Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bf89334b78a089c6040858ad23f31ea607244b6.cer
File:                     4bf89334b78a089c6040858ad23f31ea607244b6.cer (raw, json)
Hash identifier:          GqhOgzr8C1nDudvnQ4nQNL7VjRERIEbcYCnCGf+d0BQ=
Subject key identifier:   F5:DF:E3:05:4B:FC:54:60:2B:DE:7A:0C:58:AF:A7:F5:78:F9:A9:EF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F33681
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/19749dd9-3f97-4f5a-aefa-46eb6b286caa/4bf89334b78a089c6040858ad23f31ea607244b6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/19749dd9-3f97-4f5a-aefa-46eb6b286caa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 19:34:17 +0000
Certificate not after:    Mon 05 Aug 2024 15:11:14 +0000
Subordinate resources:    AS: 271990
                          IP: 2803:e110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15939201 (0xf33681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 19:34:17 2023 GMT
            Not After : Aug  5 15:11:14 2024 GMT
        Subject: CN=4bf89334b78a089c6040858ad23f31ea607244b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:df:bd:fd:25:38:f5:d0:53:4a:7a:54:23:d5:
                    e2:3b:c3:10:0f:3a:0a:c9:88:ab:73:f7:6d:4d:5e:
                    c7:bb:4c:fc:1e:f6:59:9d:79:18:52:01:d7:71:c1:
                    3d:47:5a:c9:65:2a:be:ac:36:d5:7f:01:62:69:47:
                    f7:f7:8e:43:3e:de:02:6f:ac:41:34:f3:38:8f:1c:
                    4e:ae:e4:9b:60:b6:19:13:ff:03:08:04:71:65:fb:
                    6c:89:42:40:bc:1c:b2:9e:4a:41:2d:23:a6:25:ec:
                    05:5f:21:88:39:8b:b9:87:72:e7:4a:c4:1e:9d:98:
                    14:fd:05:2b:d8:69:b2:1c:03:94:a0:3c:fc:c5:44:
                    bf:7e:68:c4:15:d0:77:d0:15:f3:de:f3:91:fa:33:
                    21:4a:f9:92:c0:f5:4a:95:1e:ce:e9:00:a6:65:30:
                    b1:05:85:5a:70:40:ea:a4:cc:4e:e1:77:34:ab:39:
                    3a:14:50:27:46:02:48:59:38:8d:18:0e:d7:23:b0:
                    2c:ef:b6:60:99:c8:c7:d3:9f:60:68:ff:48:c7:72:
                    22:a0:a4:d9:10:78:44:da:f7:3c:77:7c:14:2a:4d:
                    9d:58:fd:fd:3c:65:07:b6:aa:1c:2e:85:85:fb:1f:
                    18:e6:56:94:d3:7c:f3:74:cb:ec:e4:5b:8b:62:95:
                    97:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:DF:E3:05:4B:FC:54:60:2B:DE:7A:0C:58:AF:A7:F5:78:F9:A9:EF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19749dd9-3f97-4f5a-aefa-46eb6b286caa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19749dd9-3f97-4f5a-aefa-46eb6b286caa/4bf89334b78a089c6040858ad23f31ea607244b6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:e110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271990

    Signature Algorithm: sha256WithRSAEncryption
         0b:cf:f0:c6:64:ad:f4:80:b2:88:b8:97:1e:f2:c4:ee:90:ff:
         ad:83:4d:e0:fc:f9:d1:38:e6:16:3b:bc:91:2e:b7:b6:fa:ba:
         b3:83:34:9f:fc:52:68:db:60:44:0b:ce:2f:d3:58:2a:7b:62:
         e6:e6:44:b1:a3:05:05:ca:aa:0f:67:0f:27:83:31:49:9f:16:
         20:41:e5:1a:a3:43:46:25:c1:31:12:fb:eb:60:ec:62:65:f6:
         8c:83:1b:38:38:65:aa:d1:91:77:4e:66:4a:e9:1c:19:e8:e0:
         52:56:ec:8e:25:ce:4f:7d:46:89:4d:cd:f2:e6:c9:22:cc:a9:
         1c:14:04:0b:53:6a:dc:88:b5:83:53:bd:7b:74:4e:b2:a4:19:
         6c:ee:d5:51:0a:46:b4:3d:cc:14:c6:a4:d1:17:53:11:d5:4f:
         2f:85:52:8c:55:74:13:d2:a1:5d:8e:7f:1f:fb:c3:f3:5c:d0:
         f3:7b:76:60:46:4e:31:5b:29:58:65:ca:3c:33:f4:14:d4:00:
         ef:a8:d6:94:57:7e:06:0e:f2:1e:4e:fb:d8:34:2c:d4:6f:35:
         c5:5a:3e:98:9d:aa:9f:fe:0c:34:49:a5:e2:9c:a8:32:bf:4f:
         70:be:d0:6a:f1:d3:df:63:5a:24:53:71:8f:fb:c1:5b:c4:0e:
         96:2d:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----