Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13dfea8dc23fcb23a3ca069f439a32edafb2cc18.cer
File:                     13dfea8dc23fcb23a3ca069f439a32edafb2cc18.cer (raw, json)
Hash identifier:          5GeCyBY1T8H9wemRLOOImw+mYzPaA2wl5enkUCu5+hQ=
Subject key identifier:   A3:43:D9:52:C9:39:78:47:C5:15:5D:D1:53:16:99:61:F5:BF:11:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100D857
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7a02b000-b2a7-4de7-a7e2-9d4a422ba479/13dfea8dc23fcb23a3ca069f439a32edafb2cc18.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7a02b000-b2a7-4de7-a7e2-9d4a422ba479/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 21:12:59 +0000
Certificate not after:    Mon 14 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 273124
                          IP: 2803:8450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16832599 (0x100d857)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  9 21:12:59 2023 GMT
            Not After : Apr 14 06:00:00 2025 GMT
        Subject: CN=13dfea8dc23fcb23a3ca069f439a32edafb2cc18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:3b:46:a6:2e:3d:8d:20:5e:ab:9d:60:08:4c:
                    90:f6:2c:0c:27:07:9e:3a:40:9d:57:0d:77:9e:d4:
                    71:e4:98:34:a9:e5:4c:4f:a6:96:38:0f:ca:52:b4:
                    e0:2a:2b:b1:63:ad:13:1c:f1:5e:71:db:6e:59:35:
                    e7:9a:63:94:4d:0a:dc:ec:c7:d8:8d:c6:3d:a0:35:
                    cc:6d:19:8f:6b:7f:7f:e0:de:8c:70:98:17:1e:eb:
                    76:20:a2:ad:36:82:6d:dc:66:d2:83:e8:14:b5:e0:
                    58:98:bf:92:18:e2:81:78:54:8f:d8:59:fa:04:eb:
                    13:da:80:fd:f0:39:79:a3:d6:70:3b:95:0f:33:2f:
                    a7:13:d4:d4:46:10:57:65:fe:75:e9:37:c0:b6:92:
                    52:e5:d1:6b:65:26:27:ec:6e:35:73:c7:70:b3:8f:
                    67:3f:af:6f:e7:5d:32:28:39:b5:db:68:bf:74:68:
                    27:d9:c0:98:ca:e4:a4:89:f7:73:18:44:d1:5f:ff:
                    0c:5e:98:05:06:78:ae:7e:49:dc:98:79:de:6e:34:
                    8f:e1:6e:ca:31:a2:7c:e1:3d:b4:b7:25:d1:f9:8e:
                    22:b3:a2:1b:91:12:59:12:24:8f:1f:f1:1b:d7:71:
                    8c:30:f1:c0:d2:5c:c4:37:b0:99:fe:8a:4a:0a:8d:
                    f0:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:43:D9:52:C9:39:78:47:C5:15:5D:D1:53:16:99:61:F5:BF:11:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7a02b000-b2a7-4de7-a7e2-9d4a422ba479/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7a02b000-b2a7-4de7-a7e2-9d4a422ba479/13dfea8dc23fcb23a3ca069f439a32edafb2cc18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273124

    Signature Algorithm: sha256WithRSAEncryption
         a6:dc:9c:a3:fe:db:36:fd:7a:20:01:e4:7b:c0:ab:46:b1:f7:
         15:40:55:b7:f0:d8:4d:c1:55:55:27:1d:59:47:dd:a2:aa:83:
         cd:2b:4e:0a:ae:6a:e1:ce:4c:28:c1:ee:de:20:9f:2c:56:56:
         1d:46:99:d0:17:df:76:a8:ed:f6:e9:cb:a0:74:ed:03:5d:11:
         0a:da:50:03:4f:4f:1c:8c:0e:e0:5d:e4:8a:5d:f8:94:4a:c2:
         10:c9:a6:1e:fb:e2:82:b9:03:d4:44:f1:76:bc:a0:e4:75:60:
         13:f6:11:f7:9f:6a:56:c0:b9:2b:90:cd:5e:3f:d5:c8:f1:ab:
         d3:a5:3d:1f:29:49:e5:1e:cc:74:fd:d1:9c:9f:72:2a:17:ae:
         06:07:43:81:23:37:ff:d0:f8:ad:af:4c:ca:1a:ab:fd:97:74:
         c8:01:ce:11:22:ab:1c:39:e3:7f:50:1a:5e:8d:bf:9c:aa:83:
         0c:a5:1f:21:8e:88:56:92:2e:a1:82:9f:b8:6a:a2:37:7e:31:
         1e:35:80:bb:28:36:4f:ed:65:8c:66:08:a2:51:73:50:f7:be:
         36:c3:f3:dd:3a:7f:f2:af:1c:67:b2:85:2b:0b:13:54:6b:08:
         33:a7:c2:37:0a:5e:7b:5d:74:e7:5f:6d:8c:21:90:14:52:57:
         ca:8a:72:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----