Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e9abac2d5c33c94c57b4c85e3307f9377541a5e1.cer
File:                     e9abac2d5c33c94c57b4c85e3307f9377541a5e1.cer (raw, json)
Hash identifier:          OO16T8avwzfu2Xy8jxxO9l2QH1cQq6i48suDVO2div4=
Subject key identifier:   B0:A7:70:90:64:A0:CF:CB:CB:42:66:F1:3C:ED:3F:7A:FB:3A:0C:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CF970
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d509dda3-a166-4f76-a4bc-f9df0e96d922/e9abac2d5c33c94c57b4c85e3307f9377541a5e1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d509dda3-a166-4f76-a4bc-f9df0e96d922/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 15:27:59 +0000
Certificate not after:    Wed 19 Nov 2025 15:02:59 +0000
Subordinate resources:    AS: 272054
                          IP: 2803:dd10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17627504 (0x10cf970)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  6 15:27:59 2024 GMT
            Not After : Nov 19 15:02:59 2025 GMT
        Subject: CN=e9abac2d5c33c94c57b4c85e3307f9377541a5e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:59:8a:fc:f5:73:c0:e1:c0:98:91:1e:3c:e1:
                    f5:15:26:f0:24:a8:d5:16:6f:60:cf:b4:d3:f9:4e:
                    71:b7:64:f4:cb:f4:51:97:c4:17:b6:6e:08:a7:48:
                    e9:43:d2:25:de:3c:eb:5c:3a:51:43:ca:b1:61:d9:
                    82:de:2f:16:c8:fe:97:5e:d5:d5:17:84:d6:ac:78:
                    2d:3f:09:51:47:95:93:a4:3e:3c:50:7a:d5:e7:2a:
                    e5:cc:a4:ec:12:21:4c:13:0b:12:28:2b:80:21:e4:
                    51:c9:a9:5e:8c:23:fe:7f:0d:dc:ba:cd:76:eb:6a:
                    90:5a:79:7d:16:8f:b0:78:ad:50:49:30:4a:04:6e:
                    50:0a:f8:0a:9e:7a:29:cd:29:29:83:c2:bf:8c:bc:
                    03:08:8d:d0:30:18:dc:5c:99:66:08:5c:8c:3e:0c:
                    1c:f2:a8:34:74:bf:b6:d9:84:0c:c9:71:cd:f3:44:
                    39:7b:2b:c2:02:7b:bc:3c:3d:ee:8c:62:44:f2:75:
                    ce:1b:bb:68:2b:86:3e:1b:7f:07:20:37:89:68:5b:
                    82:fc:dd:a4:b9:f7:e7:2d:e2:37:49:e3:f0:69:e7:
                    96:f5:79:b1:5a:27:8f:43:5a:f0:c5:3e:a6:f3:4d:
                    41:70:44:2e:4a:24:f7:03:13:68:08:11:4c:35:31:
                    b3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:A7:70:90:64:A0:CF:CB:CB:42:66:F1:3C:ED:3F:7A:FB:3A:0C:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d509dda3-a166-4f76-a4bc-f9df0e96d922/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d509dda3-a166-4f76-a4bc-f9df0e96d922/e9abac2d5c33c94c57b4c85e3307f9377541a5e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:dd10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272054

    Signature Algorithm: sha256WithRSAEncryption
         8c:fa:93:5b:0a:c0:8e:65:47:95:b6:db:f4:a6:78:08:29:32:
         df:a7:e6:dc:de:26:11:a6:6f:57:6a:24:83:83:27:44:48:f3:
         5a:c5:9c:f0:3a:12:ab:a1:e9:cb:4d:89:08:2a:da:ab:fe:27:
         8b:ef:60:0c:50:c2:bb:03:61:4a:59:14:00:d1:3e:2d:24:7c:
         41:d0:33:3a:77:7e:b6:71:2a:ca:7f:76:89:6c:88:0a:c1:14:
         a9:24:a3:62:f6:b5:62:eb:8d:cb:29:51:63:b2:82:28:cf:55:
         1f:19:a1:1f:3d:35:55:68:0d:91:74:1c:0b:78:dc:c7:5f:22:
         39:77:4e:fe:d4:82:20:80:02:d6:d7:59:68:93:6c:31:b1:b3:
         b0:5a:b6:b8:f7:68:96:aa:1c:26:48:c8:20:f6:f0:61:1a:2c:
         f6:86:eb:25:44:c8:df:c5:71:c3:bb:51:27:d9:79:bc:52:0d:
         5e:cc:61:61:39:94:e7:1a:68:f2:6d:93:19:eb:eb:b8:f9:be:
         33:80:d3:00:9d:73:d4:b8:76:87:9a:b4:ea:5c:f3:f7:2a:65:
         4a:a5:c0:77:f5:f5:b8:8d:b5:2a:d3:da:ab:ea:5f:28:47:2e:
         f5:a4:de:ed:d8:4c:02:5c:72:e9:e9:9d:6e:0f:5f:27:74:49:
         77:f5:1d:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----