Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2eb521ed6dd189a115ce6ebbb480daa5dfae6e1.cer
File:                     f2eb521ed6dd189a115ce6ebbb480daa5dfae6e1.cer (raw, json)
Hash identifier:          nLc+jKmXF73PYV3JYK1SbBXtyb5cAcHNP9M6crYr4Vs=
Subject key identifier:   0C:8C:F3:99:0A:A0:8B:4E:2D:10:85:FF:BF:8B:EF:6C:66:BF:D7:55
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102720A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f89b069b-e15f-4e4a-ac4c-da5e18598744/f2eb521ed6dd189a115ce6ebbb480daa5dfae6e1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f89b069b-e15f-4e4a-ac4c-da5e18598744/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 27 Nov 2023 16:42:44 +0000
Certificate not after:    Sat 30 Aug 2025 21:45:31 +0000
Subordinate resources:    AS: 273115
                          IP: 2803:1850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16937482 (0x102720a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 27 16:42:44 2023 GMT
            Not After : Aug 30 21:45:31 2025 GMT
        Subject: CN=f2eb521ed6dd189a115ce6ebbb480daa5dfae6e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:91:9d:5e:b4:6f:3a:35:98:ef:39:15:60:
                    7e:5d:f4:8a:eb:48:9f:f7:c8:d6:62:40:d3:0d:1d:
                    62:26:cd:cd:09:19:77:5e:a8:f8:3b:38:35:02:d9:
                    f2:21:97:7c:03:69:ac:f6:24:e2:37:9a:59:10:57:
                    b1:5d:db:be:7b:f6:73:d5:8f:45:13:de:db:77:eb:
                    e1:60:33:ab:6c:4f:62:10:29:12:81:19:78:3e:98:
                    9d:dc:af:0f:88:9d:a9:fa:76:e3:41:90:9a:23:13:
                    9e:6c:d7:78:f2:c8:d2:b7:d4:f5:85:b6:2f:21:e8:
                    7b:46:be:75:3d:0c:70:47:5a:53:59:6b:d8:93:d4:
                    7e:9f:34:7c:08:c2:0e:36:2d:bb:53:0f:93:98:5b:
                    2b:b0:a8:b5:93:40:7c:e9:2c:b2:ed:e6:a0:8a:9e:
                    41:fc:b3:b9:fe:83:9b:3c:8d:de:a1:f1:66:72:3a:
                    36:51:2f:8a:4a:12:d6:f4:da:ba:7d:6e:bc:41:64:
                    f9:93:5c:1a:b0:f3:89:ce:a0:3b:39:98:0e:9a:18:
                    c5:d2:0c:c2:ce:09:79:60:d0:0b:21:76:28:fa:07:
                    09:8e:1d:03:22:f8:ae:ec:d2:60:8b:c2:99:13:fc:
                    14:11:47:c3:e4:34:eb:8f:03:26:32:25:b2:ce:2b:
                    ec:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:8C:F3:99:0A:A0:8B:4E:2D:10:85:FF:BF:8B:EF:6C:66:BF:D7:55
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f89b069b-e15f-4e4a-ac4c-da5e18598744/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f89b069b-e15f-4e4a-ac4c-da5e18598744/f2eb521ed6dd189a115ce6ebbb480daa5dfae6e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273115

    Signature Algorithm: sha256WithRSAEncryption
         78:78:cc:bd:14:a6:95:39:89:c0:30:d6:bd:d3:2d:05:81:9e:
         01:88:45:3d:4b:65:11:75:a0:42:fa:36:40:4e:d4:2b:50:ca:
         17:6e:95:2f:3a:cd:27:30:54:fa:9c:05:c3:90:96:02:db:c0:
         52:9c:76:0e:b4:51:2c:5f:f3:a8:7e:dc:4c:17:9e:16:46:58:
         50:fb:25:ea:6c:8c:62:98:7a:35:27:ab:16:11:9d:58:a7:20:
         81:e8:3b:db:1b:fe:98:ce:42:dc:90:a0:45:a6:73:49:77:cb:
         2e:4d:0d:d6:50:e5:47:b8:f0:03:db:aa:1b:a2:04:01:7b:91:
         f4:2e:72:32:ed:88:c1:e6:8d:5f:e7:e9:6e:15:f0:c1:7e:49:
         bf:84:a1:02:bc:54:c8:d0:d6:a5:a4:fa:79:e4:77:0a:87:96:
         e0:cc:63:e7:f9:37:88:dd:96:13:13:10:d3:05:64:1c:34:35:
         fb:65:61:11:09:35:2e:16:37:c2:42:49:a2:1c:15:0e:d0:f0:
         72:33:38:79:42:fd:99:a1:f3:1b:c1:dc:92:e2:67:f8:44:07:
         6a:4a:74:d9:f2:03:b0:b7:d5:cc:80:51:12:3b:6c:fd:95:d7:
         ed:52:bb:4c:60:35:a0:e3:e4:cb:ad:e5:5d:89:d3:e0:ca:1b:
         b2:5c:a7:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----