Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3fbf313036c5d4fb6af8fd241fb44b5803bc64b0.cer
File:                     3fbf313036c5d4fb6af8fd241fb44b5803bc64b0.cer (raw, json)
Hash identifier:          xCdvXbpU71L7zZpJ5qDMg4UPEvPsHtEY2KuXF0I5Qio=
Subject key identifier:   9B:CA:B7:DD:8E:3C:CD:88:68:2E:1F:5F:0D:59:7E:C0:A1:BC:42:40
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3884E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c5f1e0f-a526-42bb-a966-06d0bce55578/3fbf313036c5d4fb6af8fd241fb44b5803bc64b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c5f1e0f-a526-42bb-a966-06d0bce55578/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 31 Jul 2023 17:57:51 +0000
Certificate not after:    Fri 09 May 2025 06:00:00 +0000
Subordinate resources:    AS: 273048
                          IP: 2803:5b90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15960142 (0xf3884e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 31 17:57:51 2023 GMT
            Not After : May  9 06:00:00 2025 GMT
        Subject: CN=3fbf313036c5d4fb6af8fd241fb44b5803bc64b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a7:35:76:59:62:98:3c:bd:8d:4e:66:e9:46:
                    e2:15:00:05:21:88:8e:a1:30:f8:c9:5e:5f:53:70:
                    8b:fd:1d:76:64:1a:fb:29:c4:c1:c0:63:78:0a:43:
                    c3:e0:8d:3c:a2:f4:61:65:c9:d8:f6:b5:83:1d:ec:
                    bb:74:51:2b:d7:e8:12:8b:d0:2b:5e:71:5a:1b:0d:
                    b1:ab:a6:25:d0:3a:35:d7:3c:75:48:63:65:84:b9:
                    7a:9b:28:db:3e:e3:62:7b:8a:e0:63:16:15:41:f6:
                    c1:9a:a4:72:25:01:e4:2f:3a:b9:d7:d2:5b:86:6b:
                    02:e9:7d:1c:0b:e7:fe:b0:db:1f:2f:43:db:87:88:
                    df:91:65:f9:65:15:90:1a:e4:b3:2b:02:d7:25:fd:
                    0b:df:7e:fb:40:34:b4:ae:55:07:6e:e5:8b:b3:54:
                    07:cd:60:ab:73:a4:1c:7d:d4:ef:3b:d6:41:b9:10:
                    cc:27:53:dc:71:b3:f3:a9:cc:86:40:1a:29:3f:e1:
                    d7:ac:bc:86:6c:0d:3a:0e:f0:07:c3:50:6e:54:4c:
                    ea:92:10:6e:39:d6:88:de:cb:fd:fe:6a:87:e3:b4:
                    46:01:d4:b7:ef:d6:d7:c0:88:f9:a1:4f:b4:5c:35:
                    1d:bb:d5:77:6a:5a:71:f8:21:fc:c0:e5:d5:73:aa:
                    c5:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:CA:B7:DD:8E:3C:CD:88:68:2E:1F:5F:0D:59:7E:C0:A1:BC:42:40
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5f1e0f-a526-42bb-a966-06d0bce55578/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c5f1e0f-a526-42bb-a966-06d0bce55578/3fbf313036c5d4fb6af8fd241fb44b5803bc64b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5b90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273048

    Signature Algorithm: sha256WithRSAEncryption
         a5:3e:85:8b:e0:55:5b:37:7d:bd:fd:a8:3c:55:35:a6:38:ac:
         c5:6b:48:15:64:4f:08:e9:1a:77:f8:99:fb:b1:84:7d:a3:c7:
         a0:8f:7e:ac:03:71:01:cd:53:71:5d:27:cd:d1:86:db:34:68:
         66:08:0e:c3:b9:3b:e6:23:6d:aa:73:1a:f7:de:55:97:66:a4:
         5d:09:c5:0c:ca:41:f8:6c:7d:80:64:be:62:20:58:94:07:33:
         bd:3f:9a:6a:f6:88:98:a0:5b:77:1c:b2:f2:58:80:fe:cc:d7:
         02:11:55:a2:60:6d:f7:ba:0a:d8:f0:ba:fa:03:24:5b:53:33:
         df:8c:3f:1d:b3:d6:5c:a8:74:58:65:58:61:eb:97:9d:bd:ff:
         56:b8:be:46:93:92:33:88:e1:24:e3:04:f7:98:0c:1c:dc:ff:
         c4:53:be:5c:b2:a8:b2:1a:0a:5f:65:4c:48:e0:b9:07:1c:c1:
         3c:85:f3:8d:15:3a:0e:bb:99:72:22:1d:5f:ad:f9:4d:3c:f0:
         cd:c7:49:f7:3f:8e:b7:9e:79:9d:ff:26:e2:92:e5:55:df:af:
         91:8e:e9:b9:48:79:d1:02:fe:ed:4f:4e:6f:08:a1:61:52:44:
         f7:d5:d2:84:3a:b1:d9:0b:48:72:1f:a9:15:e8:0f:12:8a:11:
         a4:d2:10:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----