Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer
File:                     ff21b6b8874efa4815d9d8305ad936329fe73ac8.cer (raw, json)
Hash identifier:          tDorhQHnl4Y7rydu9QenDUGXPQp0rq+LcwOWxI/kIAk=
Subject key identifier:   94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6D7D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/ff21b6b8874efa4815d9d8305ad936329fe73ac8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 16 Mar 2023 22:28:55 +0000
Certificate not after:    Tue 17 Dec 2024 14:08:40 +0000
Subordinate resources:    AS: 273064
                          IP: 2801:1f9::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16177113 (0xf6d7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 16 22:28:55 2023 GMT
            Not After : Dec 17 14:08:40 2024 GMT
        Subject: CN=ff21b6b8874efa4815d9d8305ad936329fe73ac8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:7e:cf:3b:dd:06:3d:34:dd:52:bb:48:6f:73:
                    1c:ae:f3:1e:50:5d:51:be:66:f1:4a:b6:7c:ce:53:
                    b3:6b:4d:00:50:47:c3:82:1b:30:ff:69:df:96:c3:
                    83:8b:59:f9:97:2a:5e:55:16:64:9f:6b:31:3a:19:
                    ba:8b:88:7e:2e:a1:c7:11:92:5f:56:16:e5:1f:53:
                    44:9f:d7:a8:35:c9:20:ac:3f:16:73:59:b6:2f:fd:
                    13:4f:72:0e:03:f1:b8:f9:1d:a5:83:6b:96:ca:c1:
                    05:48:c4:8d:c9:92:f7:e6:ba:ab:38:de:28:6a:ab:
                    85:38:fe:5a:91:57:7c:58:a9:54:7c:f5:e6:01:8b:
                    4c:39:17:fc:16:b8:13:b2:04:c6:4e:aa:8d:da:91:
                    61:a5:7a:f5:08:4d:0b:6c:2e:5d:09:0d:90:1b:43:
                    7d:8c:ef:c6:62:cc:2c:d9:2d:e9:df:9f:d9:c8:b2:
                    c1:11:93:69:bf:f9:84:ef:90:99:ba:10:44:a0:16:
                    f7:cc:98:d2:76:65:f0:c0:29:c3:71:e1:e6:b0:89:
                    8d:c9:85:f5:18:f7:b5:1a:23:f1:7d:f0:53:82:25:
                    1f:9b:28:22:6c:4b:59:bd:55:9a:aa:1c:8d:e8:4a:
                    c8:e6:53:39:a1:6a:a2:a4:87:03:08:5f:54:16:8a:
                    2c:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:8F:91:BF:DF:A7:DC:66:1E:61:BA:45:90:97:AB:DD:15:5C:22:73
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9a055acf-6b05-4232-8f17-a67401050355/ff21b6b8874efa4815d9d8305ad936329fe73ac8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f9::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273064

    Signature Algorithm: sha256WithRSAEncryption
         a2:ff:2b:91:73:f4:42:bd:cb:d7:25:63:b7:2c:48:f4:9e:8c:
         ce:25:87:8f:06:41:56:09:e8:5d:8b:40:e6:98:92:bc:6b:69:
         67:83:af:82:8e:fc:ae:aa:0c:a0:54:12:d4:0e:ce:7f:66:96:
         9a:08:b5:46:fd:da:8e:fe:1f:a3:c1:ee:c1:d9:db:2f:23:e7:
         e9:c0:c2:08:31:9c:04:dd:da:cb:e0:6e:b9:0a:db:ee:96:15:
         3c:3c:a2:6f:cc:d0:c4:4a:b1:70:9c:03:1f:7e:33:a5:ec:55:
         19:50:7f:2d:ef:d5:d3:20:a4:c1:6f:38:b2:d8:ca:57:5f:99:
         e6:7b:10:54:a9:2f:fa:c8:26:1b:bb:49:3c:91:9b:2f:64:89:
         0f:07:19:ea:2b:d0:59:c1:f1:0a:f7:38:2e:33:59:0e:8b:78:
         34:47:73:2a:64:9d:58:24:43:fa:1a:a9:5d:fb:20:16:d2:43:
         2e:81:2e:e0:a7:67:42:c1:61:15:79:a2:cc:e4:34:7f:b4:3f:
         ff:b2:fa:3d:01:50:11:2b:9c:35:2d:5b:ad:78:92:40:bf:7d:
         5d:12:17:2c:18:25:69:e3:a5:4f:e1:05:25:69:4d:c4:d3:2b:
         f6:35:9e:02:40:fa:20:91:3d:76:6d:f8:d7:8c:41:a6:7d:2d:
         4d:92:59:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----