Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e13d8689b5bf7d33e445beab6c94f2e49a7e9217.cer
File:                     e13d8689b5bf7d33e445beab6c94f2e49a7e9217.cer (raw, json)
Hash identifier:          JcpqmDnkKUGkJU0DT1cLDLyoWqq+UQ1xqCC38EHWUK8=
Subject key identifier:   74:F6:A7:2E:FA:DF:71:4B:A5:DF:71:6C:29:0F:92:91:86:88:5D:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01032A95
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/868c8c9b-f3fb-417d-af44-4c46a48263bc/e13d8689b5bf7d33e445beab6c94f2e49a7e9217.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/868c8c9b-f3fb-417d-af44-4c46a48263bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Dec 2023 05:10:05 +0000
Certificate not after:    Tue 07 Oct 2025 20:31:02 +0000
Subordinate resources:    AS: 272358
                          IP: 2806:412::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16984725 (0x1032a95)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  8 05:10:05 2023 GMT
            Not After : Oct  7 20:31:02 2025 GMT
        Subject: CN=e13d8689b5bf7d33e445beab6c94f2e49a7e9217
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:95:b6:57:5e:e0:9b:b4:dc:fd:df:f0:b5:ea:
                    d4:a4:88:b8:bc:83:5e:1c:31:72:d2:f7:8d:ec:77:
                    7b:2f:62:c6:fd:97:ce:3a:5c:e4:9e:84:99:6c:f9:
                    fb:41:b1:d7:1c:a3:08:f3:7f:c1:b7:18:80:3f:53:
                    87:c9:c6:16:57:bd:66:98:d0:af:7e:ef:32:85:8a:
                    87:b7:ea:30:5b:8d:97:d4:7a:17:2f:ae:69:28:5e:
                    57:0e:b2:e0:7f:24:1f:4b:b4:43:e2:eb:f1:84:53:
                    8d:1e:ff:68:12:6a:ba:92:4f:db:f8:e1:5f:55:7d:
                    68:47:32:52:68:e2:89:50:f1:21:9f:c0:d4:42:10:
                    ae:ae:29:97:ac:f4:29:e6:0f:51:51:a6:25:53:77:
                    a8:a4:df:dc:04:e0:a5:54:cf:2f:f0:4c:59:15:c3:
                    a6:fa:fc:a7:73:65:e9:02:b7:6f:7f:bd:39:5b:e8:
                    d8:d4:b6:59:be:70:11:70:9b:b0:e1:24:86:33:37:
                    a8:10:47:55:3e:7f:42:03:bb:2d:9c:25:82:43:46:
                    4d:f5:fd:38:79:b8:7c:9a:c1:0a:2e:85:a2:a0:65:
                    3b:d5:ee:13:a9:1d:37:17:8c:4f:89:82:ff:49:16:
                    b1:04:b0:89:8d:17:84:53:79:8d:8a:01:b8:cb:11:
                    2c:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:F6:A7:2E:FA:DF:71:4B:A5:DF:71:6C:29:0F:92:91:86:88:5D:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/868c8c9b-f3fb-417d-af44-4c46a48263bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/868c8c9b-f3fb-417d-af44-4c46a48263bc/e13d8689b5bf7d33e445beab6c94f2e49a7e9217.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:412::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272358

    Signature Algorithm: sha256WithRSAEncryption
         2c:30:dd:85:35:66:6d:20:f2:16:3f:94:19:ef:b7:79:43:e1:
         f6:59:46:e4:ae:52:64:1e:73:46:7d:d7:ad:b3:36:39:75:c6:
         fd:1e:9d:33:24:93:62:30:56:95:fc:6f:fe:4f:26:2c:25:18:
         01:1b:58:6d:81:95:67:52:31:fd:0e:95:af:45:72:07:fd:19:
         d9:5d:49:67:eb:d7:79:30:ff:1f:a0:1c:9f:a4:c2:c6:26:60:
         5d:ed:82:26:b6:9e:15:b2:38:44:b0:81:ac:ff:aa:f5:a2:42:
         d0:6d:bf:18:51:a8:04:f7:72:e3:5d:47:2b:c0:96:d8:36:d1:
         fa:2a:1a:58:20:94:ba:4a:36:66:df:98:2b:b0:7d:e5:d8:61:
         f3:38:c1:a0:39:83:0f:04:50:f8:c3:39:4b:b2:e7:44:f3:d9:
         ef:a4:7c:27:11:44:ac:10:8b:a3:1f:e3:0e:2a:b3:f3:03:75:
         75:29:dd:3a:48:fb:cf:f5:fd:0e:78:38:92:6e:1a:4c:09:fd:
         e7:a2:b3:29:23:94:ac:3c:c5:38:3f:0f:a9:38:89:7c:13:47:
         ce:d5:ce:57:be:b3:3c:e5:74:8e:f7:5f:20:a7:b9:5f:1b:49:
         05:f1:83:a6:87:d8:57:e8:3f:71:96:75:ff:24:88:bc:1e:18:
         db:97:62:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----