Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f057cf5df4ef8e909ecbf4f0c0732abf064080c4.cer
File:                     f057cf5df4ef8e909ecbf4f0c0732abf064080c4.cer (raw, json)
Hash identifier:          meOA29KH+weGlaj8z/cYA6ukCmTczRJJqRPJ1eKGEIk=
Subject key identifier:   12:FD:E2:38:6A:19:4C:FD:BF:F0:99:D5:74:35:67:43:D7:97:79:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E47B84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6de7dcc2-3cab-400c-8811-abbde45b9bb5/f057cf5df4ef8e909ecbf4f0c0732abf064080c4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6de7dcc2-3cab-400c-8811-abbde45b9bb5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 12:58:46 +0000
Certificate not after:    Thu 23 Jan 2025 16:28:18 +0000
Subordinate resources:    AS: 272098
                          IP: 2801:13:9800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14973828 (0xe47b84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 12:58:46 2023 GMT
            Not After : Jan 23 16:28:18 2025 GMT
        Subject: CN=f057cf5df4ef8e909ecbf4f0c0732abf064080c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:f0:49:38:8e:3e:9b:95:03:da:41:b4:3a:0e:
                    4f:3f:32:07:3f:06:65:2e:ef:8a:45:68:6f:be:30:
                    e5:de:e8:0a:b6:a7:94:d4:7e:ac:60:37:86:0b:d6:
                    ab:f9:b3:56:8c:0e:e8:22:67:be:5c:1e:7f:b7:7e:
                    36:fc:72:a7:32:39:df:e8:8e:5e:21:da:4f:e4:d8:
                    3d:aa:22:03:0f:66:99:75:cc:8c:a4:ee:46:5c:98:
                    02:ac:47:07:88:cf:a0:56:31:da:10:bc:6f:a9:b0:
                    43:47:6b:ee:ac:7e:ff:0f:97:71:25:30:37:04:43:
                    32:74:ca:20:ae:b6:25:ae:06:a7:5b:8b:fc:ee:96:
                    9e:4f:bb:b1:34:03:fe:01:38:8a:83:4b:58:71:30:
                    ee:16:e8:93:f2:7c:04:d5:b0:cd:e4:69:16:20:ba:
                    e9:9c:69:49:52:aa:d9:1c:c0:5e:d9:7a:41:79:de:
                    9f:82:0e:da:2e:5d:cf:b4:f3:3a:5e:ff:7c:fc:87:
                    32:e6:ca:75:bb:1e:df:08:9b:2f:38:9d:e5:b3:1f:
                    10:be:8e:65:78:79:b1:f7:bb:2a:f7:ef:3f:c4:9b:
                    bf:26:d4:4b:74:ae:15:76:c1:cb:16:94:44:20:28:
                    e4:16:25:81:47:fc:30:90:fd:43:9f:a6:7d:9b:e4:
                    28:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FD:E2:38:6A:19:4C:FD:BF:F0:99:D5:74:35:67:43:D7:97:79:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6de7dcc2-3cab-400c-8811-abbde45b9bb5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6de7dcc2-3cab-400c-8811-abbde45b9bb5/f057cf5df4ef8e909ecbf4f0c0732abf064080c4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:9800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272098

    Signature Algorithm: sha256WithRSAEncryption
         06:86:bf:69:64:4e:3f:71:1a:45:fa:27:43:a3:c8:73:e8:a2:
         29:37:7e:c8:72:91:26:da:34:6e:4f:d2:d5:74:bc:5a:eb:b0:
         6d:62:49:a1:fc:22:06:ff:4a:e0:d2:e9:49:56:cf:88:fc:aa:
         35:60:c7:a3:29:6e:10:b1:3e:0b:71:18:3a:e2:cb:1e:13:58:
         59:e5:55:8d:12:56:5f:bb:1d:51:30:ab:fe:94:8e:73:d5:bb:
         a3:da:bd:79:76:74:68:ff:1b:37:8f:28:76:25:ac:bc:88:6e:
         49:e8:d8:8f:fd:97:7b:73:9a:a1:69:f1:ff:f8:b7:e6:21:7c:
         d5:3f:5d:61:e6:8c:0d:ec:21:71:00:09:67:4a:81:f7:a8:27:
         cb:41:44:c0:64:37:10:d0:9b:d8:c5:ce:3b:b6:b9:af:5e:0f:
         df:88:f8:3c:d8:e3:b2:4d:6d:43:a9:af:c8:80:1b:45:f7:07:
         fb:f4:86:a8:74:de:7c:34:b7:56:dd:84:3b:fb:4b:44:b7:62:
         3e:75:0f:4e:9f:f2:20:e2:11:b9:e7:ba:8f:82:09:98:b1:43:
         06:3b:50:cd:44:66:c7:fc:f9:59:06:70:9f:57:57:10:96:ee:
         26:48:b8:b4:ba:c6:75:55:dd:39:bb:41:cb:87:55:4b:d2:5f:
         2b:07:b5:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----