Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e0b72f97b6d516483ae4e6e9c8ec8ef6dfb3d17a.cer
File:                     e0b72f97b6d516483ae4e6e9c8ec8ef6dfb3d17a.cer (raw, json)
Hash identifier:          UfGDQoyV+neRAoAh1Z4vqLGh4/dCkyzl1lfiKlrOT1o=
Subject key identifier:   57:11:A6:BD:BC:9F:A6:7F:E4:E1:F3:87:D5:DD:01:F8:5F:AE:8F:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102FC70
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f0fdfec3-96ed-434c-8329-c7d701fe85f9/e0b72f97b6d516483ae4e6e9c8ec8ef6dfb3d17a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f0fdfec3-96ed-434c-8329-c7d701fe85f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 02:25:58 +0000
Certificate not after:    Sun 28 Sep 2025 16:11:26 +0000
Subordinate resources:    AS: 273136
                          IP: 2803:d450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16972912 (0x102fc70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  6 02:25:58 2023 GMT
            Not After : Sep 28 16:11:26 2025 GMT
        Subject: CN=e0b72f97b6d516483ae4e6e9c8ec8ef6dfb3d17a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c4:ea:00:27:a9:6a:4e:d4:68:ce:eb:b8:de:
                    d7:c2:2c:3e:86:58:36:5c:9d:10:cf:69:6d:1e:2e:
                    1e:1d:80:41:5a:8f:ea:13:7b:98:3e:cd:5a:89:d8:
                    52:8a:87:6d:1c:fa:ac:07:59:83:2f:15:d7:ef:8f:
                    90:00:53:93:26:53:01:51:87:b2:df:60:6d:bc:1a:
                    16:b2:08:dc:5f:ca:71:f4:e1:93:78:a2:9b:93:4d:
                    8a:1f:ac:c0:24:03:37:ea:2b:f8:de:4d:b6:30:bb:
                    5c:12:04:c9:af:0d:33:23:f7:0e:fc:0d:da:f1:4b:
                    02:ff:79:6d:e7:8e:af:62:d8:8b:b6:03:57:a1:58:
                    2b:09:c4:05:eb:64:d6:21:ad:59:f8:a7:c1:0d:13:
                    1a:9e:36:5e:fa:63:67:d3:7b:ca:89:98:4f:a1:78:
                    d8:ae:be:1e:bc:f7:64:91:37:77:00:04:59:b4:33:
                    14:7a:f2:1d:5e:ab:8b:b5:5e:60:a9:dc:fe:e6:1e:
                    3a:9a:ad:84:5d:21:86:43:f4:dc:1f:95:c3:1f:8a:
                    b5:49:9f:42:3f:70:86:43:97:e0:4f:92:b7:81:a8:
                    f4:4f:5a:3f:df:05:17:4a:c3:8b:f8:53:af:b8:6f:
                    01:30:17:bf:85:c8:2f:90:23:a2:ee:b1:c0:5d:ce:
                    36:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:11:A6:BD:BC:9F:A6:7F:E4:E1:F3:87:D5:DD:01:F8:5F:AE:8F:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f0fdfec3-96ed-434c-8329-c7d701fe85f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f0fdfec3-96ed-434c-8329-c7d701fe85f9/e0b72f97b6d516483ae4e6e9c8ec8ef6dfb3d17a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273136

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:ec:29:bd:d9:8a:ca:7f:28:cb:5a:f7:18:1b:4c:e9:df:
         df:10:b0:b6:7f:b5:c7:ea:e0:c1:b8:a1:4f:70:f1:a3:bb:a8:
         3d:00:f3:bd:a8:c8:e3:e2:0d:e2:7b:85:dc:67:16:39:d9:b0:
         0c:7a:e5:db:6d:68:90:d4:41:c2:f5:ce:44:67:62:4f:b2:fe:
         2d:52:14:af:23:d5:af:e3:c1:b9:1c:e1:de:0f:5a:eb:63:e8:
         d6:e9:bd:21:ce:ed:28:ea:e7:44:2f:0f:7e:28:23:97:8c:66:
         f6:09:24:95:33:01:c2:cd:52:a3:c7:61:58:6d:59:57:5d:ed:
         37:4a:58:86:ee:93:08:70:29:3f:82:5b:27:ce:a1:36:fa:a7:
         e9:55:38:06:d1:2a:49:7c:23:61:5f:a2:9c:71:91:35:1e:d1:
         94:2c:8a:50:46:b4:a2:5b:82:b7:d5:11:68:ac:89:06:10:46:
         12:8a:66:fa:15:60:7a:a4:7c:58:95:f3:9b:55:e9:ee:b9:d7:
         36:65:61:93:a4:db:2f:de:64:25:52:7f:83:06:78:8a:d5:0e:
         5c:da:bb:ac:63:ec:96:89:0e:a3:4d:34:2a:3d:14:4e:59:6c:
         08:26:f6:e1:13:f8:99:95:fc:c6:e9:a9:e0:ae:d8:46:6b:36:
         20:ac:14:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----