Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efd7972f3ab0c12c0c4d12a6ecf3d7f1ecbf2282.cer
File:                     efd7972f3ab0c12c0c4d12a6ecf3d7f1ecbf2282.cer (raw, json)
Hash identifier:          /RlYibp77Avaz2UuQuqGHzWZSQm1Rm47FdqF6WBFcyQ=
Subject key identifier:   D8:60:89:F4:2A:6C:F2:9B:8D:4A:AE:C5:7B:04:27:04:DF:7B:16:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010812F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c79c08b-000b-4a62-b934-59b784ae7889/efd7972f3ab0c12c0c4d12a6ecf3d7f1ecbf2282.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c79c08b-000b-4a62-b934-59b784ae7889/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 24 Jan 2024 13:34:38 +0000
Certificate not after:    Mon 13 Oct 2025 06:00:00 +0000
Subordinate resources:    AS: 273173
                          IP: 2803:f250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17306360 (0x10812f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 24 13:34:38 2024 GMT
            Not After : Oct 13 06:00:00 2025 GMT
        Subject: CN=efd7972f3ab0c12c0c4d12a6ecf3d7f1ecbf2282
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:63:97:a4:99:64:27:5b:db:0c:0d:51:ef:81:
                    20:0e:b0:e8:20:19:a1:59:6b:d7:4d:9d:00:0d:ee:
                    90:65:91:cc:59:3d:7e:40:94:d0:1c:8e:b0:27:4b:
                    12:bd:3d:43:73:b5:03:d0:c0:8e:5c:3a:61:9a:67:
                    8a:81:8e:da:9c:66:99:1e:89:27:59:ae:2d:76:2f:
                    f0:ce:25:3e:9b:20:fa:5e:48:75:c4:32:08:6a:6b:
                    5e:86:0d:b1:33:4c:5d:1c:50:02:a3:fe:97:f9:22:
                    8b:92:1f:11:51:f5:a3:47:c7:40:bf:30:b4:74:69:
                    df:21:bb:a8:67:e0:77:48:17:ef:a1:c0:7c:e3:97:
                    45:84:3c:4f:0f:45:9e:8f:8a:74:4e:b1:a5:c5:96:
                    4b:dd:ad:83:65:f4:d9:d9:51:0b:fb:58:27:35:1d:
                    2c:22:be:a4:7a:7c:e8:ed:ca:52:81:33:99:09:19:
                    4f:31:f6:5b:74:36:6c:12:85:46:66:b0:20:3a:39:
                    7a:68:7e:d4:4d:ce:83:96:fc:77:e2:0a:d2:e2:f6:
                    1e:b3:0f:c3:2a:c8:72:2c:d6:21:ed:bc:e1:19:60:
                    2a:79:b0:10:06:71:d0:9c:2f:6c:84:32:d9:1c:4f:
                    a4:76:1b:b6:98:0a:dc:a2:c3:8b:66:81:a1:e4:10:
                    18:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:60:89:F4:2A:6C:F2:9B:8D:4A:AE:C5:7B:04:27:04:DF:7B:16:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c79c08b-000b-4a62-b934-59b784ae7889/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c79c08b-000b-4a62-b934-59b784ae7889/efd7972f3ab0c12c0c4d12a6ecf3d7f1ecbf2282.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273173

    Signature Algorithm: sha256WithRSAEncryption
         50:43:e2:1c:26:f7:78:37:33:64:81:e7:6c:77:17:48:72:63:
         f5:f2:8e:00:49:14:6f:ae:d9:30:6e:15:58:e0:b5:d4:c7:81:
         71:51:9d:e3:7c:a5:88:5e:e9:69:f6:80:00:fa:00:8a:73:f7:
         7a:a2:4e:87:4c:ed:c5:3a:9b:36:3c:9c:4f:e7:82:3f:9f:45:
         30:f2:56:ba:89:a1:95:0d:71:df:3a:6d:76:ce:be:15:95:21:
         2a:2a:ff:2a:c4:85:81:34:10:51:2d:a8:01:9a:83:07:3f:8d:
         70:e0:be:1d:61:6e:72:2f:76:65:a2:d7:67:27:56:32:38:85:
         35:e4:45:7d:10:29:c4:28:27:99:92:b2:55:cf:80:98:50:25:
         a0:1f:ad:f3:a0:ff:e5:95:15:7e:55:e1:ea:c6:7f:e8:ca:85:
         b0:b5:ab:c9:77:e0:f8:c1:49:bd:97:13:d2:4b:9b:af:06:3f:
         4a:d9:7e:10:a9:ad:33:5f:27:90:07:45:e8:fd:4f:39:e1:1d:
         e2:f2:15:e6:41:14:1a:0e:f7:37:cf:1d:69:56:50:69:64:ed:
         a3:83:57:5c:55:59:b8:47:b1:c7:cc:b6:93:81:0a:22:e2:f6:
         41:66:66:40:51:cb:82:03:55:c5:5e:2d:af:68:cd:ef:7f:32:
         c6:17:b1:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----