Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fd1cf3bb138badc0f6900a4d24aabd0623f13b7f.cer
File:                     fd1cf3bb138badc0f6900a4d24aabd0623f13b7f.cer (raw, json)
Hash identifier:          1zFw9WJ+TxbDETULfCDpQGNJLYM+68K3O8k9OGWfUZ4=
Subject key identifier:   0F:C4:48:F7:B8:40:F8:02:4F:9A:A9:C3:63:D8:71:A2:A3:A3:0E:F2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DBFAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6b2b2e5c-9539-40ae-a018-7d1be778e2ca/fd1cf3bb138badc0f6900a4d24aabd0623f13b7f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6b2b2e5c-9539-40ae-a018-7d1be778e2ca/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 16:19:36 +0000
Certificate not after:    Wed 01 Oct 2025 00:36:02 +0000
Subordinate resources:    AS: 270171
                          IP: 2801:c4:3a::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17678255 (0x10dbfaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 12 16:19:36 2024 GMT
            Not After : Oct  1 00:36:02 2025 GMT
        Subject: CN=fd1cf3bb138badc0f6900a4d24aabd0623f13b7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:26:9a:09:95:bd:e6:c7:a4:e6:ba:51:02:25:
                    bf:03:2a:c0:d6:97:6b:3a:0b:be:d5:c9:91:ec:85:
                    01:ec:d9:fa:ef:a3:af:02:29:41:84:0b:77:49:0e:
                    c0:7e:b0:17:77:39:90:af:e1:97:be:7d:05:b9:f2:
                    82:1d:c3:45:43:fe:e1:6f:00:e9:49:0e:f1:d7:a7:
                    7e:ca:5a:24:27:7a:17:4b:4d:d4:b6:8a:ef:1d:55:
                    4f:21:e7:05:bd:41:52:b6:a8:78:37:d1:bd:b4:3a:
                    4c:e8:3d:97:d1:59:7f:7b:1c:8a:71:65:d5:7e:97:
                    ff:73:b7:cc:dc:c9:9a:5b:62:a6:b9:97:4c:50:0f:
                    64:66:7e:ad:4e:6a:55:90:bb:dd:61:eb:f8:d5:28:
                    d0:98:49:40:40:79:75:18:de:9b:c8:67:33:91:75:
                    9a:26:41:fb:0b:9f:9a:c3:8c:b4:92:8a:98:7c:1c:
                    9a:2a:ab:5f:32:9f:04:92:6b:bb:d3:05:a2:5a:5a:
                    3b:1b:3a:5c:8e:7f:e7:6d:a4:e4:b4:8b:6d:fa:3d:
                    37:e0:21:88:45:6f:f5:6a:d3:d1:30:ab:82:0c:be:
                    51:fc:93:1c:e0:5b:98:4a:35:a3:b8:bc:58:0b:f1:
                    69:bd:c0:aa:c3:1e:ef:b3:26:27:15:85:c8:aa:36:
                    18:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:C4:48:F7:B8:40:F8:02:4F:9A:A9:C3:63:D8:71:A2:A3:A3:0E:F2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6b2b2e5c-9539-40ae-a018-7d1be778e2ca/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6b2b2e5c-9539-40ae-a018-7d1be778e2ca/fd1cf3bb138badc0f6900a4d24aabd0623f13b7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:3a::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270171

    Signature Algorithm: sha256WithRSAEncryption
         95:ab:61:83:76:ec:75:95:49:81:76:f1:28:33:7c:19:41:be:
         4c:a3:74:50:cd:3b:4b:dc:8d:aa:cb:a2:11:82:df:8c:c5:9d:
         91:56:06:4b:b6:f4:01:94:5b:a7:f4:c7:3f:11:42:08:d7:3a:
         d1:c8:5c:0b:f2:d4:89:9c:5f:30:33:dc:6a:03:5d:e4:29:c1:
         ac:c9:47:aa:47:09:df:69:4f:69:fa:bf:28:12:86:ec:f8:88:
         d6:cf:35:11:2b:61:98:fc:87:bd:01:89:8c:9c:84:94:1e:b5:
         dd:67:e6:0b:00:79:b1:30:50:a7:ba:79:55:0f:1f:59:68:e0:
         59:17:79:d3:09:7f:4c:79:b1:01:49:99:43:df:51:46:44:46:
         20:31:85:3f:af:0c:9d:fe:ad:29:92:e1:8c:9d:17:22:9f:96:
         a9:76:27:a3:8c:ee:2d:78:bd:ca:bf:1a:44:d1:61:47:e3:a3:
         aa:36:2c:c8:af:57:d7:08:e4:6a:2d:13:d6:b6:8d:74:cf:cb:
         85:10:04:e0:47:b9:5c:3f:05:22:e8:f3:66:4f:7b:f6:c0:60:
         b0:ce:17:5d:9f:11:66:b6:21:c8:c0:c0:e1:bb:08:64:e8:96:
         ee:2d:f1:9e:72:c8:8a:ec:20:ff:f6:0f:c6:c0:9a:cd:de:fa:
         5f:af:9f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----