Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc28eac75ede928a9d2e6487c77a9fecaf4881c1.cer
File:                     fc28eac75ede928a9d2e6487c77a9fecaf4881c1.cer (raw, json)
Hash identifier:          o+EwY4C/sg/jAczUajI+kEIkqyWIe/fa0Ydpjic8xzE=
Subject key identifier:   12:BF:47:55:E1:0F:8B:AA:23:86:17:0F:0E:A6:89:4A:9A:5E:C0:CC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E9666
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ccee34ef-63e7-4bdd-bb33-a4ec1c5a42a8/fc28eac75ede928a9d2e6487c77a9fecaf4881c1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ccee34ef-63e7-4bdd-bb33-a4ec1c5a42a8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Mar 2024 21:16:18 +0000
Certificate not after:    Sun 16 Nov 2025 18:58:15 +0000
Subordinate resources:    AS: 273161
                          IP: 2803:6250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17733222 (0x10e9666)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 19 21:16:18 2024 GMT
            Not After : Nov 16 18:58:15 2025 GMT
        Subject: CN=fc28eac75ede928a9d2e6487c77a9fecaf4881c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:3a:d5:ef:d5:4e:91:69:8b:e6:af:e2:f4:63:
                    d8:0b:49:af:cb:32:0f:a2:9e:58:0c:7c:be:b5:0c:
                    b4:3c:fc:97:a6:01:5a:0b:f5:58:a3:94:f6:37:7d:
                    27:03:e5:ac:b3:0f:c5:59:42:e2:03:01:dd:be:62:
                    50:c4:a1:2e:51:41:56:58:96:e7:d8:22:bc:56:3e:
                    18:df:06:ce:61:14:cb:dc:4e:bd:d6:62:41:8b:60:
                    da:7a:d6:d5:bb:0a:17:06:fb:d2:61:5b:24:06:80:
                    99:f9:6a:18:9c:f0:e7:71:64:73:8b:6e:20:bd:71:
                    6e:6f:34:ad:8c:b2:79:99:bd:f6:34:11:a6:2f:02:
                    7d:33:75:32:c7:23:3f:88:ff:9e:b6:6d:35:1e:57:
                    c3:f0:21:04:23:5d:6f:82:3f:03:d1:37:f7:d1:33:
                    83:f3:31:f4:39:ae:83:e6:82:a4:c4:8b:9a:4b:a1:
                    d2:96:2c:99:41:6e:85:fd:2d:2e:6b:89:3d:ff:06:
                    43:4b:53:ef:a4:fe:a6:b2:8b:f0:b8:dd:07:f4:dd:
                    a0:59:d2:d9:c3:fa:33:c3:7a:bc:5c:5d:2b:8a:89:
                    ba:0f:71:71:90:c1:a9:85:a1:ae:e3:26:72:dc:ac:
                    c5:ce:78:6e:8b:80:4f:94:45:c2:5b:ca:b3:00:73:
                    31:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:BF:47:55:E1:0F:8B:AA:23:86:17:0F:0E:A6:89:4A:9A:5E:C0:CC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ccee34ef-63e7-4bdd-bb33-a4ec1c5a42a8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ccee34ef-63e7-4bdd-bb33-a4ec1c5a42a8/fc28eac75ede928a9d2e6487c77a9fecaf4881c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273161

    Signature Algorithm: sha256WithRSAEncryption
         32:29:d4:60:cf:ed:ad:43:62:74:a5:41:6a:66:4d:8d:a7:35:
         84:d9:b6:50:8c:d4:f1:86:4c:c9:f0:39:36:70:a9:f0:58:cf:
         bb:e8:5d:2c:ef:42:ff:89:7f:5f:33:f2:e2:61:63:f9:bf:8f:
         5c:09:37:73:9c:ca:a5:02:5b:a9:dd:ad:d7:67:f8:d4:e4:7c:
         0f:0f:89:57:96:19:f2:71:35:91:4e:45:46:52:64:5a:65:e8:
         a6:12:25:c1:6f:38:24:d7:6a:da:19:cc:d1:62:38:5f:de:13:
         34:e6:77:b5:d6:6a:fb:f3:63:ab:fb:0b:bc:50:5a:94:00:3a:
         51:6f:d6:15:b3:28:6a:66:c0:8f:1e:fa:46:42:61:28:90:06:
         98:29:52:24:4d:c1:d6:73:11:1c:3d:7f:88:00:75:37:fb:4c:
         32:88:93:2b:45:a9:53:81:13:84:52:eb:89:87:51:65:f8:be:
         e4:26:5e:ab:5d:3f:b5:fa:89:21:78:74:a9:40:50:12:05:e7:
         cf:3b:7e:05:6c:95:9d:cc:05:37:4d:4b:12:7e:63:2a:b7:3c:
         fb:c2:b5:84:97:6f:de:24:37:a6:d1:f1:82:c0:04:fe:a3:e2:
         37:c8:f6:e0:0d:70:30:8e:15:95:39:17:69:5a:7c:4a:db:6d:
         51:49:6b:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----