Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f17650a807d8733d69a847baa5df03d2d89197f8.cer
File:                     f17650a807d8733d69a847baa5df03d2d89197f8.cer (raw, json)
Hash identifier:          gn2NcO7sqKTxEUtTm9DwCtEH89WiVU2eLjm26KKcK1k=
Subject key identifier:   83:65:08:E4:32:7E:F9:52:BC:B8:0D:AA:FD:C8:68:17:F2:B6:DC:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4AEFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/f17650a807d8733d69a847baa5df03d2d89197f8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 18:59:14 +0000
Certificate not after:    Thu 30 Jan 2025 17:34:46 +0000
Subordinate resources:    AS: 272974
                          IP: 2803:9590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14987006 (0xe4aefe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 18:59:14 2023 GMT
            Not After : Jan 30 17:34:46 2025 GMT
        Subject: CN=f17650a807d8733d69a847baa5df03d2d89197f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:3e:10:68:49:7a:3d:b3:38:83:61:9e:cd:f8:
                    d5:02:62:ad:4b:66:ab:a0:03:05:dc:ee:24:3e:b3:
                    cf:64:86:39:b7:7f:57:c2:ac:c4:ff:f5:00:b2:f0:
                    4c:53:a7:fe:5b:4a:d6:48:ea:3c:d2:c3:23:95:05:
                    aa:88:43:97:98:07:c5:2f:6f:61:78:65:d4:e4:92:
                    60:b7:a7:43:e0:86:19:2f:10:a8:2b:ff:85:14:21:
                    e4:04:f4:d6:a0:5f:0e:4d:02:bf:10:6c:8b:04:3f:
                    0b:89:30:12:08:44:8f:32:61:6b:98:2f:cf:4c:df:
                    83:00:75:4f:a4:b9:62:ae:74:df:63:9d:8d:ca:07:
                    60:8d:f1:de:f4:01:bb:25:fd:2e:27:12:e7:e8:9a:
                    96:d8:0c:d6:b3:85:1f:f8:80:36:87:09:56:7d:66:
                    98:0c:11:29:a6:17:50:53:4b:b0:2c:62:73:18:d7:
                    8b:3c:d9:a5:63:79:98:26:4f:cf:32:03:d9:91:4e:
                    a0:bd:e7:ce:79:00:2c:a6:7b:2a:b1:5b:a8:96:55:
                    ea:fa:54:53:ef:dd:32:a9:56:d4:bf:df:f2:f9:94:
                    07:b5:23:f2:e4:69:a0:e5:76:f3:0b:5e:21:a9:fa:
                    d0:c0:ef:93:4f:c5:b9:53:40:6a:03:3a:bc:2d:55:
                    a0:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:65:08:E4:32:7E:F9:52:BC:B8:0D:AA:FD:C8:68:17:F2:B6:DC:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/599dbf96-86a8-4263-9244-19dd3c8e4a40/f17650a807d8733d69a847baa5df03d2d89197f8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272974

    Signature Algorithm: sha256WithRSAEncryption
         a9:6e:01:03:63:c9:70:1b:66:5d:cc:71:91:bd:ec:0b:b5:2d:
         b4:34:4e:24:27:63:d8:fc:1c:0e:43:15:ce:68:7d:05:95:84:
         54:70:95:61:81:c3:c4:10:c9:38:48:23:99:41:87:38:df:06:
         3a:3f:4f:23:36:d7:7f:e5:e4:c1:87:b9:e4:92:d0:e2:e1:da:
         72:84:a2:87:8e:f8:59:e3:4c:8d:bb:96:a8:63:61:63:1f:c7:
         9b:2a:48:dc:30:d5:c2:a8:2b:84:6f:cd:a4:a9:f2:f0:5b:00:
         38:7e:c1:62:92:b3:06:68:fe:18:1f:04:7a:69:38:d8:09:48:
         c4:09:1d:42:b2:02:f2:ad:45:29:c0:92:82:0a:20:5f:b1:35:
         d6:e8:5f:f8:ee:ef:d1:ff:e5:f3:6b:e7:d3:11:1b:56:d6:7a:
         46:45:be:30:bd:6d:42:4d:9b:0d:1c:4a:84:31:8d:07:66:1b:
         a6:39:0d:25:40:2c:c8:f1:16:7f:8b:89:71:45:59:0b:ef:fa:
         ac:9f:8f:4f:4a:32:44:2f:be:92:78:44:d6:fc:6c:aa:dc:c8:
         8e:94:29:c5:1b:b9:71:aa:97:1b:0a:a0:65:c0:90:86:47:a9:
         ee:7d:e6:4b:ba:ca:e3:b1:68:a9:3c:90:e5:2d:99:92:4e:72:
         34:d5:1c:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----