Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb2a328489ce9d41f7b97d77b70ab1b89edc349f.cer
File:                     fb2a328489ce9d41f7b97d77b70ab1b89edc349f.cer (raw, json)
Hash identifier:          QC0SzD/MBwHi0/RGLPgSJJ9dUNCxL0hO8lQlufVp26U=
Subject key identifier:   C5:56:FE:0E:E0:C0:4A:B7:68:4A:1C:DE:40:8B:AC:50:48:61:60:A6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3B22A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/fb2a328489ce9d41f7b97d77b70ab1b89edc349f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 21:02:16 +0000
Certificate not after:    Tue 14 Jan 2025 15:56:44 +0000
Subordinate resources:    AS: 272961
                          IP: 2803:7990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14922282 (0xe3b22a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 21:02:16 2023 GMT
            Not After : Jan 14 15:56:44 2025 GMT
        Subject: CN=fb2a328489ce9d41f7b97d77b70ab1b89edc349f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:63:a1:bd:4a:c8:2d:a3:6f:12:15:15:ed:a1:
                    ef:e2:74:83:66:39:6c:d6:7f:3e:4e:1e:3a:6e:5c:
                    a9:8a:b0:1a:e7:de:16:b4:d8:f0:55:6e:e7:27:bb:
                    70:8f:df:94:64:60:96:55:c2:5d:36:d5:2e:b0:71:
                    d6:42:a2:a8:3f:f8:07:5a:cd:00:89:5b:90:5d:d3:
                    ee:58:e8:0d:d2:5f:d8:3f:c9:88:45:5c:6f:16:54:
                    8f:f0:9f:d4:9f:68:1e:1e:40:e7:65:c0:f2:ad:4e:
                    83:23:33:92:5f:ba:58:d9:ff:8f:d2:98:e4:d5:46:
                    70:68:cb:a1:ff:12:61:39:2f:1a:a9:66:cd:0e:5c:
                    ee:8d:48:ac:8c:3d:5d:16:ae:8c:81:65:3e:af:4f:
                    aa:d2:28:98:40:35:51:49:56:d4:60:ee:c8:47:6d:
                    b1:8b:3f:df:40:c4:92:c6:9d:ad:a5:80:55:ad:00:
                    16:70:a5:40:a3:c9:9c:3d:a0:65:47:5c:5f:90:83:
                    f7:1d:52:92:ce:6a:21:75:2d:ee:fa:af:72:ca:dc:
                    d9:bd:67:91:a4:d0:8b:f0:ff:a5:cb:91:92:df:8e:
                    67:dd:4e:b8:dc:4f:4b:35:11:f1:24:38:da:18:d5:
                    58:66:c6:6a:ff:27:22:c8:8c:58:87:08:4d:e1:39:
                    04:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:56:FE:0E:E0:C0:4A:B7:68:4A:1C:DE:40:8B:AC:50:48:61:60:A6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d049c51d-ad56-4e83-afca-e03e580f0569/fb2a328489ce9d41f7b97d77b70ab1b89edc349f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272961

    Signature Algorithm: sha256WithRSAEncryption
         92:ea:dd:6e:a1:c4:c1:f9:dc:3b:cc:35:78:e0:6b:9e:d7:57:
         67:a9:1b:a5:6c:2c:be:f1:01:f1:1c:3f:46:a9:83:0e:ff:00:
         fc:1f:30:c2:91:78:4e:b7:27:10:fd:58:c4:9c:47:97:85:5b:
         17:a5:d0:c4:17:22:7c:1a:84:22:87:6a:a7:fe:2a:93:ce:79:
         b9:e5:14:0a:78:18:b1:0e:3d:ce:03:a0:9e:0b:b0:02:ab:05:
         14:e2:a0:a3:13:6c:30:1c:62:5e:0a:07:b0:48:ac:f1:b8:6a:
         57:a7:28:d3:e8:4a:c4:fd:9c:5a:5e:5b:72:56:30:90:8b:ba:
         fd:a3:0c:5a:49:f4:84:1e:55:7c:68:70:01:f2:2f:75:85:84:
         60:b5:f5:52:05:c4:45:f2:59:d4:91:90:7b:09:82:a2:c6:e3:
         64:88:3b:30:15:c4:40:4a:50:c2:37:8d:df:73:ee:9d:47:48:
         bf:eb:fd:8e:64:0e:b0:72:83:bd:a7:58:48:de:53:fa:1c:3a:
         4d:b2:e6:96:57:fb:c9:ac:58:b4:83:05:4d:78:c3:30:81:39:
         25:c9:21:63:73:27:75:fe:95:a4:0c:8a:68:ea:8a:44:54:5f:
         d8:d7:0c:f1:7a:97:54:ba:75:e0:4d:d6:7b:f2:7a:37:3b:fe:
         32:20:8e:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----