Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2fa9994b1c787720bb1598b000a3b10e03354bd.cer
File:                     e2fa9994b1c787720bb1598b000a3b10e03354bd.cer (raw, json)
Hash identifier:          N4JJUOL1eJUMheGuDxtWhMIhX80UCe6YVomH3Fp344Y=
Subject key identifier:   AC:BD:4D:B0:D8:F7:3C:58:53:77:DB:C1:79:8C:95:19:F0:7A:41:FB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01051C4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df14a463-5b7f-486d-bd53-cefd3c6c590d/e2fa9994b1c787720bb1598b000a3b10e03354bd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df14a463-5b7f-486d-bd53-cefd3c6c590d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 15:55:10 +0000
Certificate not after:    Wed 06 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 273151
                          IP: 2803:dc50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17112138 (0x1051c4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 27 15:55:10 2023 GMT
            Not After : Aug  6 06:00:00 2025 GMT
        Subject: CN=e2fa9994b1c787720bb1598b000a3b10e03354bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:6a:e0:33:1f:80:a6:5f:1d:c1:6e:0b:7a:ca:
                    0e:d2:af:b4:d7:13:5c:20:7d:56:26:c6:0f:a9:c5:
                    a7:ea:16:41:11:2f:d3:bf:ca:59:30:93:53:41:3b:
                    e9:41:dc:52:4d:cb:ec:d1:ec:a2:46:90:38:01:2a:
                    37:2f:5b:80:b0:19:2c:33:1f:30:08:49:c7:d7:f6:
                    e3:9e:da:ac:e7:14:ed:ed:11:23:d4:6c:fa:1a:a5:
                    d1:4e:b3:e8:b6:c8:1f:d6:4b:09:1c:24:0e:1c:2a:
                    09:bb:7c:c9:ee:aa:5e:4b:98:5c:a1:e5:68:1f:24:
                    ab:8a:d6:dc:48:ed:d8:c4:60:11:fc:1e:f0:95:ef:
                    3b:59:bd:39:20:1a:c5:d6:b4:76:36:8e:8d:d8:74:
                    0e:8a:91:a9:01:a6:da:c7:cd:81:72:11:22:d3:dc:
                    9a:01:c2:46:0e:39:c5:e5:5d:9f:3d:e4:63:e8:de:
                    97:18:77:2c:0c:8b:02:38:61:2c:0f:2f:4c:92:67:
                    2f:98:aa:af:fd:2a:33:a5:03:52:c1:f8:a5:ba:18:
                    b9:d7:a5:6f:db:58:11:18:21:b5:21:7a:f1:a7:75:
                    d8:ef:a5:74:d7:51:89:18:83:a5:1e:e9:ae:44:f3:
                    d9:c2:03:96:1c:d3:f5:b8:88:e7:f7:dd:7c:87:f6:
                    14:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BD:4D:B0:D8:F7:3C:58:53:77:DB:C1:79:8C:95:19:F0:7A:41:FB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df14a463-5b7f-486d-bd53-cefd3c6c590d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df14a463-5b7f-486d-bd53-cefd3c6c590d/e2fa9994b1c787720bb1598b000a3b10e03354bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dc50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273151

    Signature Algorithm: sha256WithRSAEncryption
         26:ff:5d:26:2a:64:b2:dc:b1:db:e0:be:03:05:ee:fd:e2:a4:
         a8:ae:eb:a0:92:c7:f8:c6:56:d5:51:db:27:ab:53:52:58:11:
         a2:5d:1d:fa:f7:9b:95:61:25:46:d2:b7:09:1f:cb:d2:62:ca:
         af:57:33:7d:24:25:21:51:64:91:35:5d:79:f3:97:35:8c:d3:
         e6:31:8e:e4:66:ff:5d:b8:44:af:6c:45:77:9b:74:0c:bd:fb:
         53:f7:d8:ce:85:3f:0b:03:b2:10:92:57:1e:ee:52:2d:b6:67:
         4f:55:6a:89:03:6f:43:bc:07:18:b2:26:8c:20:aa:43:60:be:
         c5:aa:74:42:50:07:b8:1e:4a:1f:8e:ca:c8:1c:ef:8e:5d:af:
         72:5b:58:0a:07:93:67:e5:89:85:5a:5e:d3:4a:80:8f:77:6d:
         5d:ed:1f:b7:f4:52:17:ef:e2:77:7c:28:68:97:22:14:a0:d1:
         7d:b9:3a:94:5b:65:ea:7e:44:5d:83:22:70:f9:1c:c7:d9:08:
         08:8e:ad:07:7e:83:3e:8c:e0:ad:be:42:09:f8:6f:c2:cc:9f:
         cc:47:67:61:70:df:ca:b8:e5:d8:31:b8:10:5d:90:83:d6:e1:
         8f:94:31:a4:20:2e:7f:15:73:c0:fc:ee:00:a6:dd:2e:f3:f9:
         e3:9d:b9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----