Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f73d4be60effa74299e0c554b1c14532e561c6fb.cer
File:                     f73d4be60effa74299e0c554b1c14532e561c6fb.cer (raw, json)
Hash identifier:          a5oeg0VQzQ5LExZa2F8EBXcY+xNtPK77E8Brlc0hEPY=
Subject key identifier:   50:EE:F5:72:C4:C4:8A:56:90:99:40:05:F9:F6:57:C1:23:C5:02:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102AFB8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/f73d4be60effa74299e0c554b1c14532e561c6fb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Dec 2023 15:01:22 +0000
Certificate not after:    Sun 07 Sep 2025 06:00:00 +0000
Subordinate resources:    AS: 273140
                          IP: 2803:8c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16953272 (0x102afb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  1 15:01:22 2023 GMT
            Not After : Sep  7 06:00:00 2025 GMT
        Subject: CN=f73d4be60effa74299e0c554b1c14532e561c6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ae:68:f3:1e:64:e3:03:f0:6d:d4:d9:bd:f4:
                    8c:07:29:c8:b8:22:db:e3:4a:f7:10:a6:73:58:fb:
                    5c:d9:56:3e:df:77:5b:a3:d4:a5:a5:17:a0:bd:9f:
                    f3:2d:9a:ed:73:bf:cf:50:e9:ce:95:a6:39:23:02:
                    7f:34:b5:38:e7:b6:ed:ce:80:1c:b0:ce:37:da:7d:
                    3c:ed:21:41:40:df:ff:92:06:ae:b2:19:d0:fe:4f:
                    08:a4:a6:a2:47:1b:0d:fd:9a:75:3a:3e:1e:74:3c:
                    bf:6d:44:11:7a:08:16:60:85:68:05:43:1f:ff:92:
                    3e:f6:4b:04:b7:11:40:54:35:ee:73:c0:09:75:63:
                    a2:9b:63:54:fe:7f:2e:41:fe:07:96:fd:d5:b0:70:
                    bc:3a:25:3e:25:84:27:9d:4b:90:49:55:10:b5:11:
                    0b:a6:64:fa:c9:5a:41:76:e6:ec:c4:87:8f:98:fb:
                    83:6d:23:9f:01:82:33:bf:aa:00:b6:4a:30:64:89:
                    97:35:ac:bb:77:9b:83:66:2c:f0:ff:3c:7c:ee:5e:
                    a6:34:f0:ca:93:b8:da:25:9d:b4:66:08:4f:bb:a8:
                    6c:7c:40:b7:ec:62:03:3f:bd:f0:91:e3:15:5a:e4:
                    fa:16:51:88:94:04:19:74:c6:07:10:9c:5e:a1:21:
                    93:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:EE:F5:72:C4:C4:8A:56:90:99:40:05:F9:F6:57:C1:23:C5:02:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3fb184a3-8212-4b60-8d55-9d662be43a86/f73d4be60effa74299e0c554b1c14532e561c6fb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273140

    Signature Algorithm: sha256WithRSAEncryption
         b2:80:66:8e:f0:d9:99:f9:00:6c:00:d4:2a:02:60:73:3f:6b:
         57:19:32:06:47:ed:81:83:d9:f3:50:95:21:b9:70:4d:82:bc:
         34:14:88:28:bc:c3:09:ba:41:01:f8:97:20:0d:06:1a:9c:05:
         b1:3b:c9:f9:5f:9a:e1:69:db:c9:fa:b6:75:bf:b0:c1:82:a5:
         4f:05:e8:f9:66:fc:54:ce:40:15:67:1b:b6:a4:9d:73:48:67:
         24:2c:07:d0:03:79:97:d8:31:bc:e4:18:d1:05:9e:62:05:e7:
         fa:52:a5:cf:2a:dd:82:52:2a:a7:8c:b7:44:a7:6a:32:35:56:
         ae:f7:69:0d:6e:15:72:1d:a1:8a:f7:51:fd:f7:2e:f7:bc:49:
         48:46:16:95:3d:fd:78:74:33:d0:da:aa:62:51:10:46:e6:e8:
         61:66:6f:2b:5b:44:8c:5d:99:7e:ab:e0:b3:30:03:cb:a1:09:
         b4:21:44:4d:29:e8:bb:0c:92:f8:52:d1:e8:d2:a1:5e:27:a0:
         c8:f1:3d:37:0d:d6:12:ce:50:e9:7a:77:3d:a4:4a:c4:e9:05:
         12:f7:b0:b8:0b:4e:5a:93:ed:a3:61:68:88:81:13:4f:72:7f:
         1f:7e:81:1a:77:bc:56:6e:f9:4c:b3:d9:5b:29:f3:36:a1:11:
         14:f4:25:39
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAQKvuDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTIwMTE1MDEyMloXDTI1MDkwNzA2MDAw
MFowMzExMC8GA1UEAxMoZjczZDRiZTYwZWZmYTc0Mjk5ZTBjNTU0YjFjMTQ1MzJl
NTYxYzZmYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIGuaPMeZOMD
8G3U2b30jAcpyLgi2+NK9xCmc1j7XNlWPt93W6PUpaUXoL2f8y2a7XO/z1DpzpWm
OSMCfzS1OOe27c6AHLDON9p9PO0hQUDf/5IGrrIZ0P5PCKSmokcbDf2adTo+HnQ8
v21EEXoIFmCFaAVDH/+SPvZLBLcRQFQ17nPACXVjoptjVP5/LkH+B5b91bBwvDol
PiWEJ51LkElVELURC6Zk+slaQXbm7MSHj5j7g20jnwGCM7+qALZKMGSJlzWsu3eb
g2Ys8P88fO5epjTwypO42iWdtGYIT7uobHxAt+xiAz+98JHjFVrk+hZRiJQEGXTG
BxCcXqEhk+0CAwEAAaOCAvswggL3MB0GA1UdDgQWBBRQ7vVyxMSKVpCZQAX59lfB
I8UCwjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zZmIxODRhMy04MjEy
LTRiNjAtOGQ1NS05ZDY2MmJlNDNhODYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM2ZiMTg0YTMtODIxMi00
YjYwLThkNTUtOWQ2NjJiZTQzYTg2L2Y3M2Q0YmU2MGVmZmE3NDI5OWUwYzU1NGIx
YzE0NTMyZTU2MWM2ZmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDjFAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCr0MA0GCSqGSIb3DQEBCwUAA4IBAQCygGaO8NmZ+QBsANQqAmBz
P2tXGTIGR+2Bg9nzUJUhuXBNgrw0FIgovMMJukEB+JcgDQYanAWxO8n5X5rhadvJ
+rZ1v7DBgqVPBej5ZvxUzkAVZxu2pJ1zSGckLAfQA3mX2DG85BjRBZ5iBef6UqXP
Kt2CUiqnjLdEp2oyNVau92kNbhVyHaGK91H99y73vElIRhaVPf14dDPQ2qpiURBG
5uhhZm8rW0SMXZl+q+CzMAPLoQm0IURNKei7DJL4UtHo0qFeJ6DI8T03DdYSzlDp
enc9pErE6QUS97C4C05ak+2jYWiIgRNPcn8ffoEad7xWbvlMs9lbKfM2oREU9CU5
-----END CERTIFICATE-----