Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.cer
File:                     faa3f9ed8c16ed5c1a56631f167199f123daf7d1.cer (raw, json)
Hash identifier:          SKXPhwyDQNmwVVuqT4k/ioj6emI3CjwYke/3fNIU1w0=
Subject key identifier:   FA:4E:38:E9:7D:FD:8B:9E:E0:62:7E:99:2F:B3:EF:81:DA:88:19:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105367B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 28 Dec 2023 19:31:04 +0000
Certificate not after:    Tue 09 Sep 2025 16:49:49 +0000
Subordinate resources:    AS: 273126
                          IP: 2803:c450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17118843 (0x105367b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 28 19:31:04 2023 GMT
            Not After : Sep  9 16:49:49 2025 GMT
        Subject: CN=faa3f9ed8c16ed5c1a56631f167199f123daf7d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:dd:df:7b:ca:a9:3f:cf:30:98:e0:31:9d:4e:
                    e1:97:a3:df:9c:a6:7f:b5:cd:76:72:a2:f2:d5:df:
                    0d:09:79:d9:cf:dd:24:60:a8:54:50:f0:37:f1:53:
                    4d:7e:00:cf:9e:68:bd:92:49:f5:7b:36:5a:8f:a3:
                    7e:58:13:6a:0b:a6:e5:a5:9b:3d:76:fd:ed:9c:1e:
                    41:76:c3:fd:cb:f6:de:73:c4:cb:e7:18:40:7b:87:
                    16:e1:ca:62:71:7b:35:d3:a3:15:e9:e5:10:94:4f:
                    7d:9a:b6:3a:e4:ea:f4:3b:15:6f:86:95:63:ed:71:
                    19:d1:ac:d0:9f:4b:51:fd:a7:04:0e:64:93:9b:72:
                    82:22:95:1f:9b:b3:d5:d6:3a:91:9e:e7:39:6e:e1:
                    92:9c:80:52:f0:0a:2b:b5:89:38:44:1d:60:a1:12:
                    6f:b8:1e:49:40:0b:d1:79:c1:39:dd:a3:a9:38:36:
                    b9:3a:aa:35:0a:5c:59:99:43:cb:1d:57:4f:b2:d2:
                    1b:99:45:af:7a:af:ce:0b:87:66:c2:92:26:75:5b:
                    0b:52:d3:cb:bc:a1:1f:83:a5:fb:fc:1e:d7:0f:fb:
                    4f:a2:b0:3d:0b:97:66:55:f4:93:ae:40:32:53:4e:
                    0b:5f:f7:c7:37:35:88:d8:eb:f7:31:cf:28:46:91:
                    c3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:4E:38:E9:7D:FD:8B:9E:E0:62:7E:99:2F:B3:EF:81:DA:88:19:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fb24c18d-a334-4a73-921c-5450c45ec456/faa3f9ed8c16ed5c1a56631f167199f123daf7d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273126

    Signature Algorithm: sha256WithRSAEncryption
         26:09:b4:4e:9c:01:2a:d8:73:3f:38:a4:af:f6:46:4e:4a:42:
         e0:39:ff:70:2c:ab:70:8c:41:45:39:44:c0:bd:62:20:ab:e7:
         8a:e7:15:51:89:c4:26:cd:d1:7f:ba:cb:06:72:2f:1f:3e:3c:
         1e:fc:b6:07:af:dc:ee:4b:52:62:86:83:9a:07:21:3e:1e:ef:
         ed:f1:0b:20:e0:11:6f:f8:8a:1f:39:12:ba:46:73:05:8a:7c:
         38:77:8c:fc:43:7e:79:37:06:39:64:b1:51:e5:a6:14:07:c5:
         12:7e:51:71:e1:22:55:6b:bf:68:b5:d4:ec:92:2a:e7:8a:c7:
         c9:7e:1f:75:7c:09:67:2f:c4:4d:3c:66:78:b6:c6:9e:47:2b:
         33:66:14:e9:e7:c1:d9:d0:1a:de:dd:f2:e6:37:01:0b:de:8d:
         a8:ab:57:8b:b8:51:51:75:ee:79:c5:9c:fa:a5:a4:18:50:7f:
         80:30:54:1d:a9:af:60:fb:c1:62:77:07:ea:86:85:41:f0:68:
         89:30:77:0a:e3:ab:a1:1f:a5:3c:41:18:ea:ef:15:f9:ac:00:
         2e:cc:e2:45:9c:33:ce:99:3b:7b:ef:5f:31:a4:f0:72:5d:52:
         67:fe:43:fb:8d:62:67:ce:47:2c:da:34:52:fc:b4:95:e0:d9:
         20:50:94:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----