Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5ac04d7db02e4afdccecfe88376b93bebb177bc.cer
File:                     e5ac04d7db02e4afdccecfe88376b93bebb177bc.cer (raw, json)
Hash identifier:          qlDfPz1OziOkdE3Ynl3EzWhALaXAl4IEU+IMlTlBehk=
Subject key identifier:   84:B0:E7:56:92:33:6E:2C:AF:3C:40:E6:3B:B1:38:97:F3:5F:6F:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010BCE57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/692bd108-777c-44ed-9d2a-7dd35b8ebdee/e5ac04d7db02e4afdccecfe88376b93bebb177bc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/692bd108-777c-44ed-9d2a-7dd35b8ebdee/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 14:33:08 +0000
Certificate not after:    Sun 17 Aug 2025 16:10:25 +0000
Subordinate resources:    AS: 272888
                          IP: 2803:690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17550935 (0x10bce57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 26 14:33:08 2024 GMT
            Not After : Aug 17 16:10:25 2025 GMT
        Subject: CN=e5ac04d7db02e4afdccecfe88376b93bebb177bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:ec:53:72:11:c7:e7:e5:c7:02:cf:42:6b:
                    5f:c2:a6:e7:b3:6f:4d:aa:a4:1d:96:65:5a:d9:8b:
                    32:be:68:57:6d:28:a0:19:c3:22:f5:9f:f9:12:9b:
                    1e:c5:65:53:f2:66:68:a9:40:c1:79:a9:d1:13:eb:
                    c8:02:6f:44:29:80:6e:6b:d5:56:c1:e9:61:69:35:
                    ec:5f:b3:36:d2:28:3e:64:ad:f0:8d:e7:fd:28:1f:
                    6b:04:a2:fe:cd:03:53:5d:0b:15:a3:cd:11:22:dd:
                    9d:49:64:95:6d:29:60:27:dd:ea:21:0b:a6:ce:3f:
                    49:63:25:ee:dd:ed:25:5a:c3:bc:0e:0a:08:18:26:
                    28:d5:8a:7e:9d:62:d8:a3:23:2b:25:b7:ff:ca:f3:
                    84:fd:5c:73:71:de:49:20:e9:9c:e4:df:a1:7b:6a:
                    93:5c:db:e6:cb:f3:cd:2f:14:1e:a0:4c:9c:5e:8c:
                    6f:3e:e2:06:f5:7a:65:a7:7a:30:96:56:35:7c:28:
                    0a:1f:72:02:ae:5c:3b:ee:b3:6e:83:7e:50:7d:3c:
                    54:9e:29:74:b1:6f:bd:0c:57:df:f5:72:e7:c6:49:
                    b0:16:76:e7:f3:db:cc:1d:ea:13:f7:74:a0:d4:0e:
                    55:67:5e:79:cf:92:f7:ca:fb:87:32:ca:3e:01:0f:
                    a0:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:B0:E7:56:92:33:6E:2C:AF:3C:40:E6:3B:B1:38:97:F3:5F:6F:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/692bd108-777c-44ed-9d2a-7dd35b8ebdee/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/692bd108-777c-44ed-9d2a-7dd35b8ebdee/e5ac04d7db02e4afdccecfe88376b93bebb177bc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272888

    Signature Algorithm: sha256WithRSAEncryption
         44:a5:c9:65:f5:e5:9e:2a:5c:90:6a:23:61:44:11:39:9a:f6:
         5a:b4:48:44:be:cd:63:c5:bf:a6:20:20:a3:c6:d8:88:4d:7d:
         e9:bc:e0:be:27:1d:d6:ec:df:54:0c:b5:68:25:98:87:5a:33:
         53:ff:df:5a:74:5c:25:e4:ae:7d:19:43:99:6e:57:4e:66:25:
         ce:6d:48:da:12:62:ea:d6:20:d4:55:01:ef:9a:e4:15:b6:e4:
         3d:c3:3e:c4:e5:18:ef:55:f4:19:2a:f8:e6:c9:7c:62:b1:c5:
         10:fb:f6:47:8b:16:a6:d0:eb:4d:62:45:cd:3b:70:e0:64:b6:
         f2:ab:4f:85:f3:89:ea:35:c4:33:4a:e0:d4:64:73:20:ec:41:
         e5:02:2d:5b:14:5e:64:0a:70:81:d5:4b:b9:94:26:00:60:bb:
         87:55:e1:f9:40:08:6a:88:4a:3e:6c:c5:34:78:5d:a4:52:b3:
         f5:29:e7:42:01:b3:d1:e4:13:65:d1:1e:fb:20:3a:db:69:90:
         50:4d:de:f6:f0:8e:38:ed:7d:0a:b2:73:06:6a:bf:bd:90:ec:
         59:12:ed:78:8c:19:9b:37:eb:3c:a2:4c:89:27:69:3c:1e:12:
         eb:e7:6a:8c:d3:f9:49:68:9a:3b:09:66:c7:83:e2:9c:97:a2:
         51:78:59:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----