Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ef016df5620fa74d12a4af38050da311ea4b4ab.cer
File:                     5ef016df5620fa74d12a4af38050da311ea4b4ab.cer (raw, json)
Hash identifier:          4shVPiaXec6xhq8WVLUlB4u9NJNvGBq88hexTHY2b3E=
Subject key identifier:   71:1C:D1:B6:BC:D3:BA:58:AE:B5:4D:B3:AD:14:9C:86:BD:1F:19:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F924D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4ed70d10-b43b-4304-833e-6fa4f6e6de5a/5ef016df5620fa74d12a4af38050da311ea4b4ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4ed70d10-b43b-4304-833e-6fa4f6e6de5a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Sep 2023 17:14:56 +0000
Certificate not after:    Tue 08 Jul 2025 19:35:25 +0000
Subordinate resources:    AS: 273076
                          IP: 168.196.96.0/22
                          IP: 2803:6f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16327895 (0xf924d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 11 17:14:56 2023 GMT
            Not After : Jul  8 19:35:25 2025 GMT
        Subject: CN=5ef016df5620fa74d12a4af38050da311ea4b4ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:45:9a:d3:e8:fa:f7:b3:aa:f9:4a:14:68:1e:
                    94:ab:27:21:1e:28:ba:5d:af:bc:0e:ae:31:7d:cb:
                    26:57:b4:f8:61:66:7d:dc:72:ff:96:af:55:b8:31:
                    90:c3:50:d6:b1:90:ac:88:ba:36:36:d7:9d:1d:ad:
                    cd:4b:c5:1e:41:d4:6e:92:35:73:ac:71:70:c8:de:
                    8e:49:fb:d8:c4:3e:dc:62:93:d4:cf:75:58:4f:5a:
                    34:93:4e:8e:1c:ba:68:87:5d:fa:0f:bb:49:4b:2b:
                    86:60:2f:01:82:1f:2f:6d:ae:25:0e:59:5c:49:13:
                    2c:29:bc:a4:0e:f7:eb:76:ac:23:44:f6:b3:de:ff:
                    10:49:d2:68:55:91:27:90:11:80:de:fa:90:5c:89:
                    ae:b7:28:e7:cc:58:dc:9a:74:49:a1:4b:7f:94:af:
                    c5:e0:53:55:cb:b1:7d:14:36:54:ee:bc:80:dd:39:
                    20:c4:02:48:44:2b:e2:59:1d:3a:6a:cf:41:db:f7:
                    b5:85:18:cc:5b:6b:ca:64:db:8f:39:26:de:39:90:
                    31:4c:27:c9:c4:9b:4a:60:2a:34:19:41:35:8b:ee:
                    d3:72:34:a1:96:fb:db:1d:61:24:0d:a9:7f:1a:f6:
                    44:2b:ed:db:23:56:7c:5c:63:db:6e:1c:87:4f:22:
                    b0:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:1C:D1:B6:BC:D3:BA:58:AE:B5:4D:B3:AD:14:9C:86:BD:1F:19:8C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4ed70d10-b43b-4304-833e-6fa4f6e6de5a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4ed70d10-b43b-4304-833e-6fa4f6e6de5a/5ef016df5620fa74d12a4af38050da311ea4b4ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.96.0/22
                IPv6:
                  2803:6f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273076

    Signature Algorithm: sha256WithRSAEncryption
         04:23:d3:37:93:fa:55:32:7a:c3:41:e5:e8:af:cb:5a:c4:6c:
         94:0b:6b:0e:c0:be:58:ff:e8:3b:27:28:f4:39:44:e0:09:ed:
         7c:1b:bc:87:a2:e5:88:46:b0:d4:45:06:d2:31:da:cb:76:1b:
         1b:21:20:7d:89:4e:59:4e:fa:ab:04:94:f2:de:14:07:3b:d0:
         ef:76:4b:dc:58:eb:8e:83:24:e5:88:02:07:f2:1c:c6:da:60:
         27:3e:06:26:9c:44:cc:09:f5:98:26:01:03:a9:3a:c1:34:41:
         3b:f8:f6:ec:54:5e:3f:a2:89:2a:1e:9b:5e:d9:3c:3a:86:5c:
         ea:7e:d5:62:59:f3:9b:88:92:fc:4e:ce:7e:e7:10:15:6f:92:
         10:8e:97:8e:05:e8:60:ce:a1:a1:d2:4d:52:d5:32:4e:56:24:
         e5:d7:db:ed:0b:d4:61:2c:dc:09:77:55:e6:2c:c2:f1:13:b1:
         06:fb:a0:97:30:a0:2d:cc:93:c4:3d:b4:53:26:02:00:38:c5:
         40:5c:b7:ec:b4:68:88:05:44:11:4c:ed:44:06:da:7d:93:87:
         fd:65:4b:93:48:dc:48:48:15:10:d7:fa:ea:1d:33:ea:2d:65:
         34:49:58:79:ae:ed:f0:fc:f2:2e:ac:29:b4:9d:ac:62:5d:16:
         7c:e9:91:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----