Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f4429b556b9a0702f4de78598b853599cde1c06.cer
File:                     0f4429b556b9a0702f4de78598b853599cde1c06.cer (raw, json)
Hash identifier:          NFpDwj51gnVss0Nv7tCh+OmRAK85X7HFN56g8EwTCUg=
Subject key identifier:   3D:45:F5:17:9A:CA:E7:36:2C:EB:64:11:B1:09:1C:9C:3C:9C:9C:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D9329
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c5b1b5f8-0c74-42f8-bded-d84085184ad0/0f4429b556b9a0702f4de78598b853599cde1c06.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c5b1b5f8-0c74-42f8-bded-d84085184ad0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 18:07:45 +0000
Certificate not after:    Sat 27 Dec 2025 20:09:06 +0000
Subordinate resources:    AS: 52446
                          IP: 2801:16:7800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17666857 (0x10d9329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 18:07:45 2023 GMT
            Not After : Dec 27 20:09:06 2025 GMT
        Subject: CN=0f4429b556b9a0702f4de78598b853599cde1c06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:3f:1f:c4:6a:42:77:ed:38:2d:d0:76:f5:
                    8f:98:99:27:a8:ed:2c:b2:2a:0d:15:47:75:6f:68:
                    e5:9b:7b:f1:a3:4e:ae:e7:a9:8f:d2:4c:66:76:06:
                    e3:36:4d:55:65:17:43:5d:66:e4:cc:7a:34:bd:b5:
                    00:18:2f:56:6c:e7:0c:ae:69:0e:d2:b1:b6:5c:61:
                    1b:3c:fc:42:be:6c:e9:48:95:49:32:6d:e4:67:8b:
                    5c:36:52:97:d5:81:82:89:45:f8:88:97:4f:7b:20:
                    9a:c6:be:5e:fa:32:fe:75:4e:b5:b3:fb:77:99:fa:
                    f1:9c:4a:6b:b1:ae:ff:6c:cd:c1:35:79:2b:14:43:
                    7b:57:d5:c5:2f:50:10:b7:be:2a:3f:6c:e9:54:9d:
                    d8:1f:3e:ea:a4:70:76:1e:96:f2:35:32:04:b3:ce:
                    ab:8a:9f:0c:e7:19:4e:5a:e5:06:77:db:3c:ac:a2:
                    18:2a:b2:04:cb:2a:7a:df:b9:bc:c0:3a:21:90:0d:
                    7f:be:bc:9e:fd:a0:6d:a4:c0:fb:41:bf:8d:3d:1c:
                    26:3c:8a:7e:77:9f:4c:53:39:1f:13:4b:df:d0:e9:
                    f4:ea:17:31:c6:c2:03:1d:a7:04:67:02:33:bc:0a:
                    6d:52:84:1c:a3:fa:0b:5d:7f:ef:36:a1:e1:c2:de:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:45:F5:17:9A:CA:E7:36:2C:EB:64:11:B1:09:1C:9C:3C:9C:9C:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c5b1b5f8-0c74-42f8-bded-d84085184ad0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c5b1b5f8-0c74-42f8-bded-d84085184ad0/0f4429b556b9a0702f4de78598b853599cde1c06.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:7800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52446

    Signature Algorithm: sha256WithRSAEncryption
         3f:8d:4b:d7:6b:57:a0:59:c9:cf:10:0d:33:f8:d1:e6:fe:27:
         41:6f:f0:3f:e9:21:8c:f1:02:8b:30:5d:f1:0c:cc:ea:ed:35:
         f6:23:c6:dd:a9:83:7b:75:b7:bb:37:92:99:86:42:51:de:43:
         33:14:42:dc:3d:0f:0a:ed:f0:b1:80:52:f2:f9:78:4c:0f:06:
         c7:dc:bd:80:21:6d:91:a7:38:6c:38:fa:f8:9a:27:6d:c0:3f:
         22:94:51:97:84:7e:d8:f9:b1:9b:ca:0e:12:9c:1f:3b:07:c4:
         20:c5:51:ae:c4:2e:56:9c:45:04:2c:6a:9e:23:9b:a2:6f:f7:
         54:3f:41:9e:51:ac:00:aa:95:ac:69:d2:a1:59:0c:a1:48:33:
         16:c9:4d:b1:d4:bc:00:34:be:d6:8c:83:3d:73:bc:2c:a4:d0:
         ff:ff:80:fa:cb:f1:2b:9d:6d:42:98:22:c9:0a:2c:44:07:24:
         07:a1:86:19:18:4f:c5:7a:09:2f:84:dd:d4:ed:76:5e:c0:6c:
         b8:c7:8d:d1:7a:56:5e:a4:28:77:54:07:9c:33:2f:60:ea:72:
         a8:92:84:fa:d0:2a:dc:1a:64:7c:c9:c5:6d:3e:43:58:2c:95:
         48:b2:92:67:09:92:a5:03:20:dc:7b:84:47:c5:88:aa:b9:42:
         46:cd:4a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----