Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08d20fd42f0acf0c49c52d433151c51286d1333c.cer
File:                     08d20fd42f0acf0c49c52d433151c51286d1333c.cer (raw, json)
Hash identifier:          P2lmHfXe/QZ8x3LPXKQBpBDDNJxPuqzvzNWLMhu3YKk=
Subject key identifier:   10:5B:13:79:A0:A8:28:04:0D:EB:CD:BA:F5:87:95:E9:D6:25:7E:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E92BF8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7152eba0-f1dc-429f-a0c8-2d72eb551a40/08d20fd42f0acf0c49c52d433151c51286d1333c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7152eba0-f1dc-429f-a0c8-2d72eb551a40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 12:52:46 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 140.191.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15281144 (0xe92bf8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 12:52:46 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=08d20fd42f0acf0c49c52d433151c51286d1333c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ec:c2:c0:cf:93:1e:6c:a4:4d:a3:08:8c:f9:
                    1b:e0:0b:92:08:a9:6e:a2:fb:90:0b:cd:02:97:60:
                    16:f6:82:91:df:a1:e9:8b:f2:e7:12:45:4e:e8:bc:
                    41:b3:6a:4c:18:34:2c:c5:a7:5a:b2:68:3e:88:29:
                    48:3d:ed:8c:8f:d8:26:c9:59:84:9c:7c:28:fc:62:
                    0f:4f:d9:53:40:7b:ff:6c:c3:48:80:f6:96:c0:ea:
                    43:39:1a:39:51:c7:4c:a6:6f:f7:7f:10:de:29:56:
                    e2:14:6c:03:71:47:ca:7a:41:53:c8:0b:06:f8:6a:
                    97:37:ca:ac:89:dc:18:9a:c8:f0:95:45:1f:21:54:
                    35:ee:40:2f:2e:cf:53:ee:92:42:61:8c:28:c8:d4:
                    77:ea:d2:5b:1a:2e:c4:fc:04:73:1f:cb:a5:f0:f2:
                    d5:c9:19:12:36:0c:88:14:b8:cc:62:2b:27:47:9e:
                    bc:b7:9c:1d:d9:28:42:ea:e9:7c:38:67:f3:b0:e7:
                    95:d9:cd:59:6f:0f:43:13:7b:1c:61:81:ad:56:2a:
                    30:d1:42:fb:67:05:07:bc:52:06:e2:95:8b:e6:75:
                    80:46:49:84:f2:5c:e1:2c:66:c8:ae:23:06:ca:f1:
                    6c:83:ae:f7:e4:bb:f9:d6:51:60:d0:e2:16:73:aa:
                    1c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5B:13:79:A0:A8:28:04:0D:EB:CD:BA:F5:87:95:E9:D6:25:7E:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7152eba0-f1dc-429f-a0c8-2d72eb551a40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7152eba0-f1dc-429f-a0c8-2d72eb551a40/08d20fd42f0acf0c49c52d433151c51286d1333c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.191.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1e:62:3d:86:fd:50:52:6d:fa:5e:3b:00:5f:9b:44:46:07:7c:
         cc:06:b2:d6:cd:a0:93:6b:25:31:6e:ab:72:dd:10:f3:35:9b:
         5b:cd:0a:4c:8e:70:ed:af:97:50:aa:cf:3b:bb:3f:7c:95:e3:
         f5:50:0b:ad:8e:98:22:ac:af:47:de:f0:31:b7:bf:c7:29:ba:
         82:1f:4b:a9:ac:d1:b3:a9:2a:a3:87:f6:54:b9:24:83:9c:c0:
         e7:5c:5a:71:f9:b2:ed:3d:9d:ab:12:a2:55:e4:c4:ce:28:04:
         df:9f:96:17:ca:bc:f4:d0:0d:b1:de:0a:0c:a1:c9:1a:e3:06:
         02:75:c0:83:ab:21:21:23:8f:3d:c5:05:24:a3:df:72:1c:a5:
         d4:ba:9b:29:85:3c:90:7c:f2:47:ac:cc:ac:0e:63:9c:e5:95:
         8e:e7:b9:d7:2a:5a:c5:52:52:c4:a2:44:0a:fc:c7:df:ae:45:
         29:06:48:85:04:17:fc:2a:04:62:c9:c4:1d:4e:e9:4c:60:af:
         a1:54:4c:df:ec:ac:f9:63:cb:66:54:a9:9d:a0:3b:70:c2:6d:
         da:97:c9:c6:cc:a2:92:10:c0:59:9e:62:7b:eb:cd:c0:9e:7e:
         84:68:c5:f8:d5:63:4a:e3:6b:d2:1a:09:43:39:e7:02:53:88:
         74:8e:14:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----