Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23c9ba402866c3b323bec002a571800027f09947.cer
File:                     23c9ba402866c3b323bec002a571800027f09947.cer (raw, json)
Hash identifier:          mlTgq6f6DSIJnYBk4nutyBGqh1X/OAyNZgR6puqoj34=
Subject key identifier:   75:93:DE:1C:30:25:13:52:AC:F8:56:FF:67:85:8A:09:55:81:A2:C5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFC34A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4cabb44-005e-462a-852f-a51364fe4c7c/23c9ba402866c3b323bec002a571800027f09947.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4cabb44-005e-462a-852f-a51364fe4c7c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Jun 2023 13:39:20 +0000
Certificate not after:    Tue 03 Sep 2024 18:53:37 +0000
Subordinate resources:    AS: 264805
                          IP: 170.78.185.0/24
                          IP: 2801:15:5000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15713098 (0xefc34a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 27 13:39:20 2023 GMT
            Not After : Sep  3 18:53:37 2024 GMT
        Subject: CN=23c9ba402866c3b323bec002a571800027f09947
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:fc:f8:d5:3c:2b:57:0e:a4:eb:00:91:cf:
                    f3:78:b2:0b:3b:67:fb:72:53:21:f6:f0:71:c0:df:
                    e7:77:38:fc:89:51:58:25:8b:fe:b7:8c:82:a9:6c:
                    e9:ea:42:85:c3:4a:e4:85:30:5f:fa:ec:b3:51:6d:
                    00:10:78:20:a5:e2:7c:70:df:25:7b:df:cd:38:c0:
                    7b:06:3b:3f:c9:13:9e:14:b9:bf:f4:c2:45:be:29:
                    9b:67:6c:54:54:79:85:dc:58:af:dc:bd:f6:d5:3a:
                    a8:91:a2:61:85:56:a5:e0:90:c1:f4:79:a8:2b:cc:
                    88:87:31:0b:d9:89:5e:5a:17:cf:b4:1a:f2:7b:13:
                    8f:3d:a9:15:4e:17:7d:a6:9f:fe:ea:dd:b8:f1:0b:
                    6b:fb:9c:03:61:8a:79:a3:7f:84:df:b2:26:4c:8a:
                    51:05:a6:f6:9e:61:54:1e:97:65:b5:69:9d:dc:c3:
                    ac:e3:ba:23:aa:e6:54:70:1d:67:90:0f:7f:15:25:
                    d5:29:70:30:c1:c5:ee:06:56:8c:29:a7:88:9f:05:
                    7e:ee:6e:78:8d:f1:44:eb:38:c3:c7:29:5a:ea:bc:
                    e3:cd:7c:b5:34:60:d1:a5:50:80:e9:39:82:d7:b6:
                    39:0d:7b:b6:9b:1a:5d:bc:15:1f:f3:ad:10:8a:b8:
                    13:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:93:DE:1C:30:25:13:52:AC:F8:56:FF:67:85:8A:09:55:81:A2:C5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4cabb44-005e-462a-852f-a51364fe4c7c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4cabb44-005e-462a-852f-a51364fe4c7c/23c9ba402866c3b323bec002a571800027f09947.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.185.0/24
                IPv6:
                  2801:15:5000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264805

    Signature Algorithm: sha256WithRSAEncryption
         2a:f4:3b:7e:30:18:25:ac:b5:7a:d5:cb:3f:e3:92:20:ea:85:
         b4:c4:b0:44:65:cf:4c:52:ba:bf:0d:6c:fe:e3:75:76:5e:fb:
         c1:b7:4f:17:c0:62:73:7d:1f:82:5d:5f:70:42:f4:db:23:de:
         7a:bb:79:45:4f:ca:ce:2e:c1:3f:57:22:d6:ba:85:d6:e6:4c:
         68:f0:c0:bd:7d:42:cc:d1:4e:72:54:b7:95:62:a7:42:3d:36:
         62:e8:1c:c5:da:b5:be:7d:30:c0:49:c1:22:4e:2f:00:b1:73:
         11:a9:c2:ef:e2:77:11:16:22:d6:2c:f9:ba:d2:0d:1c:89:60:
         0c:04:fa:0d:21:b9:4c:88:47:66:b6:ef:f0:32:af:8c:a8:52:
         79:14:cd:53:b5:00:99:77:89:47:2d:df:c5:6a:d6:05:6b:b8:
         6d:4b:e4:c3:93:a7:d1:9e:62:4a:c0:65:05:f9:8d:72:4e:97:
         56:97:93:67:99:23:2e:04:c2:a1:f2:f2:3a:a0:0a:d8:6c:ed:
         7a:84:a1:a6:57:e7:94:04:c7:82:ee:4b:0f:83:5f:b6:46:80:
         65:10:98:7e:ff:50:9c:b8:5b:49:0e:65:93:11:3f:63:2f:d3:
         9a:1c:38:ad:e8:79:54:d7:b0:95:72:39:41:ee:93:16:4c:15:
         d2:18:40:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----