Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23f5787e79929401bde2fe34776c26caf023af9b.cer
File:                     23f5787e79929401bde2fe34776c26caf023af9b.cer (raw, json)
Hash identifier:          YPfBL8BRtqU4MrlBX/u0Mp6F/ioW34ELUhJLvEk43T8=
Subject key identifier:   E6:39:50:A5:22:0F:1F:A5:69:A0:AD:79:8F:E6:9B:9B:E3:8B:28:EB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100D32F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e96eb799-c82d-4560-b59d-8c8b44cae5d1/23f5787e79929401bde2fe34776c26caf023af9b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e96eb799-c82d-4560-b59d-8c8b44cae5d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 19:57:19 +0000
Certificate not after:    Tue 11 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 273127
                          IP: 2803:2450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16831279 (0x100d32f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  9 19:57:19 2023 GMT
            Not After : Mar 11 06:00:00 2025 GMT
        Subject: CN=23f5787e79929401bde2fe34776c26caf023af9b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:aa:bc:2d:fe:64:52:05:f5:7b:dd:a4:53:
                    f5:d1:d3:57:27:86:d9:5a:d3:a4:70:37:e9:00:6c:
                    b7:2b:54:b3:ef:9f:80:9b:85:db:b8:58:a0:93:21:
                    54:d3:e9:e2:23:d3:99:39:de:41:3f:e1:a8:d0:08:
                    55:47:a1:62:be:16:eb:2c:bc:dd:b6:9a:e0:60:17:
                    97:c7:42:7e:5b:bd:f8:7d:02:5a:87:5f:4c:34:b6:
                    85:a3:f0:7b:96:bc:3d:79:79:9c:1a:64:6c:c5:01:
                    83:98:86:c1:60:b4:ad:ba:a8:56:93:7a:01:ca:48:
                    7a:fe:11:1c:e1:41:be:07:26:e2:5d:90:fb:37:ad:
                    8f:b7:85:55:31:34:22:56:c4:23:d0:3f:2b:21:0e:
                    db:67:88:20:d8:05:56:1d:d0:61:ab:57:c5:01:d5:
                    53:fb:e4:97:36:37:b2:2d:cd:00:57:ea:11:ac:13:
                    35:87:c8:25:c3:53:ce:28:0c:6e:2f:2b:00:02:86:
                    d2:cf:e2:4c:8c:ff:5a:f6:27:b9:5c:83:81:09:1e:
                    f5:8a:30:3b:24:f2:b8:ba:9a:bd:0c:4e:92:89:a7:
                    28:9d:21:f0:7c:73:6f:41:48:c5:48:d2:59:b3:42:
                    1e:3b:7b:9c:0e:b8:5a:a3:cb:11:05:39:e8:d7:85:
                    f7:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:39:50:A5:22:0F:1F:A5:69:A0:AD:79:8F:E6:9B:9B:E3:8B:28:EB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e96eb799-c82d-4560-b59d-8c8b44cae5d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e96eb799-c82d-4560-b59d-8c8b44cae5d1/23f5787e79929401bde2fe34776c26caf023af9b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273127

    Signature Algorithm: sha256WithRSAEncryption
         70:0d:6a:f0:02:07:d4:40:6e:fe:47:23:a0:68:04:04:ef:c6:
         72:fc:2e:2b:91:e2:9b:84:f6:e2:48:df:4c:d9:b2:8a:6a:04:
         b2:5c:92:47:da:5e:00:86:5e:df:1a:5d:20:3c:a1:15:7a:67:
         ca:e0:c0:e5:e1:1e:b5:2a:b6:e5:db:fa:28:cf:d3:e8:64:99:
         88:c1:28:00:ff:cb:18:7c:1b:51:81:79:41:1c:ee:ef:a6:a1:
         43:52:30:91:77:be:37:0e:5c:a3:f8:ee:e7:69:5e:ac:a2:c1:
         44:bb:00:36:f8:4f:25:3a:39:30:9f:ec:a6:69:90:4a:a3:20:
         aa:5e:27:f3:d5:7e:3a:a8:ff:6c:02:f9:70:37:37:26:73:ad:
         fa:4f:45:7a:4a:16:be:dd:83:5e:54:77:2c:16:b0:0b:03:23:
         15:07:57:d2:16:1d:82:f5:69:ea:f2:1e:3f:79:d2:80:06:22:
         07:7d:57:86:70:b9:43:28:7c:03:bd:5a:89:d8:df:b4:7f:43:
         2e:b4:06:a6:f1:80:57:92:ab:58:3e:92:80:aa:ce:a9:55:42:
         25:c1:df:5a:51:fe:34:3a:78:48:5e:19:1e:7e:6c:ac:3d:60:
         cb:4b:23:0c:16:1b:7c:a8:f9:42:50:5e:b4:dd:89:36:11:da:
         70:d0:15:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----