Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e5fb2bcaa1096c9366e97abe0553561fe5fe0f90.cer
File:                     e5fb2bcaa1096c9366e97abe0553561fe5fe0f90.cer (raw, json)
Hash identifier:          2HOP67O8d4awerRTpFhRMDsm8OmbOS4WAG8gaOMNkcM=
Subject key identifier:   39:B6:19:88:18:8D:DC:41:96:B1:60:3D:7D:CD:3A:58:B0:3C:06:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DE996
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8d6304ea-3a44-4bcc-b16e-bbd6bf276d35/e5fb2bcaa1096c9366e97abe0553561fe5fe0f90.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8d6304ea-3a44-4bcc-b16e-bbd6bf276d35/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 17:57:19 +0000
Certificate not after:    Wed 18 Jun 2025 21:36:57 +0000
Subordinate resources:    AS: 272295
                          IP: 2801:c4:240::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17688982 (0x10de996)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 13 17:57:19 2024 GMT
            Not After : Jun 18 21:36:57 2025 GMT
        Subject: CN=e5fb2bcaa1096c9366e97abe0553561fe5fe0f90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d2:f1:76:9e:16:69:72:79:04:a9:14:51:c0:
                    df:92:15:b4:8b:69:c0:3a:c5:a4:50:f3:7d:f0:5a:
                    44:0c:30:54:41:7d:49:dd:ce:f8:90:f4:cf:e5:ff:
                    66:d8:ac:3d:05:09:cd:2b:a8:88:f3:8a:fa:db:c2:
                    62:5b:dd:84:a7:b1:de:e9:70:42:61:cf:67:bf:05:
                    a6:cb:d8:bd:28:c1:0f:f1:d4:8d:16:2a:70:63:2d:
                    e8:2f:96:98:93:78:a8:3e:df:56:ac:2f:97:8d:09:
                    28:c4:17:3c:95:eb:b2:7a:32:13:c1:0b:41:61:23:
                    f6:19:6c:5c:ea:32:6b:4e:44:c7:87:1d:ba:9e:b9:
                    c6:fb:95:85:86:5b:a3:e7:c0:17:da:8a:00:98:cc:
                    65:7f:87:a8:f9:d5:33:2f:46:f8:49:62:83:7a:cd:
                    cc:a2:76:95:8d:da:43:db:80:fc:35:ad:d0:0f:a9:
                    66:ea:95:63:3c:cc:43:3d:d5:71:c2:40:65:95:76:
                    83:b1:0a:b2:ec:28:5d:d8:81:a5:31:07:cc:56:2b:
                    50:07:1d:84:eb:fd:b5:64:8e:b9:55:33:b7:8d:07:
                    a8:8b:5b:d3:ef:55:5e:1f:8d:d0:c6:e8:1e:33:a4:
                    6e:59:f0:99:25:9e:02:b1:7c:73:fe:24:a7:a4:29:
                    00:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B6:19:88:18:8D:DC:41:96:B1:60:3D:7D:CD:3A:58:B0:3C:06:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8d6304ea-3a44-4bcc-b16e-bbd6bf276d35/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8d6304ea-3a44-4bcc-b16e-bbd6bf276d35/e5fb2bcaa1096c9366e97abe0553561fe5fe0f90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:240::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272295

    Signature Algorithm: sha256WithRSAEncryption
         48:e1:a5:ca:92:5e:7c:a3:be:4d:7c:38:35:03:96:d2:2b:d8:
         fa:4c:d7:57:7b:09:a2:cd:48:17:e2:24:87:97:d7:78:97:c7:
         07:8a:ce:a1:41:e7:7b:40:fe:de:d8:44:c7:d6:4c:1f:63:4a:
         87:f1:cb:db:7a:9b:37:ff:eb:6c:16:5c:f8:f0:97:60:ae:57:
         1f:e1:28:92:35:40:12:3d:9c:05:a3:3e:78:21:a4:35:cc:3d:
         7d:8f:4e:f0:15:55:84:d1:9f:f5:5f:e8:20:34:59:28:21:29:
         9c:3c:6e:a1:46:1e:82:eb:26:69:43:44:af:6a:4b:cf:77:44:
         7a:fc:8e:64:6f:a6:47:39:ea:b1:5f:24:96:07:91:39:16:d1:
         5e:c9:ea:ca:41:aa:0a:2a:f0:11:b7:b7:33:e1:f2:de:30:bd:
         66:52:75:a6:5f:03:42:cb:c8:b3:be:1e:2c:d8:21:aa:3c:06:
         11:fe:21:84:29:15:01:18:c4:19:dc:c2:7d:1d:1c:98:63:23:
         4d:c4:ac:0a:f3:8e:0a:b1:b4:09:c9:99:25:17:0b:a9:31:7d:
         fd:1c:4c:21:c9:a2:fb:9e:1d:0d:eb:35:97:95:4f:ea:fd:0f:
         9d:71:ef:e7:df:50:8d:0b:5d:97:83:c5:7c:c6:22:da:4c:4c:
         6d:b4:8f:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----