Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5e2911f03162aae90e336251f8333552d29b992.cer
File:                     e5e2911f03162aae90e336251f8333552d29b992.cer (raw, json)
Hash identifier:          a3wsXhWrYTuJlxjLtRWpoolKwvReYLnJ/0IH15Xp8uA=
Subject key identifier:   79:10:30:DF:5C:F9:78:8E:C8:08:65:CC:B8:98:C3:DA:A4:54:B1:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F88C51
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/631790eb-3525-4cbd-86c9-1bba3dff91aa/e5e2911f03162aae90e336251f8333552d29b992.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/631790eb-3525-4cbd-86c9-1bba3dff91aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Sep 2023 21:13:56 +0000
Certificate not after:    Wed 14 May 2025 15:24:00 +0000
Subordinate resources:    AS: 271937
                          IP: 2803:610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16288849 (0xf88c51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  6 21:13:56 2023 GMT
            Not After : May 14 15:24:00 2025 GMT
        Subject: CN=e5e2911f03162aae90e336251f8333552d29b992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:ee:92:b6:02:ea:68:49:65:c4:1b:d5:ff:ae:
                    84:f0:0b:93:74:6e:7a:d8:54:10:1c:17:3f:7a:61:
                    0e:10:cc:65:eb:ea:45:6f:dd:0d:84:93:be:7f:d6:
                    14:6f:16:03:05:23:fa:37:f3:c6:70:aa:ce:ae:9e:
                    a6:d0:df:bf:94:05:67:e8:43:72:1a:fd:8e:7e:d0:
                    c6:88:8e:57:73:e7:29:e2:36:c3:bb:ff:e7:b5:dc:
                    84:01:40:19:c5:52:cc:f0:3b:3c:ca:33:a5:52:d2:
                    1c:34:c3:82:ff:a9:80:fc:76:9b:db:fc:9c:28:04:
                    74:f6:1e:58:3e:fb:24:16:dd:e6:1f:a8:7b:9f:1c:
                    49:b5:0b:dc:7c:04:25:45:3e:80:c2:85:d6:48:e1:
                    71:3c:19:92:22:6c:86:9e:1e:1d:e1:3e:40:ee:a1:
                    42:35:27:52:52:9d:47:76:51:e8:4c:1f:43:3e:8d:
                    32:89:fa:7d:7e:3c:e1:d2:db:e2:b2:fd:2e:37:32:
                    74:37:ca:62:7b:57:3a:ba:4e:7b:ea:4d:9d:c6:47:
                    dd:18:3b:41:dc:86:2f:85:17:d8:8d:ca:1e:ca:71:
                    2b:99:ff:bc:51:45:b6:38:6d:4c:2d:aa:cb:bc:a4:
                    5d:e0:71:09:f5:f6:c0:f8:d9:35:9d:27:e3:d5:59:
                    12:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:10:30:DF:5C:F9:78:8E:C8:08:65:CC:B8:98:C3:DA:A4:54:B1:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/631790eb-3525-4cbd-86c9-1bba3dff91aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/631790eb-3525-4cbd-86c9-1bba3dff91aa/e5e2911f03162aae90e336251f8333552d29b992.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271937

    Signature Algorithm: sha256WithRSAEncryption
         85:cf:72:57:03:c8:3f:4b:62:98:79:ab:b6:cb:a8:66:3b:94:
         b1:2f:1f:89:77:4a:93:d1:d3:b4:9e:f3:ab:76:31:f4:08:5a:
         6e:4c:49:54:0d:ba:20:c7:f5:77:0a:1e:21:96:2c:71:a9:0c:
         6d:01:a8:80:54:4b:c1:75:f7:d2:e1:22:7d:6a:d7:50:81:fb:
         ea:1c:0d:31:b5:a7:d7:23:40:1a:96:6f:01:71:a0:80:29:0f:
         28:73:7c:b4:94:66:19:81:64:2c:24:20:77:36:8b:c1:ee:f9:
         89:0f:6b:6a:a7:31:2a:12:cf:e3:0e:46:ca:3c:93:45:16:66:
         fc:c8:bf:1b:37:08:1b:c3:a9:6f:94:c6:29:d8:fe:18:85:fc:
         5b:c2:77:a2:5f:40:25:22:95:47:18:56:53:0d:06:70:56:0d:
         95:7d:5d:33:61:ee:a8:a2:d8:1a:f0:8a:42:6c:d5:b1:88:fd:
         bf:a7:6f:d4:0a:09:78:53:53:3f:aa:f0:85:35:11:9a:82:ba:
         29:54:60:21:3e:eb:76:29:e6:fd:2e:fc:99:52:25:82:6b:73:
         cd:b1:93:35:15:f6:36:30:50:57:db:eb:e0:b2:dc:ba:c3:db:
         11:c8:25:59:af:53:3f:0a:52:e2:aa:80:d4:59:56:8a:46:d0:
         ef:96:bc:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----