Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8523d9b2990fc1bff5819a0d314e6bd3e422daaf.cer
File:                     8523d9b2990fc1bff5819a0d314e6bd3e422daaf.cer (raw, json)
Hash identifier:          t0ke0nAPC3lt0+PPK4uz3zv1Dc5Qy+nTd7/CHaZ5s/I=
Subject key identifier:   C4:1E:72:DA:DA:FE:D5:AE:A8:D5:12:D6:13:B4:88:D5:FC:EE:8A:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F85ACB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/8523d9b2990fc1bff5819a0d314e6bd3e422daaf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16276171 (0xf85acb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=8523d9b2990fc1bff5819a0d314e6bd3e422daaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8f:f0:1f:84:51:96:3c:b7:41:a5:4d:28:9c:
                    df:74:99:39:5b:23:c7:a7:67:7f:37:47:dc:cf:1f:
                    d5:bb:14:01:12:d5:81:2a:23:6b:1d:4a:57:28:b1:
                    cd:c4:d0:9f:ad:e1:3f:ef:c6:e5:df:14:3f:68:4f:
                    2f:9e:61:d7:a5:3c:37:15:01:1f:c6:53:79:94:fe:
                    4f:60:fb:70:a3:c1:b7:c8:99:c5:b6:b7:dc:fe:99:
                    57:72:c8:b4:15:63:80:5c:c0:56:fb:39:ce:58:62:
                    db:72:bd:8b:d3:c7:9d:75:d3:e7:f9:4a:d4:9e:f5:
                    45:9e:24:fb:6f:8b:40:e1:fd:39:e4:1c:3d:fc:45:
                    1d:b4:5a:5b:bb:18:77:ab:c8:55:18:f9:8c:98:b3:
                    6f:ac:7a:08:0c:a4:aa:17:c0:3e:b3:70:f2:ea:cc:
                    af:e6:2b:0a:d1:ae:17:79:89:72:06:fb:06:20:16:
                    f2:4d:a9:a5:99:3c:43:80:9d:c6:00:66:10:aa:a9:
                    11:19:ca:81:7f:aa:6d:9e:2a:8c:22:76:bb:12:6d:
                    ed:c0:20:23:e5:9d:b1:df:c6:3f:f8:b8:a6:10:1d:
                    27:fc:81:8b:84:42:68:5f:a2:b9:06:87:aa:21:b9:
                    a9:ae:bc:3f:b4:05:61:f7:18:ea:d5:7a:04:c9:76:
                    e2:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:1E:72:DA:DA:FE:D5:AE:A8:D5:12:D6:13:B4:88:D5:FC:EE:8A:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/8523d9b2990fc1bff5819a0d314e6bd3e422daaf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         b6:a9:aa:23:e6:ac:53:a4:fb:4c:cf:e3:4d:e4:5a:eb:b6:3e:
         4c:52:88:3d:68:2c:8b:55:07:54:79:c9:1f:3e:78:6f:7d:81:
         8a:b9:37:06:a7:95:3b:80:33:03:de:d6:c3:18:74:a5:22:7c:
         f4:6c:04:95:d7:e0:8d:8d:dc:ab:ed:db:48:fa:33:b9:cf:e6:
         71:44:26:57:64:0b:62:4b:9d:3a:be:47:f7:9e:77:cd:a9:b9:
         06:bd:7f:22:f4:b9:a2:72:2b:fa:3c:95:cb:a3:0f:53:3b:85:
         98:4e:18:d2:bb:63:3e:9a:5a:84:dc:d3:d2:85:fb:dd:fb:12:
         18:3a:92:1f:57:7b:d4:44:c7:23:d4:6d:36:6c:3d:a4:20:8b:
         39:d1:63:13:fb:c8:b3:65:b9:30:43:9c:85:23:77:e6:4a:96:
         67:98:71:31:98:a7:26:2a:64:28:6e:ee:eb:2c:8d:97:44:50:
         95:0c:0d:40:a2:a6:97:02:48:a0:73:8f:91:3b:4e:92:17:7c:
         a0:85:0f:64:65:9e:39:71:95:93:14:89:23:a3:64:eb:7c:ed:
         61:b4:04:f1:18:b0:d2:c7:39:56:bd:81:1d:18:9d:c0:32:ee:
         f0:46:e5:98:97:91:fe:d4:3e:78:9d:c8:b9:a7:cf:f9:22:a8:
         34:96:0d:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----