Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0951c16b2e21e742562516097161ba7ad928df5.cer
File:                     b0951c16b2e21e742562516097161ba7ad928df5.cer (raw, json)
Hash identifier:          Rbn0xE9rzq0veB6nVmWOyvWEJyZaf1FZLBrWkVSV3Tg=
Subject key identifier:   A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101E56C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16901484 (0x101e56c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=b0951c16b2e21e742562516097161ba7ad928df5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:ec:da:45:e4:bf:38:b8:db:65:62:5d:ff:bd:
                    41:53:ef:75:3f:32:91:ed:3a:52:5e:8a:d2:b3:8d:
                    9c:e8:8e:e6:97:cb:d4:6f:d0:c2:74:ba:20:22:9e:
                    d3:a9:30:b9:26:56:ac:4b:ea:1f:b2:1e:7c:c0:3e:
                    32:02:06:ab:9c:c0:ee:39:c5:12:e1:25:78:3d:d0:
                    36:c6:4c:ba:99:75:4d:67:63:cc:09:a7:82:2e:23:
                    6b:57:0d:82:4f:e5:02:4d:f9:1d:57:c9:74:2d:16:
                    e1:fa:e8:3c:09:a1:b3:bc:4e:73:ac:09:a5:1b:6b:
                    50:2d:01:e4:e6:3d:62:d7:a1:6b:0f:83:54:04:e2:
                    5e:5e:bd:f6:19:8d:17:80:97:e2:5a:00:98:f0:d1:
                    1b:bb:9d:ae:1c:6b:2e:8c:b2:67:f8:9a:ac:40:0f:
                    3d:ca:5b:43:fa:63:7f:07:76:38:87:ee:7b:cd:df:
                    2e:62:86:16:19:fd:a9:cc:94:bc:32:5e:9f:d6:41:
                    99:35:c2:5c:79:e5:5b:de:18:3f:b3:ec:60:d1:55:
                    4a:8a:d1:9e:ea:07:3f:f4:4e:64:dd:28:a1:95:8a:
                    7e:ff:10:45:dd:b9:3b:e1:6e:04:cd:7d:1d:ec:c8:
                    fe:49:71:7f:d9:72:f6:35:cb:d0:10:5d:30:96:7a:
                    98:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E8:4E:79:BB:FB:BD:10:EB:18:C8:95:E7:DD:3C:63:49:B4:59:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/b0951c16b2e21e742562516097161ba7ad928df5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         26:f8:dd:d9:c7:94:57:4c:11:04:a6:2b:0e:d5:98:6e:72:64:
         bb:31:bf:44:df:23:38:eb:fd:c1:63:1b:e4:fc:07:3c:29:09:
         dc:42:ee:51:7d:03:62:f7:51:a6:fc:6b:d8:d1:e8:56:8b:9b:
         02:86:fa:7b:03:67:bf:4b:df:86:d9:04:58:29:c0:7f:04:ae:
         eb:0f:9e:8b:02:fd:7d:44:3c:02:f0:fc:f5:37:65:37:8b:b8:
         26:6d:16:15:36:fe:ba:c6:f0:07:23:dc:3c:16:69:3a:98:e7:
         1a:78:54:a3:49:7f:1c:0d:80:25:d3:d8:47:c1:79:b1:8e:ad:
         26:81:d9:c2:e2:15:a4:87:4b:cc:81:66:cb:59:40:56:b5:4d:
         c2:30:69:70:a3:79:0b:6b:03:ad:f0:e7:a0:83:b2:cc:b5:a0:
         7a:e5:0a:23:0c:c0:a8:18:1e:d2:ce:a6:8d:5d:22:e0:ce:33:
         d1:51:22:82:42:49:12:ec:06:05:ca:c3:b0:26:66:20:d7:c5:
         b0:e9:7c:dd:4a:8a:e1:9e:05:d1:f4:e5:a9:48:81:4f:e6:4b:
         03:b2:e1:cc:b6:9a:92:46:9d:83:60:30:45:74:20:64:fb:02:
         43:53:da:ef:9b:14:1b:ee:db:b0:6e:4a:93:e7:b1:79:67:2b:
         e0:ea:fc:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----