Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/237b14c3e0cd93edb6d382d8d841d328cb304992.cer
File:                     237b14c3e0cd93edb6d382d8d841d328cb304992.cer (raw, json)
Hash identifier:          ZKmC9aF7rSGqWJyP4nD8CZr5/9P+knd+x2c42HmIWwY=
Subject key identifier:   99:73:21:47:31:01:2C:D6:6E:9C:FE:08:FC:4D:F0:01:1C:7E:B4:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E1C1A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0ead35f2-5e51-4ed6-ba15-db3c9e87a86b/237b14c3e0cd93edb6d382d8d841d328cb304992.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0ead35f2-5e51-4ed6-ba15-db3c9e87a86b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Mar 2023 12:46:33 +0000
Certificate not after:    Thu 16 Jan 2025 14:57:07 +0000
Subordinate resources:    AS: 272962
                          IP: 2803:f990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14795173 (0xe1c1a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 17 12:46:33 2023 GMT
            Not After : Jan 16 14:57:07 2025 GMT
        Subject: CN=237b14c3e0cd93edb6d382d8d841d328cb304992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b5:39:3a:f5:ae:f8:80:14:0b:a6:df:21:31:
                    78:24:36:fc:f0:b7:d4:3e:a7:99:a7:0f:07:4b:96:
                    9e:41:6b:a9:93:c5:34:ba:f9:1f:85:da:49:bc:a3:
                    45:4b:50:d9:52:b3:1d:2a:f6:db:7f:72:b0:14:25:
                    72:29:61:af:69:07:11:38:b0:f0:bd:1d:a7:65:43:
                    fe:11:a8:4a:c0:44:98:8b:cc:46:a0:4d:5e:bb:a3:
                    f6:f8:4a:0e:c1:67:67:cc:6c:e5:ee:10:74:45:ae:
                    87:96:fd:a6:6c:96:ef:13:a7:64:f6:22:9e:f8:a6:
                    76:3e:66:10:55:9c:97:78:7f:ca:d4:36:86:3c:96:
                    70:9b:65:09:3a:d0:7e:3d:1d:fc:78:34:31:71:05:
                    ae:c1:5e:87:6b:43:ff:9c:9a:35:e5:a9:67:de:56:
                    32:f3:b9:fc:e9:12:ff:d8:37:90:a9:70:19:58:d2:
                    18:53:96:ca:e5:7f:43:cb:24:87:34:57:0a:77:73:
                    c9:38:d2:89:89:47:69:c5:5a:7b:2c:52:6d:b2:04:
                    ba:f5:98:ca:3b:5f:84:c8:ac:7c:4f:e2:10:4a:16:
                    35:c7:06:ba:26:b9:76:d8:fb:14:c5:fa:ee:c4:dd:
                    19:aa:fa:b1:20:13:0b:d2:2a:fc:33:36:2b:4c:6a:
                    65:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:73:21:47:31:01:2C:D6:6E:9C:FE:08:FC:4D:F0:01:1C:7E:B4:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0ead35f2-5e51-4ed6-ba15-db3c9e87a86b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0ead35f2-5e51-4ed6-ba15-db3c9e87a86b/237b14c3e0cd93edb6d382d8d841d328cb304992.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272962

    Signature Algorithm: sha256WithRSAEncryption
         69:8a:43:3b:94:c2:7a:99:c3:a9:ce:9d:85:7f:23:87:ab:f7:
         1a:92:be:bc:56:3d:55:1a:aa:26:af:95:0e:1f:4b:6c:7f:68:
         24:35:b6:4c:98:ee:85:37:18:b8:56:23:05:f6:b6:8e:6f:7d:
         61:c5:4e:4e:44:0d:7f:53:c9:51:6b:3c:ff:86:74:e6:81:3e:
         a9:ba:44:20:b0:e8:0b:ef:4f:e8:9a:78:76:7d:8e:a7:80:86:
         6e:ba:f6:eb:43:51:f9:b2:72:5f:ca:a2:e0:3a:42:ab:6a:d1:
         6a:41:55:de:80:85:b2:a3:08:6b:8f:33:c2:10:73:0b:4e:8e:
         52:1a:15:3f:b4:14:e1:ec:0c:cb:f1:da:c2:0c:e3:40:c9:91:
         51:9d:d9:e9:19:ab:2f:7d:db:4e:8c:08:b2:29:48:62:f0:38:
         37:04:d3:a0:56:5d:8f:46:d5:1e:ea:e7:22:64:1a:69:d4:73:
         f7:27:96:70:57:c1:79:0a:af:35:e9:e6:86:83:b9:08:db:35:
         d5:16:1f:97:05:64:6c:a6:cb:f7:64:87:53:92:f3:73:f0:1e:
         6b:e7:65:a8:d4:39:c0:ae:e2:a1:18:c4:d7:d3:a8:78:ce:8d:
         1c:bc:2b:3c:9b:c9:40:6e:05:3b:0b:15:d0:73:4b:43:93:2b:
         64:b5:12:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----