Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9d8987a151369683bec9eb071c6399a40116247.cer
File:                     d9d8987a151369683bec9eb071c6399a40116247.cer (raw, json)
Hash identifier:          YJQbLz44Ccov8XOEDa8+po608MBWHfO9Us205AD66qY=
Subject key identifier:   36:B7:D0:2E:67:52:7C:93:64:C0:7D:22:71:35:86:E5:6E:B0:58:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F27303
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3e747bbb-1d44-4153-86d7-4b3a85c97dc2/d9d8987a151369683bec9eb071c6399a40116247.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3e747bbb-1d44-4153-86d7-4b3a85c97dc2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Jul 2023 18:32:16 +0000
Certificate not after:    Tue 11 Feb 2025 20:12:18 +0000
Subordinate resources:    AS: 272122
                          IP: 2803:af10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15889155 (0xf27303)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 20 18:32:16 2023 GMT
            Not After : Feb 11 20:12:18 2025 GMT
        Subject: CN=d9d8987a151369683bec9eb071c6399a40116247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:2b:e8:af:d8:c9:34:3a:e6:81:d2:dd:6d:8a:
                    f1:b1:fc:59:c3:64:45:26:ce:3b:c3:95:5d:ca:3f:
                    ea:5a:35:e3:96:b7:b8:ed:f0:e6:d5:ec:3d:ac:6b:
                    33:8c:47:68:d2:d9:2a:10:ef:ec:a2:91:d7:b2:86:
                    4a:cd:57:1e:0f:d8:bc:2b:0b:75:69:5e:70:a9:7c:
                    98:7d:1d:7f:28:54:68:f9:7c:e6:3a:98:ac:27:49:
                    0e:3b:82:96:eb:81:c5:b2:a5:1a:6c:ee:ae:2d:e7:
                    da:eb:d8:fa:eb:fb:b5:14:40:36:32:bd:2c:0f:ed:
                    8f:93:08:63:fe:63:51:6f:ba:3f:a7:7a:59:10:a6:
                    02:62:bf:5b:c0:69:30:76:67:b6:9a:5b:9d:f7:93:
                    ef:59:77:ce:b9:ea:44:1c:ff:67:78:71:12:87:16:
                    18:9d:bd:bb:9b:dc:7e:d9:c3:53:98:67:bc:65:5c:
                    ed:f8:8b:12:ed:ee:ba:c1:40:74:43:5b:ce:68:18:
                    c6:fd:6f:e1:60:69:95:c9:5f:4f:86:79:5e:dd:ec:
                    d9:03:7c:71:48:84:cf:66:fa:5f:5e:96:40:34:9d:
                    d9:46:26:a7:cf:7a:cb:d3:26:4f:f3:3b:f8:d9:24:
                    f3:79:1a:2a:b7:2a:66:6d:da:63:09:57:9a:c7:65:
                    99:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B7:D0:2E:67:52:7C:93:64:C0:7D:22:71:35:86:E5:6E:B0:58:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3e747bbb-1d44-4153-86d7-4b3a85c97dc2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3e747bbb-1d44-4153-86d7-4b3a85c97dc2/d9d8987a151369683bec9eb071c6399a40116247.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:af10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272122

    Signature Algorithm: sha256WithRSAEncryption
         6a:67:96:6d:73:b5:86:e4:f3:d1:8f:f3:d2:f4:9e:bb:55:e2:
         08:a3:0c:3d:29:55:3b:07:3e:68:fd:1d:75:5b:db:cb:84:37:
         e8:00:26:33:85:c6:d5:c3:0c:95:39:2b:9e:16:7e:3a:25:5a:
         3e:4b:26:0d:6b:fb:3e:22:95:4b:bb:aa:65:8d:fb:95:b2:99:
         b2:c7:84:67:c4:c3:58:3f:90:53:e4:21:32:f1:d9:ac:05:28:
         ff:e2:fa:0a:37:80:24:72:68:79:3a:0f:27:ac:b0:f3:17:a4:
         94:cd:41:8a:a3:3f:ab:a9:b2:f5:30:ae:7e:5d:60:72:9a:3a:
         63:35:63:eb:1a:46:80:a5:26:17:19:b9:aa:2f:49:a1:e1:be:
         a4:16:76:9d:ce:b8:49:12:5a:3d:4b:c1:2e:b7:d2:ad:f6:dc:
         f7:ba:42:82:6a:79:4d:da:32:41:7d:54:5a:3d:ce:06:01:fa:
         7d:6a:50:4f:f8:7e:6e:52:b4:d7:d5:9a:f7:c7:b2:c2:d4:16:
         40:ca:9b:82:1c:b4:fb:8c:8a:4e:19:31:be:46:0c:1b:7a:ef:
         04:69:e0:83:3c:13:54:ac:22:f9:10:54:c5:ed:d0:1d:df:3c:
         6d:87:ce:e4:d2:a4:bd:73:d3:1c:b0:c0:20:47:d9:c0:20:c9:
         99:d3:74:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----