Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/471b06a93ff238801ce6c8b4186977ced49f09f0.cer
File:                     471b06a93ff238801ce6c8b4186977ced49f09f0.cer (raw, json)
Hash identifier:          Qfi5TD9rwVrneZyFMZoLOcGtRWm+PZ95mYKg/4qb+CY=
Subject key identifier:   7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F81D23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 16:17:41 +0000
Certificate not after:    Mon 05 May 2025 06:00:00 +0000
Subordinate resources:    AS: 273072
                          IP: 2803:cf90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16260387 (0xf81d23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  4 16:17:41 2023 GMT
            Not After : May  5 06:00:00 2025 GMT
        Subject: CN=471b06a93ff238801ce6c8b4186977ced49f09f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0a:ce:83:af:d6:05:29:84:2a:87:00:9d:73:
                    13:12:35:71:5a:3c:de:5b:8a:00:54:23:93:e7:60:
                    24:3c:e2:4b:2d:d2:2d:7a:64:e7:ba:4a:e2:de:92:
                    76:cc:59:1d:2f:ba:85:ce:eb:cc:62:ed:a3:59:76:
                    62:68:a6:16:7e:1b:aa:63:08:3e:0e:ec:d8:81:d6:
                    08:eb:34:b9:e3:35:f6:c6:0d:f4:e2:c4:e9:78:fd:
                    33:fe:44:84:84:93:7f:c3:8b:ac:40:77:00:7d:4d:
                    8b:b1:45:20:07:71:8f:ed:e8:53:3a:ff:82:1b:6a:
                    99:84:f2:87:44:56:be:d5:49:55:80:3b:93:e9:db:
                    0f:7d:af:07:ef:d9:a2:a6:eb:55:52:26:03:62:06:
                    2d:aa:c3:65:61:d0:5c:ea:b7:45:90:43:fe:78:e4:
                    00:a3:ce:f4:72:f3:98:86:cb:61:2b:9f:5a:e1:c6:
                    c1:31:b3:5b:a7:ff:3a:ec:31:af:3f:81:2c:f0:fc:
                    93:b1:25:bb:4f:0c:50:47:e6:4a:f3:fa:cf:f1:08:
                    30:12:fe:55:75:fe:81:bf:fd:fa:f3:bd:6b:e0:72:
                    8f:2f:e8:5f:a3:8d:b3:cc:f5:95:0f:fb:3a:0a:4d:
                    a2:e3:3e:a5:29:0b:97:26:b7:6e:b2:2b:56:b1:a9:
                    f2:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:23:99:0B:C0:48:3A:3A:4E:8E:F1:92:04:0F:7E:08:C1:27:68:64
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0763bdfb-ac19-40ef-8fb4-0e4f4456a09e/471b06a93ff238801ce6c8b4186977ced49f09f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:cf90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273072

    Signature Algorithm: sha256WithRSAEncryption
         05:00:20:c9:eb:ea:47:a8:49:43:a1:92:57:d3:1b:7d:f0:a9:
         6c:ad:4e:8a:40:76:3a:71:f2:23:89:e3:66:d0:ed:80:5d:fc:
         44:ef:fe:bc:5c:82:43:f0:3c:12:fa:e7:e4:56:33:d0:c4:d2:
         6c:b5:f9:b8:d2:a0:8f:2c:fc:64:be:e7:18:ba:a7:4f:20:e2:
         1c:70:37:a5:8c:6a:1a:38:bb:7f:6c:53:da:46:51:95:e4:5d:
         e5:80:da:b6:fa:41:6d:9d:3c:93:fd:19:6c:d8:0f:0d:fd:ba:
         06:78:6e:67:b5:40:62:fa:0f:22:d0:55:bf:59:28:36:4b:8b:
         e8:73:90:6d:fc:cf:47:72:07:ee:c2:a6:f8:e5:77:27:36:b0:
         61:a1:0e:64:a3:9b:cc:a0:ad:8a:e6:77:45:34:6f:1e:37:48:
         8e:05:5c:fb:c5:e1:0e:89:1c:dc:96:93:3a:ea:44:76:a2:d1:
         4e:93:4f:67:a5:93:a5:41:ee:81:d7:6b:f8:c1:39:20:42:41:
         91:ed:23:b0:f3:bc:8d:b4:b3:31:51:ff:ae:07:74:90:33:60:
         89:3f:ab:a4:55:4b:49:cf:35:66:03:07:00:3d:f3:7f:89:40:
         6d:62:c3:be:38:ab:c1:80:7d:fc:0b:e9:38:51:87:81:d9:0a:
         31:e7:38:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----