Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f16e819fdaadf4fc306279bbb53c49446b9a455.cer
File:                     2f16e819fdaadf4fc306279bbb53c49446b9a455.cer (raw, json)
Hash identifier:          dDZay2pdeq/1Mp9TTG/Tf998y7vDyexz2IGCZ/oF87c=
Subject key identifier:   0D:00:26:76:09:7F:66:1A:84:90:B4:5E:9F:A3:2F:CD:FC:8E:7D:3B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F52B20
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/36876421-4cda-4ce5-a4af-0fe4d878eff7/2f16e819fdaadf4fc306279bbb53c49446b9a455.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/36876421-4cda-4ce5-a4af-0fe4d878eff7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 14 Aug 2023 23:18:04 +0000
Certificate not after:    Thu 10 Oct 2024 17:14:29 +0000
Subordinate resources:    AS: 262163
                          IP: 2800:5c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16067360 (0xf52b20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 14 23:18:04 2023 GMT
            Not After : Oct 10 17:14:29 2024 GMT
        Subject: CN=2f16e819fdaadf4fc306279bbb53c49446b9a455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f5:8c:e6:c9:53:ac:b0:d3:45:c6:ec:36:3d:
                    3a:2c:d1:3a:2d:40:68:1f:c4:4a:f4:64:42:eb:43:
                    c4:8a:32:2f:3c:a4:df:1b:ea:03:1a:0f:1b:5e:aa:
                    d8:2d:c9:df:57:6f:82:9c:67:6d:8b:fe:9d:a2:2c:
                    4a:8b:ba:45:80:d8:a5:e5:1a:67:8f:43:12:39:06:
                    9a:0d:97:b1:07:8c:1a:c9:35:45:ff:77:62:12:93:
                    0b:f6:1f:8d:2f:49:65:70:fe:28:0a:a7:73:02:26:
                    b8:4f:05:b1:72:3e:c7:bc:fd:e4:1c:af:8d:7d:b1:
                    30:68:d1:0a:e6:9c:d0:05:c8:35:a2:fe:04:c5:82:
                    17:d0:0b:ef:df:24:35:98:c3:f9:a2:18:9a:43:3b:
                    1a:6b:d8:ad:1b:d0:5c:c1:26:b5:4c:a6:e1:4e:ba:
                    0c:f1:c0:84:34:02:a0:49:1e:d2:c0:bf:b3:7d:0c:
                    20:7c:34:ef:10:42:61:62:2c:f7:a1:2b:b6:ef:b2:
                    40:c6:11:23:a3:3e:df:15:0c:da:60:a3:2e:15:1c:
                    5b:b0:c0:7b:48:50:37:c0:ee:3d:fc:93:ad:6b:02:
                    49:10:88:ff:77:50:1f:8e:c0:c1:dd:2d:c9:45:86:
                    6e:1b:7e:4a:a3:82:fe:c2:ae:1f:c2:4b:61:16:c0:
                    80:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:00:26:76:09:7F:66:1A:84:90:B4:5E:9F:A3:2F:CD:FC:8E:7D:3B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/36876421-4cda-4ce5-a4af-0fe4d878eff7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/36876421-4cda-4ce5-a4af-0fe4d878eff7/2f16e819fdaadf4fc306279bbb53c49446b9a455.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:5c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262163

    Signature Algorithm: sha256WithRSAEncryption
         a3:5c:c7:83:7c:56:26:c7:fc:cd:46:9b:5f:35:0b:77:60:3a:
         4e:ed:f3:64:05:3d:89:4b:ff:dd:67:4c:ba:31:98:a8:0c:12:
         7a:5f:84:7b:b0:4d:e8:1d:ba:31:84:9d:72:f3:37:f8:4d:af:
         3f:a2:f8:98:ee:c9:85:b0:7d:92:75:f6:bc:13:9c:3a:7a:2a:
         e6:ca:e6:f0:5e:92:f8:e5:75:0a:fa:02:85:de:87:c0:0b:e7:
         b2:ea:a3:5d:78:fc:eb:dc:38:03:29:d6:a5:ea:45:20:70:f4:
         12:f0:73:00:a2:d3:37:c4:4d:41:00:85:96:c4:79:ed:32:6b:
         a3:35:6c:21:fe:db:97:ff:f1:92:18:83:58:b2:19:ee:9e:f7:
         e6:78:a6:4e:74:f7:4b:19:ef:34:82:09:7c:d3:34:54:5d:61:
         e0:2c:2a:87:f5:64:fa:86:6d:b9:f8:f1:e6:79:10:a7:1e:b9:
         d0:18:2f:22:ab:f4:c8:43:8a:f7:3c:b7:c1:83:20:f1:16:94:
         63:01:02:46:9a:ee:37:a4:6a:a9:7b:a0:82:74:cf:f4:8c:c7:
         af:4e:49:47:4e:38:ec:a9:13:df:48:a2:54:69:92:b5:0a:21:
         bf:fe:5c:db:63:77:a2:68:b6:50:85:bf:c4:c0:d6:6a:88:10:
         ad:7f:52:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----