Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9b8318d93dc2ea841495e9c89dcc984f84c59d8.cer
File:                     d9b8318d93dc2ea841495e9c89dcc984f84c59d8.cer (raw, json)
Hash identifier:          7qApl+JhemJR66a2HJlnBcm3+zz0ihMFSzXh+aY+/6M=
Subject key identifier:   68:15:D8:43:C7:35:F2:17:03:DA:44:AE:8C:8B:EF:D6:F6:50:BF:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01049968
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/662d262a-1003-4ad0-9174-ae1cb9a7bd53/d9b8318d93dc2ea841495e9c89dcc984f84c59d8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/662d262a-1003-4ad0-9174-ae1cb9a7bd53/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Dec 2023 15:24:16 +0000
Certificate not after:    Mon 13 Jan 2025 17:57:03 +0000
Subordinate resources:    AS: 263738

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17078632 (0x1049968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 21 15:24:16 2023 GMT
            Not After : Jan 13 17:57:03 2025 GMT
        Subject: CN=d9b8318d93dc2ea841495e9c89dcc984f84c59d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:24:a2:45:cf:fd:2b:4a:03:2e:30:cb:f1:51:
                    76:e0:ec:18:cc:a6:43:44:30:ff:0f:f0:09:84:d7:
                    9f:ba:b3:9b:2a:71:06:42:bb:00:9b:71:31:33:a0:
                    e7:66:e8:f6:4a:8f:ec:c5:96:ad:a9:a9:df:e0:fb:
                    c4:15:33:e9:ea:e8:ca:76:83:4e:2f:55:a2:fa:61:
                    21:6e:4c:6b:c6:c8:de:76:b9:35:4e:6b:8e:97:6c:
                    9b:c9:de:13:3d:89:7e:ae:da:cd:7b:bf:9b:d5:fa:
                    9b:ca:b2:24:3a:72:8a:dc:dd:76:eb:34:8a:10:6c:
                    dc:b4:55:aa:db:5b:f0:40:a0:47:7e:3c:9c:9f:f0:
                    53:c5:a9:65:96:e2:76:49:2a:f6:c7:ed:31:96:72:
                    e8:08:4e:fc:d3:89:ad:2c:85:39:d9:da:50:07:d9:
                    1e:4e:11:c9:f7:fa:91:1c:e8:d3:e6:19:f3:31:a8:
                    05:1d:87:5f:bd:39:82:47:d9:07:ac:45:d0:f4:f8:
                    ee:1e:f5:40:fa:e4:29:04:bd:ac:ac:71:df:4e:ed:
                    1a:64:9c:ef:ab:cf:65:f9:74:8e:b1:a1:05:8f:4a:
                    4a:2b:10:ac:8a:9a:94:af:d8:8a:52:18:7b:47:d8:
                    73:47:2a:f7:f2:58:d2:99:12:50:5d:13:81:b3:b0:
                    21:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:15:D8:43:C7:35:F2:17:03:DA:44:AE:8C:8B:EF:D6:F6:50:BF:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/662d262a-1003-4ad0-9174-ae1cb9a7bd53/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/662d262a-1003-4ad0-9174-ae1cb9a7bd53/d9b8318d93dc2ea841495e9c89dcc984f84c59d8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263738

    Signature Algorithm: sha256WithRSAEncryption
         23:f5:ba:77:48:9a:43:33:bf:53:42:43:6f:7c:f8:fb:dd:af:
         64:09:a1:35:4e:ec:1e:fa:3b:9e:4d:e2:a0:bf:6d:8e:80:7e:
         0b:a6:24:b1:cd:a5:8c:8a:91:2e:f0:9d:1d:1f:7d:8f:84:25:
         05:b2:b6:a6:51:4e:82:09:34:6e:0e:21:5a:0d:ac:8c:af:84:
         67:c7:e5:d9:aa:67:13:3a:dc:e8:ce:09:ad:db:1c:35:f4:d8:
         af:63:50:0a:36:c4:10:5c:48:4e:a1:fe:36:84:94:92:54:3f:
         2f:c4:51:82:5d:e9:63:9e:70:55:0a:26:39:e0:cf:3c:46:33:
         64:d5:d7:4b:97:b5:24:82:02:38:92:69:bc:a4:df:eb:62:9d:
         60:c8:9c:c2:26:b4:9f:07:34:70:14:c5:57:a0:4b:9d:cb:9d:
         16:39:3f:08:f5:6e:5c:1c:06:fa:41:ed:47:53:e0:7c:f2:d4:
         c8:5e:e5:56:b2:e0:9c:ec:d4:81:a2:48:74:3d:2a:ff:53:74:
         3e:f5:27:09:62:36:f4:5c:e3:82:c4:31:c9:04:8c:6e:da:7c:
         02:8b:82:d5:de:2c:83:88:ec:85:1d:2a:7e:df:46:aa:b9:da:
         ba:33:be:bf:ac:49:a5:55:7e:da:9d:ed:33:18:0e:bb:d4:5b:
         d9:a2:df:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----