Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/833e428e4f2e7cf20935ae73430efeea7b15d9fd.cer
File:                     833e428e4f2e7cf20935ae73430efeea7b15d9fd.cer (raw, json)
Hash identifier:          MBbrDQ4mKMJdmkOgyC7nrm3uzgtiJN1RGSF1IcVqUqc=
Subject key identifier:   FC:F8:0D:5D:23:FB:56:80:D7:5F:23:D1:26:0D:A4:E7:85:1E:F0:4E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E78EFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b0081fd8-d64c-4570-afb2-a600786ebb45/833e428e4f2e7cf20935ae73430efeea7b15d9fd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b0081fd8-d64c-4570-afb2-a600786ebb45/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 18:15:59 +0000
Certificate not after:    Thu 26 Sep 2024 15:11:13 +0000
Subordinate resources:    AS: 272017
                          IP: 2803:8510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15175423 (0xe78eff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 27 18:15:59 2023 GMT
            Not After : Sep 26 15:11:13 2024 GMT
        Subject: CN=833e428e4f2e7cf20935ae73430efeea7b15d9fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6f:99:a3:b9:5c:85:42:82:eb:22:48:49:9f:
                    24:3c:dc:c2:d7:d2:a0:7e:c1:72:7c:14:24:a8:1e:
                    95:a0:ed:2e:98:1a:d8:69:95:58:31:f6:af:b5:fa:
                    bb:a3:5f:14:f4:c9:2a:e0:45:4a:9a:9a:9f:af:fd:
                    4a:59:3d:d4:72:89:c7:f5:74:fa:52:09:45:ae:48:
                    db:14:62:72:9c:fe:2d:af:56:0c:e5:a2:19:b3:8c:
                    75:38:eb:9a:a6:9a:2e:82:d9:01:97:7a:b2:47:85:
                    55:20:6e:ac:d8:e5:a5:26:3b:44:e4:0f:11:84:65:
                    5c:fb:15:20:05:ad:d6:3c:6c:0c:98:6c:8e:96:40:
                    8f:cc:32:e9:6d:09:b3:47:ac:d7:b1:36:e2:33:f2:
                    06:4e:64:4a:4b:b8:4b:ca:cd:b8:b6:a2:78:75:c4:
                    8b:bd:bd:6c:d5:06:b2:1d:4c:10:a1:2e:2e:f3:ba:
                    c0:73:d9:4d:0b:d0:30:0a:cf:b6:de:53:9a:b1:0a:
                    83:fd:87:3c:c7:94:40:80:9c:42:e1:8f:07:85:2f:
                    ba:f5:36:8a:12:b9:12:1d:11:db:39:a0:15:f4:a1:
                    b8:02:32:61:ac:4f:85:3a:55:b1:2e:f9:a9:01:22:
                    88:b7:f3:73:ce:0a:0a:4b:40:2f:2a:91:54:28:ce:
                    1c:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F8:0D:5D:23:FB:56:80:D7:5F:23:D1:26:0D:A4:E7:85:1E:F0:4E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b0081fd8-d64c-4570-afb2-a600786ebb45/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b0081fd8-d64c-4570-afb2-a600786ebb45/833e428e4f2e7cf20935ae73430efeea7b15d9fd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272017

    Signature Algorithm: sha256WithRSAEncryption
         17:43:39:d9:6c:67:02:13:f4:63:e1:30:da:60:f8:26:ed:fc:
         6f:42:fb:d2:57:95:83:af:f9:6f:7a:9c:f2:aa:00:7d:03:93:
         0b:76:d1:1b:32:89:e5:dc:24:ff:fd:b3:85:53:92:d5:fb:fd:
         a7:d3:9e:05:41:b9:63:19:9d:b6:b6:8a:c1:01:ad:7a:44:57:
         4c:d1:09:38:f9:fd:a0:d3:13:0a:91:e1:2f:a4:c7:28:24:89:
         a8:f8:1d:6c:7a:40:75:cb:14:4b:31:99:f0:10:1a:d1:52:2b:
         cb:34:4f:e4:78:bc:47:5a:82:19:4e:48:72:eb:b2:1f:cc:55:
         31:f7:4a:43:47:f9:b5:6b:79:64:c0:4b:76:1c:d4:42:1f:3d:
         5e:7a:5b:8b:13:29:63:6a:23:2f:61:d8:dc:b4:70:48:78:be:
         60:1f:8f:a4:45:5a:78:87:e3:a1:6b:6d:d5:b9:a1:59:5e:78:
         d6:bd:d8:af:23:31:85:fc:99:4f:31:88:6a:b4:11:cc:a9:e2:
         d7:ca:ee:6a:33:7a:0f:b5:09:83:a2:a6:cb:29:90:18:4a:84:
         58:3f:5f:1b:d2:a7:4a:81:a4:00:fe:31:54:56:bd:f9:aa:d0:
         0c:bc:b4:65:3c:ad:64:53:f5:09:ae:e3:32:c7:22:8b:3c:45:
         26:d3:d3:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----