Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfea08b4d623e7a8a194791e787a35583f15403b.cer
File:                     bfea08b4d623e7a8a194791e787a35583f15403b.cer (raw, json)
Hash identifier:          LHnU8hXRM2qTjssACpYtCVwfzFXh0m489tgqsPbYGAs=
Subject key identifier:   11:BA:5C:8A:F2:90:09:6D:3B:0D:F2:98:89:A7:F0:FE:FD:44:40:E6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01015A2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5c03476d-1080-4434-806c-b40f5ff57aa9/bfea08b4d623e7a8a194791e787a35583f15403b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5c03476d-1080-4434-806c-b40f5ff57aa9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 15 Nov 2023 23:12:02 +0000
Certificate not after:    Sun 13 Jul 2025 06:00:00 +0000
Subordinate resources:    AS: 273132
                          IP: 2803:1450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16865834 (0x1015a2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 15 23:12:02 2023 GMT
            Not After : Jul 13 06:00:00 2025 GMT
        Subject: CN=bfea08b4d623e7a8a194791e787a35583f15403b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:75:ab:fd:a0:9d:a6:c3:e6:17:ec:4c:8b:1b:
                    95:de:01:3b:33:3f:f5:11:05:7c:79:5c:05:30:69:
                    b0:2e:ca:43:7f:54:e8:e0:c4:79:d8:47:76:f9:64:
                    0d:1f:d2:17:9c:3e:ce:94:50:33:37:30:6a:dc:d7:
                    6f:f3:86:c4:46:a8:c3:1f:53:fc:df:a6:ce:30:f9:
                    98:12:8c:50:45:8f:31:80:3f:cf:0b:f4:9b:12:d3:
                    d9:af:5d:b2:c0:79:df:5f:9a:a7:3b:ee:a2:c2:7e:
                    24:84:a2:81:ee:3c:e5:e1:b8:66:50:fd:fb:47:51:
                    47:24:be:6d:90:fd:cf:3e:2d:c1:ad:f6:e3:cf:a4:
                    49:c6:9c:cc:52:17:8b:da:02:43:a1:99:61:fc:0d:
                    7b:f2:29:7e:f7:6b:7a:7d:fc:6c:14:61:ca:1d:8a:
                    27:a1:02:c0:2f:18:45:14:85:23:c7:e4:0a:6c:43:
                    34:f5:34:d3:d4:83:20:d6:80:f4:13:f0:24:f2:6d:
                    19:2d:0a:75:81:24:99:69:13:64:ee:9c:a9:8d:5b:
                    95:9e:2f:0e:36:8c:6a:9f:9b:c1:eb:e1:f1:fc:e5:
                    50:1f:fe:5f:ac:42:16:ce:e6:a2:50:27:6a:bd:35:
                    15:e1:fb:e9:62:61:45:0c:be:cf:f9:53:30:56:35:
                    e7:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:BA:5C:8A:F2:90:09:6D:3B:0D:F2:98:89:A7:F0:FE:FD:44:40:E6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5c03476d-1080-4434-806c-b40f5ff57aa9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5c03476d-1080-4434-806c-b40f5ff57aa9/bfea08b4d623e7a8a194791e787a35583f15403b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273132

    Signature Algorithm: sha256WithRSAEncryption
         63:7b:b3:d4:b2:96:49:d0:13:04:27:91:87:a3:bf:aa:33:bb:
         d2:87:5b:ac:1a:67:a5:58:a3:12:e8:c6:fe:93:4e:55:b1:a3:
         9b:59:42:37:39:1b:3e:fd:e1:d7:50:38:54:50:1d:49:94:52:
         bb:7e:ac:2e:18:56:e2:28:74:11:ba:71:bf:55:d6:f1:ca:d7:
         37:11:5f:3c:5e:ad:94:38:74:fc:b5:fd:71:de:d5:b6:6d:2f:
         ed:f5:a1:a3:c3:29:47:09:46:aa:a3:71:f7:94:40:01:8a:1b:
         51:2c:ac:1b:bb:0d:c2:67:38:55:0e:3b:7c:a2:9b:67:86:cf:
         88:15:d8:c4:22:dc:ac:a7:2c:8c:28:0f:8a:7a:bf:26:6c:48:
         40:41:56:c5:d1:ee:77:03:f2:32:bb:12:ce:fd:9a:f7:43:38:
         e0:bb:7c:16:2c:83:f7:f0:2e:b3:cb:57:7a:27:03:62:a0:ee:
         b3:f5:ff:73:a1:13:56:25:d5:4d:c6:80:69:ad:88:97:38:fc:
         5c:e5:70:2c:e6:18:3e:0b:1c:74:7d:f6:13:33:e2:18:fb:e4:
         a7:e5:4d:b1:6d:0c:ed:1e:4c:48:e4:1c:98:f3:03:ca:ef:03:
         be:ad:e5:a2:2e:d1:eb:60:19:24:a5:5f:70:1d:50:80:e7:68:
         c9:fa:c9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----