Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5687dfb427f126b2f624e8e723ded561b4faf96.cer
File:                     b5687dfb427f126b2f624e8e723ded561b4faf96.cer (raw, json)
Hash identifier:          BctXikTpK3nrfJSfJGIWwjGMKJvCcdqgIztE4XsPkJQ=
Subject key identifier:   F0:9C:17:A8:63:FF:B0:57:96:C6:78:D5:53:C8:7A:3F:0A:6F:B1:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AA35D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8df6d882-f8ce-4d50-a7b3-d8154d3e2886/b5687dfb427f126b2f624e8e723ded561b4faf96.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8df6d882-f8ce-4d50-a7b3-d8154d3e2886/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Feb 2024 20:39:48 +0000
Certificate not after:    Tue 09 Dec 2025 20:33:50 +0000
Subordinate resources:    AS: 273183
                          IP: 2803:ea50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17474397 (0x10aa35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 15 20:39:48 2024 GMT
            Not After : Dec  9 20:33:50 2025 GMT
        Subject: CN=b5687dfb427f126b2f624e8e723ded561b4faf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:f6:dd:7c:91:ad:33:83:b7:23:f0:fa:2c:f6:
                    16:18:59:d9:94:14:95:4b:76:2f:03:1d:38:c6:62:
                    c8:33:15:61:8e:88:9a:ff:ac:cd:36:4c:89:1d:62:
                    db:a5:99:00:2a:f4:d1:7b:ca:24:76:ea:ca:8a:42:
                    c5:34:4e:1b:4d:4e:57:3b:ee:d8:67:87:23:f6:81:
                    eb:35:aa:61:87:42:28:1e:ea:d2:3b:aa:96:81:e9:
                    6b:2c:bb:ae:fd:6f:d7:33:03:8e:06:77:da:a9:04:
                    7b:d7:62:d7:b9:5f:96:32:1e:66:f7:89:99:60:c5:
                    cb:56:62:3f:e1:1d:a2:50:d3:ef:97:a4:97:1c:42:
                    8d:30:f3:dc:df:29:ad:bb:37:24:73:84:56:09:30:
                    30:d4:bb:2d:8b:a3:3f:a4:fc:d1:d6:b6:29:7e:55:
                    dd:53:d3:f2:1c:19:bf:ad:0f:da:d8:a1:61:ea:ea:
                    b7:af:bf:fa:47:13:76:44:ea:24:67:7f:6d:03:d1:
                    03:f9:19:cb:01:be:e7:9e:87:9a:ec:d5:93:30:cc:
                    0c:e6:d2:f5:18:51:bd:e7:45:20:95:f9:ee:57:a4:
                    c3:b7:6d:b6:b9:04:df:fb:51:9a:9b:dd:52:46:cb:
                    5c:54:39:16:e9:0f:54:a7:98:ea:c0:e2:59:9b:74:
                    bf:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:9C:17:A8:63:FF:B0:57:96:C6:78:D5:53:C8:7A:3F:0A:6F:B1:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8df6d882-f8ce-4d50-a7b3-d8154d3e2886/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8df6d882-f8ce-4d50-a7b3-d8154d3e2886/b5687dfb427f126b2f624e8e723ded561b4faf96.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ea50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273183

    Signature Algorithm: sha256WithRSAEncryption
         c3:a8:a3:94:a5:77:ec:3e:e6:ce:3f:b2:f9:09:f7:f2:04:94:
         0f:b8:73:37:bb:53:3b:94:f2:f9:af:1b:a8:91:ab:23:5b:0e:
         3b:49:e4:0b:31:32:d4:6c:76:6c:4e:83:bf:88:a9:e1:b9:61:
         a9:24:7a:23:c4:a7:b9:3d:65:f9:22:05:24:4d:b1:67:26:c7:
         c0:72:87:2b:73:7b:6d:95:fb:0b:eb:29:ee:c2:5b:2e:87:6f:
         2e:a2:3b:00:da:55:68:f5:fa:a6:c8:a5:5c:35:b6:c1:aa:2f:
         a6:ac:76:61:85:ab:dc:ab:66:5f:3c:2c:f7:82:51:70:8e:78:
         58:02:2a:f3:ab:5e:03:84:80:cd:52:15:17:6e:68:3d:90:9d:
         37:c4:34:3c:91:28:19:74:39:9e:17:51:9b:6e:6b:a9:9e:85:
         03:fd:9b:bf:0b:68:21:fe:8a:e4:0d:7a:25:af:95:98:d9:27:
         a6:d5:a9:22:64:60:71:84:c7:7c:54:06:20:4f:df:f9:bb:aa:
         31:79:70:f1:25:66:ad:91:50:db:a0:c2:42:14:94:4a:8d:54:
         56:7c:90:0d:d9:59:c5:c6:68:9a:30:5a:bd:0c:fa:23:a8:ca:
         d2:1a:f6:7a:05:43:0f:87:7d:8b:57:36:ed:31:52:b7:d2:ab:
         cd:12:dc:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----