Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cf9f5a76cad2421bfb2cf02431803c0c33adbc1b.cer
File:                     cf9f5a76cad2421bfb2cf02431803c0c33adbc1b.cer (raw, json)
Hash identifier:          z8W3l5exdIWr/YCFDUX6aNqROnxyITFohocTfTou3uE=
Subject key identifier:   6D:0F:58:4A:AB:F2:6D:F6:F3:C6:BC:1C:12:62:BA:9A:1F:B4:22:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5058E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c7ab5cf-6375-4a45-9163-b64bee068b08/cf9f5a76cad2421bfb2cf02431803c0c33adbc1b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c7ab5cf-6375-4a45-9163-b64bee068b08/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 23:35:40 +0000
Certificate not after:    Sat 11 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 23383

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15009166 (0xe5058e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 23:35:40 2023 GMT
            Not After : Jan 11 14:00:00 2025 GMT
        Subject: CN=cf9f5a76cad2421bfb2cf02431803c0c33adbc1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:22:06:9c:1a:7d:1b:58:03:7d:f3:a6:bc:66:
                    22:00:c2:34:25:bf:eb:ae:a9:a1:cb:92:92:ff:be:
                    c7:70:99:f9:f1:5f:e6:95:f2:9a:21:08:e5:73:3d:
                    cb:b9:6b:06:bd:ff:e6:72:95:d5:09:22:8c:a6:c4:
                    8b:af:e2:89:2f:46:19:52:d4:8f:86:c0:7b:b7:16:
                    03:15:55:1a:de:38:fe:c9:df:a4:76:17:a6:3f:78:
                    5f:21:d6:2e:40:1f:b9:95:b5:31:a1:5e:f2:b0:cc:
                    15:2b:14:14:48:74:7a:17:f8:9e:f8:4b:cb:85:1a:
                    08:a4:6f:b3:d8:b4:f0:09:4e:22:cb:a5:c1:7b:22:
                    ac:10:87:3e:a2:c1:6e:e0:b5:02:35:a5:42:9f:de:
                    8c:20:ec:db:4c:1b:bb:6f:a9:3f:fd:6c:94:6a:c4:
                    65:4a:75:52:e0:c7:77:8c:d3:60:ae:fd:35:e9:ce:
                    fa:63:0c:59:af:35:e2:63:b1:c2:12:f2:58:4b:dd:
                    ac:17:c8:e9:76:75:15:77:d4:81:45:0a:19:03:c9:
                    a1:f8:f2:ea:c1:5a:c7:95:d0:28:2a:24:02:df:78:
                    47:de:2d:73:60:4d:3d:6e:7b:a4:38:4c:4c:cd:ca:
                    c0:10:8b:c7:8b:7d:35:16:f8:f8:9a:36:d6:5b:3e:
                    5c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:0F:58:4A:AB:F2:6D:F6:F3:C6:BC:1C:12:62:BA:9A:1F:B4:22:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c7ab5cf-6375-4a45-9163-b64bee068b08/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c7ab5cf-6375-4a45-9163-b64bee068b08/cf9f5a76cad2421bfb2cf02431803c0c33adbc1b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23383

    Signature Algorithm: sha256WithRSAEncryption
         35:fc:08:3a:4b:ca:46:f4:d7:fd:95:c2:d8:2d:22:f4:06:e3:
         90:83:81:71:4f:bc:e2:ee:4c:67:8d:cf:9d:68:9f:ba:98:eb:
         a5:de:47:a1:35:7b:b6:b4:b8:cc:bf:05:9b:b6:e1:31:7e:59:
         76:95:f5:af:12:db:9d:80:1f:52:b4:31:1b:8d:91:53:76:33:
         f3:49:bd:91:9d:d2:e6:bf:94:24:69:a8:ce:21:9b:96:f7:77:
         c4:dd:62:4f:39:4e:73:05:01:df:c8:44:3c:7d:e1:78:5d:58:
         63:f5:d8:bd:ea:3b:d7:75:91:b8:4f:ce:31:23:52:d6:7c:c6:
         11:28:d3:a9:22:d4:e8:33:df:f3:b6:3d:ec:99:b5:44:3e:d5:
         c9:57:d6:6c:92:08:75:df:48:28:0b:b9:36:e5:49:cf:6f:db:
         d7:b7:e0:f7:43:8e:8b:92:11:bd:14:46:2c:0b:1a:85:0c:a6:
         50:b1:41:fb:19:53:f7:bd:14:76:b3:42:8f:67:87:0d:48:12:
         9e:9b:bb:19:34:80:49:ad:0e:42:ab:3a:37:be:e2:34:c2:ca:
         a1:c7:a9:c9:59:17:21:91:4f:b0:41:c1:72:64:f0:02:dc:ed:
         21:42:5b:f8:46:aa:b3:6e:fb:04:f7:21:29:95:e9:8a:5e:06:
         ef:f1:a9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----