Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d383c4e0b4885739fed57d7745ce718ca9b968ac.cer
File:                     d383c4e0b4885739fed57d7745ce718ca9b968ac.cer (raw, json)
Hash identifier:          lMcg4FtvgxilTtWnL0i61Nne2lUIGa3GXC4AcO/t0BU=
Subject key identifier:   43:28:1C:A7:FE:89:D1:E4:8D:F8:F3:44:1F:1B:E5:63:00:BE:63:AA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9F3C0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/889c598e-3067-4e93-b8f5-01df2698586c/d383c4e0b4885739fed57d7745ce718ca9b968ac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/889c598e-3067-4e93-b8f5-01df2698586c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 03:15:54 +0000
Certificate not after:    Thu 30 Jan 2025 20:38:36 +0000
Subordinate resources:    AS: 272105
                          IP: 2803:5710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15332288 (0xe9f3c0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 16 03:15:54 2023 GMT
            Not After : Jan 30 20:38:36 2025 GMT
        Subject: CN=d383c4e0b4885739fed57d7745ce718ca9b968ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:54:62:0f:30:1f:68:bb:d9:3b:1c:94:9d:98:
                    f2:e1:c9:d8:d5:71:c7:48:68:f3:4e:33:74:6a:48:
                    dc:99:91:9d:f9:06:3a:f3:eb:7a:65:2f:19:b1:cd:
                    19:98:66:8d:be:6e:37:43:8c:38:cd:d9:87:73:09:
                    54:1e:42:67:fc:ed:80:7f:d8:fa:95:96:7b:47:1a:
                    58:2c:8f:9b:1c:4d:09:b6:d3:bf:61:36:7e:8f:3d:
                    d5:4d:78:dd:74:41:77:a8:70:05:75:f0:25:6e:eb:
                    90:6e:c5:b1:9c:c2:ee:e7:bc:4d:ef:ee:8c:f1:af:
                    ad:b3:15:93:ad:67:0d:77:f7:c7:31:af:0b:a8:aa:
                    d4:8c:c1:93:34:db:a6:f5:e2:a5:be:d7:4b:ea:0e:
                    3c:da:04:30:31:ac:3b:aa:02:b3:78:d4:9a:07:b5:
                    ac:f7:d9:27:0b:a9:4d:df:60:1d:a4:14:b0:8e:75:
                    32:6b:dd:e9:21:ce:8f:b7:af:d6:1f:08:14:df:d0:
                    ff:97:40:21:95:ff:31:98:b5:d3:8c:0e:a9:ec:3e:
                    2c:16:86:8b:f9:b7:c8:15:39:04:9e:0c:af:04:79:
                    39:43:c3:e3:8d:22:53:0d:84:51:8f:59:a0:9a:c9:
                    c2:00:f2:07:d1:f6:6b:c0:b2:36:fc:fd:a7:60:f3:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:1C:A7:FE:89:D1:E4:8D:F8:F3:44:1F:1B:E5:63:00:BE:63:AA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/889c598e-3067-4e93-b8f5-01df2698586c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/889c598e-3067-4e93-b8f5-01df2698586c/d383c4e0b4885739fed57d7745ce718ca9b968ac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272105

    Signature Algorithm: sha256WithRSAEncryption
         b3:aa:03:d2:dc:38:5d:f5:12:28:95:3b:36:53:27:56:2b:8b:
         bc:f2:c9:a1:a1:6f:5d:5c:fb:0d:ed:af:bb:51:5a:f7:92:2d:
         2f:0a:e2:45:4a:c2:42:83:57:7b:63:28:c3:29:8f:bd:b5:28:
         a1:33:9b:17:ad:81:96:f4:eb:b2:14:47:f4:80:1f:ea:a1:b5:
         7f:e8:92:0b:aa:b4:f6:0c:31:74:40:5b:47:46:65:8a:a2:d1:
         50:d7:19:fe:de:f5:ca:05:0e:c6:11:06:b4:5c:2f:9d:c3:21:
         26:54:0d:1d:a0:4d:36:57:7f:6e:11:cc:de:16:14:30:36:75:
         cd:23:30:3e:aa:fc:02:df:75:9d:1c:db:0d:fd:0b:42:ce:de:
         aa:d4:30:54:8d:27:c6:3e:26:1a:f0:cc:8e:14:9a:84:b8:49:
         26:dc:45:51:00:c2:17:41:cb:35:f0:87:46:56:0f:58:b6:16:
         78:09:50:48:59:93:a2:3f:2b:9e:8d:e5:96:f6:bf:b2:aa:ec:
         2b:40:d0:3c:72:1d:d4:14:44:2d:7a:9b:53:54:b2:81:7a:cd:
         9a:fc:7d:7c:f9:c2:f6:28:c7:f3:46:95:28:14:ac:50:3c:bd:
         84:ef:46:a9:52:0f:45:c5:92:48:fe:f3:51:b9:bd:9e:08:ee:
         9a:15:f5:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----