Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.cer
File:                     8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.cer (raw, json)
Hash identifier:          HmzT4lvwq1MjaYP+rwlltw4BoIxeUqYZkO/+vQWqtTs=
Subject key identifier:   54:98:AA:EE:D7:FD:33:C3:FB:C2:58:BC:F1:76:EB:F5:76:0E:EC:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4BF36
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e08329b-b55a-4666-b304-ccc7a4d1755b/8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e08329b-b55a-4666-b304-ccc7a4d1755b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 22:04:40 +0000
Certificate not after:    Tue 21 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 262224

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14991158 (0xe4bf36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 22:04:40 2023 GMT
            Not After : Jan 21 05:00:00 2025 GMT
        Subject: CN=8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:82:6d:73:ea:83:20:1c:48:92:db:36:8e:4a:
                    68:00:da:2e:fb:62:ab:1a:a2:b2:90:4f:73:8d:83:
                    76:47:5a:68:51:31:9b:6f:29:6e:b7:0c:f1:81:0b:
                    97:3c:16:52:da:a5:68:58:ce:85:bf:af:9d:0f:b4:
                    4f:12:97:09:1b:62:f8:0e:62:42:1a:e3:c0:fd:34:
                    5f:c3:6c:37:43:17:00:4e:36:97:8e:88:bf:cd:da:
                    bf:ca:7d:e1:99:52:e8:99:f4:80:7e:67:42:ad:13:
                    e6:cb:c9:ea:d9:f3:3b:48:62:eb:1e:4f:f5:10:2f:
                    e2:96:1c:d7:bc:ec:1f:d9:14:4c:00:e3:e9:bd:98:
                    5f:dd:bd:bb:de:8f:c1:7e:72:9d:2e:5c:bf:a1:73:
                    aa:41:1b:e8:8e:ec:97:a4:8c:e3:4a:64:fd:d8:85:
                    3c:a1:55:c5:1e:41:4b:23:96:80:ce:2c:a2:aa:e1:
                    11:30:f9:87:b6:a3:85:af:e6:17:b8:6a:82:bd:7c:
                    dc:5c:72:8c:c1:0e:d4:8d:ed:76:55:4d:aa:cf:42:
                    b8:19:07:2c:f5:2a:26:d4:44:81:95:1b:41:24:c5:
                    04:cc:3c:e4:58:c3:7b:4e:4f:e8:01:8a:77:83:ec:
                    0b:88:3e:4c:33:a2:9f:cc:bc:13:80:a1:6f:e5:e7:
                    a2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:98:AA:EE:D7:FD:33:C3:FB:C2:58:BC:F1:76:EB:F5:76:0E:EC:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e08329b-b55a-4666-b304-ccc7a4d1755b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e08329b-b55a-4666-b304-ccc7a4d1755b/8420de7ba136b3cf96ae4a8fa6f70abfc9b3fd95.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262224

    Signature Algorithm: sha256WithRSAEncryption
         01:87:ba:1a:25:d4:8e:30:b9:17:a7:f8:b0:c3:0e:d4:2a:22:
         32:29:24:00:e4:76:b3:7e:56:00:c7:ca:55:37:db:0e:90:fc:
         60:84:7d:61:81:42:ed:e3:eb:10:62:85:ef:29:83:46:84:b4:
         e0:3d:ac:c7:28:70:04:71:77:54:c6:46:7a:87:47:e8:98:80:
         c0:0b:0b:8b:44:ed:ba:52:74:e5:18:4b:5f:b0:6e:8d:e7:62:
         1e:47:20:cc:84:3a:5e:66:a8:ab:dd:8b:40:42:52:09:26:ae:
         3c:d1:b9:ff:0d:d9:2a:0e:80:6d:d6:9b:e7:6a:ed:9d:ea:e1:
         07:06:c2:ea:a7:57:1f:3d:60:c2:17:1b:29:3c:31:cb:f2:2f:
         c0:6f:7d:e2:15:d9:12:00:ff:34:ee:e0:b9:dc:6e:93:a9:1d:
         e6:90:96:bb:e8:db:e5:41:59:c4:9a:a5:32:77:db:72:a5:0f:
         ed:4c:f4:2a:13:63:f4:f2:c6:6d:fc:b7:f8:af:24:f7:e2:28:
         d0:b7:18:96:b7:0b:d2:aa:d8:1f:5d:3b:7b:60:27:63:c6:ac:
         6e:b1:34:53:e1:fa:82:84:c5:7f:e3:f0:5a:df:c5:60:64:07:
         1d:e6:25:6c:39:2f:dc:36:1b:37:12:6f:c6:b7:1e:ae:36:4e:
         d0:57:ac:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----