Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0bc9f54a54286442768d8f71df3e805d755697a7.cer
File:                     0bc9f54a54286442768d8f71df3e805d755697a7.cer (raw, json)
Hash identifier:          G7TSRPfseUxKc5b6DvssSoYZsR4F69QVY5E8GSK0Rqg=
Subject key identifier:   89:76:15:7E:E8:CA:1A:17:C9:5A:E1:12:C4:B1:58:6C:DE:47:A4:83
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103ECAF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5c901a2-5a80-4288-975c-32e30beaca43/0bc9f54a54286442768d8f71df3e805d755697a7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5c901a2-5a80-4288-975c-32e30beaca43/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 15:25:23 +0000
Certificate not after:    Mon 08 Sep 2025 16:47:55 +0000
Subordinate resources:    AS: 273121
                          IP: 2803:7850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17034415 (0x103ecaf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 14 15:25:23 2023 GMT
            Not After : Sep  8 16:47:55 2025 GMT
        Subject: CN=0bc9f54a54286442768d8f71df3e805d755697a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:cb:d5:5e:63:a9:67:de:5e:4f:26:ff:f0:
                    76:70:06:22:2f:0a:24:ca:f8:83:70:62:29:71:62:
                    c6:d2:42:54:01:5c:23:ef:de:fa:bf:47:4a:5d:2d:
                    32:1e:16:4b:0e:7e:c1:c9:2c:1b:87:90:c8:09:bf:
                    1b:b6:4d:00:95:8a:f9:55:ed:b7:4d:b0:aa:8e:cd:
                    db:36:81:3f:55:b9:2e:66:56:a3:a9:72:bb:4b:3e:
                    c0:ee:d9:57:1b:bb:ec:8d:76:f9:d4:41:80:71:f4:
                    8e:35:9e:b4:15:fd:08:81:97:1d:df:02:9e:7f:dd:
                    39:5f:d2:67:86:1d:63:55:2d:13:d3:d1:d3:10:71:
                    e1:a3:75:ab:05:1e:43:6b:ac:be:2b:2c:98:20:1b:
                    4d:fd:cf:62:62:2c:c6:c6:49:a4:74:3d:0e:89:c2:
                    88:0d:4c:42:4f:74:6e:f7:03:aa:6e:d7:77:11:be:
                    f2:76:36:89:b0:b2:a1:09:db:37:f9:39:97:9c:91:
                    ed:83:d7:aa:89:6c:dc:c2:ba:e7:0c:bf:b8:2b:af:
                    af:99:15:e4:06:36:ba:43:8e:3b:e7:c2:07:5c:5e:
                    8d:ea:a0:2d:3f:d1:ae:62:8c:95:5d:60:68:b9:cb:
                    a7:db:88:a1:4a:aa:72:85:5d:37:ee:74:e0:a9:54:
                    2c:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:76:15:7E:E8:CA:1A:17:C9:5A:E1:12:C4:B1:58:6C:DE:47:A4:83
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5c901a2-5a80-4288-975c-32e30beaca43/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5c901a2-5a80-4288-975c-32e30beaca43/0bc9f54a54286442768d8f71df3e805d755697a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273121

    Signature Algorithm: sha256WithRSAEncryption
         0c:eb:97:7d:44:82:7f:29:65:01:e4:bc:db:ff:51:b2:04:b4:
         69:c8:bd:ea:61:77:59:52:ba:66:8a:b2:72:a3:72:f3:78:89:
         70:85:44:14:9a:86:31:f4:f1:14:3f:62:e2:e6:f0:83:99:51:
         41:db:8e:b9:e1:db:38:e8:e2:1b:82:57:79:2d:5e:ab:83:1f:
         c5:2c:d0:34:ab:03:34:44:93:43:73:f5:3b:ea:7c:e8:02:36:
         6e:89:0d:1e:ea:12:ae:c4:07:66:d7:3d:ae:d7:e0:bc:c8:7e:
         51:0d:1e:bb:22:a4:6a:f6:cf:bb:c3:c6:e4:dc:91:78:0a:ba:
         37:e4:e1:71:24:e2:fb:78:32:13:15:f8:e9:81:12:cc:a0:0b:
         bb:e9:2d:61:cb:c6:07:ae:3b:51:d7:d0:4f:f2:29:8d:6d:ec:
         2d:5a:cc:1f:d5:ca:f3:6c:a3:f7:c4:29:8e:39:ba:cd:44:cb:
         96:e6:1a:9e:cf:93:3e:e2:3e:ef:2b:f3:3d:32:ed:19:a7:0e:
         b3:e4:91:15:26:06:0d:fd:91:e9:2c:02:f8:1c:6f:ea:54:d8:
         01:c5:2e:5d:fe:8f:b4:0a:5a:31:c0:d9:5c:45:ed:4a:80:c6:
         3b:f2:a1:6f:7a:b9:19:5b:65:4c:7e:56:94:48:41:ac:0b:6f:
         12:64:cc:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----