4:05:be:b0:42:49:a2:86:5a:c9:39:36:36:
                    9e:7d:f1:0c:d0:33:b3:2a:e2:af:65:6b:3d:15:90:
                    a6:28:ea:1c:5f:5e:b2:61:ca:a6:ff:20:fa:af:bf:
                    cc:80:55:a3:b9:19:07:95:21:5e:6a:90:91:09:af:
                    96:da:45:dc:f8:88:77:9f:d0:68:a0:05:c8:52:5a:
                    d1:f9:fd:9d:25:f4:2e:41:56:2f:ea:86:f7:b4:30:
                    cb:81:eb:2b:d4:31:fc:62:2d:51:29:ba:6e:fa:8a:
                    10:19:b5:d7:22:44:e8:3b:39:48:d9:ef:79:64:4e:
                    01:55:3b:0e:67:27:26:f7:64:5f:c4:8b:73:db:23:
                    81:c3:30:95:23:81:d8:1d:c7:f0:be:75:6b:98:b6:
                    09:69:76:2d:d9:cf:74:02:8c:bb:12:d6:51:02:bd:
                    9e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:60:2D:B9:5C:39:70:70:2E:FC:80:EE:E5:DB:46:88:D1:6A:08:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7ef440ca-665b-402d-9393-2fb4b0923ad2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7ef440ca-665b-402d-9393-2fb4b0923ad2/d935be266c0ad05b908bb34ff77706b51f8bb71f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271979

    Signature Algorithm: sha256WithRSAEncryption
         59:b3:17:47:a2:8a:07:26:24:a7:e2:8f:2a:41:92:da:fe:10:
         b0:5f:d4:b2:4b:a7:1d:f2:25:9b:65:a4:e5:a7:80:c3:2b:e9:
         ab:bc:10:b8:89:c2:08:33:9c:ac:8a:7a:90:48:49:b5:4d:36:
         b9:69:a8:d7:09:d4:15:64:21:e2:f2:ea:d9:8e:8a:16:17:93:
         15:ae:0c:69:a6:ef:f1:b3:79:c1:cf:b0:26:3f:4a:8f:cf:b3:
         c5:24:cc:b5:40:10:86:95:0a:39:a7:ff:17:c1:73:ca:eb:82:
         ea:b1:52:85:97:e4:88:18:4f:b4:62:16:b3:0b:02:f7:2b:52:
         58:46:c0:43:06:20:80:6a:d9:bc:2e:73:aa:11:74:33:44:79:
         42:f1:19:46:82:68:a9:92:5a:ea:cc:9a:c1:4f:b0:5f:b6:e0:
         db:6a:27:1a:24:e5:ff:c6:15:2d:34:6f:67:f0:bf:9d:41:d1:
         da:b6:38:bb:de:9a:4c:d3:88:ee:23:e8:c8:1e:a2:89:fd:58:
         a8:29:6f:38:eb:61:4f:6f:81:5c:7f:85:43:7a:03:ad:2e:0f:
         9a:cb:b8:b5:67:b1:7e:bc:65:43:be:7e:f5:1e:73:9f:db:c5:
         f1:88:62:0c:68:6c:cb:6f:1a:ed:99:cb:9b:1d:ce:1a:4c:24:
         d8:41:22:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----