Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3603d4198c0643191d4d24f2f4868c4fbcc4310.cer
File:                     e3603d4198c0643191d4d24f2f4868c4fbcc4310.cer (raw, json)
Hash identifier:          Q/Ao5GBfMxaPngeGULiszpK3r0kZx3AM96/Kp7CoIos=
Subject key identifier:   E4:41:B1:9A:DF:34:2A:12:7E:AF:DA:B6:9D:3D:C9:A2:7F:5E:87:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3893C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dcf6862e-b7ac-4679-9364-14d0cbe5bedb/e3603d4198c0643191d4d24f2f4868c4fbcc4310.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dcf6862e-b7ac-4679-9364-14d0cbe5bedb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 14:16:18 +0000
Certificate not after:    Sun 21 Jul 2024 22:55:40 +0000
Subordinate resources:    AS: 272877
                          IP: 2803:2a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14911804 (0xe3893c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 14:16:18 2023 GMT
            Not After : Jul 21 22:55:40 2024 GMT
        Subject: CN=e3603d4198c0643191d4d24f2f4868c4fbcc4310
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:a9:e3:ef:93:af:83:e7:9c:dd:83:39:d8:62:
                    08:49:af:91:f1:a2:ad:b3:1c:61:33:0c:56:dc:24:
                    db:de:8f:1d:3d:52:85:79:33:a1:75:51:db:dd:5e:
                    d5:d5:a7:39:d7:6e:0f:ea:6e:d2:8b:54:30:c2:89:
                    30:88:e1:2e:21:c7:08:93:eb:4e:59:7f:f7:b2:fd:
                    dd:75:d4:99:58:5b:44:3c:c1:ba:ee:f4:c8:a1:f6:
                    4a:b7:e5:66:6c:e7:f9:f3:b3:14:d0:31:5a:2f:68:
                    8e:ff:20:60:b2:e9:61:05:cb:56:56:2c:90:63:aa:
                    a9:04:9a:03:4f:0a:7f:5c:28:7b:e4:a9:a9:8f:93:
                    9d:1d:68:dc:64:f6:70:79:21:63:d0:29:5e:65:e8:
                    82:19:02:a6:b1:0b:b2:86:4d:08:46:dd:e8:70:8c:
                    fd:66:52:32:be:6d:62:75:6b:99:41:cd:26:38:74:
                    44:24:61:37:c6:65:1c:fd:fd:52:db:b3:61:0c:09:
                    46:d6:fa:ea:85:90:f1:9a:63:8d:c1:1f:4d:e4:18:
                    d7:94:98:c1:23:9f:74:30:d9:75:6c:78:1a:2b:79:
                    59:69:f9:4e:c6:6e:85:86:8e:dd:42:4b:a2:c2:fa:
                    0c:e0:0f:83:66:9e:d0:06:71:2f:7d:b0:ad:b2:d2:
                    93:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:41:B1:9A:DF:34:2A:12:7E:AF:DA:B6:9D:3D:C9:A2:7F:5E:87:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dcf6862e-b7ac-4679-9364-14d0cbe5bedb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dcf6862e-b7ac-4679-9364-14d0cbe5bedb/e3603d4198c0643191d4d24f2f4868c4fbcc4310.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272877

    Signature Algorithm: sha256WithRSAEncryption
         7f:03:0d:15:27:e5:83:a7:44:30:2a:ce:17:3e:83:3e:dd:ff:
         dc:f8:de:fb:0f:7b:79:75:c7:48:4f:5e:7f:81:ad:19:e8:18:
         e2:b4:ed:68:b1:af:9a:c4:12:93:5b:8f:f9:e3:61:fe:f7:7d:
         db:48:a5:d6:a2:77:21:58:b5:26:a7:69:c8:f7:24:65:09:87:
         81:e4:6f:41:43:ce:64:9f:53:ce:78:43:9a:a3:37:85:00:94:
         38:78:02:52:2c:5e:dc:3c:a2:68:0c:f3:67:8d:47:01:81:73:
         01:29:9e:20:9e:b2:ea:1b:6c:17:ef:91:e6:3a:4f:a0:60:9b:
         42:96:4e:d8:58:e4:41:6a:25:bf:5d:1f:bf:44:b1:e9:1f:64:
         51:f0:58:34:ed:5e:0f:a8:2e:63:d2:7d:03:28:9b:0c:67:35:
         fe:7c:6d:a6:ea:1d:3e:ed:c0:3e:b1:2a:23:73:49:1e:cb:c6:
         7c:c6:27:93:01:1e:66:f6:06:ce:4f:fa:ac:8d:d9:e5:0b:4a:
         13:b5:fa:2c:a9:b6:4a:29:ef:4e:1f:81:73:20:83:d5:52:54:
         a6:c2:55:39:ce:64:d9:75:4e:fa:61:23:96:3b:b8:07:49:a9:
         4c:17:53:4d:bf:50:e9:15:4d:f7:e2:53:9a:c4:f9:85:72:8d:
         60:71:62:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----