Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cfdebefe59c97b2cf88bdf61fd026424b714fe2.cer
File:                     0cfdebefe59c97b2cf88bdf61fd026424b714fe2.cer (raw, json)
Hash identifier:          O3eJb9/OMv6yvhpdwkDMmUxOlyfOYM8NLcvtItVvZck=
Subject key identifier:   A4:64:5A:09:79:9F:FD:74:53:7F:4D:C1:89:0B:65:E7:D8:F8:BA:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F33369
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/be5c0946-a5aa-4783-bb2d-9c8bd9de8e9c/0cfdebefe59c97b2cf88bdf61fd026424b714fe2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/be5c0946-a5aa-4783-bb2d-9c8bd9de8e9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 14:11:29 +0000
Certificate not after:    Wed 21 May 2025 18:57:48 +0000
Subordinate resources:    AS: 273043
                          IP: 2803:eb90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15938409 (0xf33369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 14:11:29 2023 GMT
            Not After : May 21 18:57:48 2025 GMT
        Subject: CN=0cfdebefe59c97b2cf88bdf61fd026424b714fe2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:56:57:d2:38:b9:28:c3:00:fe:65:7d:af:9c:
                    0b:a4:4c:fe:e6:9d:cc:5f:de:dd:ec:12:c6:45:e0:
                    b2:2f:b4:b4:67:55:3d:89:d8:2b:c0:81:d0:b2:2f:
                    51:68:ab:1b:42:5d:59:ee:32:ae:3f:df:43:48:86:
                    bd:b5:76:8b:67:af:d5:53:a2:d0:c8:88:ab:90:22:
                    c4:aa:8e:ea:eb:99:f3:d1:f7:91:39:f1:82:d4:7a:
                    92:bd:e9:ae:f8:2c:c9:46:08:a4:a1:73:35:23:88:
                    8b:3d:bd:56:f0:cf:c8:58:a2:62:fb:2f:16:30:cb:
                    bd:ed:5d:a1:39:d2:8e:84:20:0b:1d:35:66:66:4b:
                    c2:13:b8:5d:4f:02:7d:5f:8a:d6:b8:a8:c2:d7:21:
                    53:4c:a4:31:b4:b6:90:0f:33:7b:47:78:d1:13:5b:
                    64:1d:fb:70:bd:e1:96:0d:06:fc:db:e5:50:73:65:
                    04:29:52:40:1a:86:5c:ca:1f:77:2a:84:93:2f:c0:
                    d4:4c:c5:04:7c:dd:84:8b:ce:7a:0d:79:fa:1e:bc:
                    58:f5:94:28:64:70:00:87:89:97:f7:bb:02:41:d6:
                    62:57:eb:e6:3e:e2:69:72:be:e0:9f:63:64:16:98:
                    19:63:cc:59:92:ac:14:16:a2:e2:0f:1a:0e:9c:73:
                    f3:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:64:5A:09:79:9F:FD:74:53:7F:4D:C1:89:0B:65:E7:D8:F8:BA:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/be5c0946-a5aa-4783-bb2d-9c8bd9de8e9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/be5c0946-a5aa-4783-bb2d-9c8bd9de8e9c/0cfdebefe59c97b2cf88bdf61fd026424b714fe2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273043

    Signature Algorithm: sha256WithRSAEncryption
         7d:9b:0f:5b:f6:0f:67:20:dc:da:b2:b2:90:d0:af:bb:f0:cf:
         14:de:35:69:17:cf:9e:44:a0:f8:9e:b7:30:7f:65:21:aa:2c:
         90:81:65:9f:6c:54:dc:15:79:af:e8:54:44:fc:dd:da:a1:6f:
         b6:87:c0:51:29:4f:db:de:37:5e:fe:83:ee:5c:8c:46:e8:53:
         63:3c:55:78:33:c5:ce:ee:a8:68:00:5d:f5:be:62:9d:7a:3f:
         29:e3:7b:df:74:ee:b5:19:18:f9:0d:71:78:42:82:c0:07:ab:
         92:3a:2e:fb:2a:09:43:f4:a7:77:cb:81:ed:35:36:17:0f:f1:
         fc:21:47:20:be:f8:49:9d:a7:4a:de:d5:8d:ac:21:e9:f8:c3:
         5e:73:78:13:a2:73:0a:4e:29:08:bc:37:23:6c:59:e1:88:19:
         9c:85:38:b5:0c:e9:57:9d:f6:bc:fc:1d:27:10:08:2c:a0:99:
         e0:3b:ca:c1:2a:67:83:ca:06:bf:6a:19:71:1c:b8:12:ff:9c:
         79:4c:30:a2:0f:52:6b:b4:c6:37:86:f1:ab:02:a7:22:aa:69:
         fa:79:2c:37:6e:ab:a8:cd:a1:b1:1c:46:af:2f:2b:e2:66:2e:
         eb:61:bc:2f:4d:e4:7f:38:6f:14:f2:fe:fb:3e:cb:9c:74:a5:
         80:7f:cb:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----