Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85e8d21389d8651ed697cb16ebde54c2c055cfef.cer
File:                     85e8d21389d8651ed697cb16ebde54c2c055cfef.cer (raw, json)
Hash identifier:          8hZQ7Oc0bWkyo0zUFi8etEveTDSwerhRpRz432/xFsU=
Subject key identifier:   BB:17:6B:4B:BF:7D:7F:5D:98:2B:3F:CF:B3:92:33:A7:07:73:17:4C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E94888
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/139b31c9-1dcb-4d6b-9e7a-7c0590eb0623/85e8d21389d8651ed697cb16ebde54c2c055cfef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/139b31c9-1dcb-4d6b-9e7a-7c0590eb0623/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 19:35:52 +0000
Certificate not after:    Tue 28 Jan 2025 15:39:35 +0000
Subordinate resources:    AS: 272103
                          IP: 2803:1710::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15288456 (0xe94888)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 19:35:52 2023 GMT
            Not After : Jan 28 15:39:35 2025 GMT
        Subject: CN=85e8d21389d8651ed697cb16ebde54c2c055cfef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:e0:54:3b:ea:0c:d2:c6:ee:5d:1b:f0:22:b7:
                    31:2a:fb:31:9a:d8:12:04:0a:33:08:4c:06:79:84:
                    01:73:17:07:fd:31:2e:17:9f:c3:2f:e5:07:7a:b8:
                    3a:5d:1b:4d:1f:83:cb:ed:a2:ab:4c:1c:4e:70:6b:
                    b6:e6:45:b3:e3:14:65:78:05:fd:e2:39:eb:f0:8e:
                    0c:8b:e0:ac:e2:9f:70:89:32:94:82:7d:82:d8:6d:
                    46:19:18:96:c3:75:8f:ee:b2:82:6d:df:36:c0:7e:
                    de:b5:46:f8:51:bc:1c:b3:ee:25:2f:b8:89:f1:a8:
                    80:60:5e:11:2b:d9:7f:8a:d1:d6:99:ba:ca:ed:74:
                    1c:85:59:4e:76:ba:63:16:57:a9:3a:8e:31:cc:c2:
                    fd:cc:d7:04:47:04:a0:33:48:15:40:50:9a:df:b6:
                    b0:aa:e6:6f:67:1b:44:a0:b8:dd:f0:a1:8d:2d:8a:
                    5b:ae:2a:14:25:1a:47:f7:94:d9:af:4e:dc:32:39:
                    23:41:eb:06:e2:a8:2a:f1:fe:d2:97:0c:3b:5b:76:
                    89:aa:7c:bb:e5:48:73:03:c5:88:b2:f3:80:ed:f1:
                    41:b1:34:8f:ad:0b:fa:0a:2a:cb:e7:3f:db:7e:ec:
                    53:8b:dc:07:2e:7b:5d:78:0a:87:76:3b:55:96:cb:
                    28:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:17:6B:4B:BF:7D:7F:5D:98:2B:3F:CF:B3:92:33:A7:07:73:17:4C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/139b31c9-1dcb-4d6b-9e7a-7c0590eb0623/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/139b31c9-1dcb-4d6b-9e7a-7c0590eb0623/85e8d21389d8651ed697cb16ebde54c2c055cfef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1710::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272103

    Signature Algorithm: sha256WithRSAEncryption
         7e:58:6f:5f:a5:5f:cc:07:b9:46:5c:43:90:2a:a0:43:10:58:
         4d:c9:4f:0b:18:9c:f6:35:99:25:cd:32:3a:13:11:96:e3:66:
         ae:a0:63:6f:93:3b:d4:b4:25:58:42:91:35:fe:e5:24:c6:ab:
         1c:d2:9f:3a:05:f4:24:f0:b8:95:b0:46:7e:0e:40:11:27:26:
         90:a2:50:65:8f:1f:3a:8c:a5:bb:f8:e0:55:20:b5:e7:5b:6a:
         1a:6f:47:66:58:c1:85:1e:28:3e:19:5e:f8:03:55:b6:f4:b4:
         f5:f9:93:ed:e4:4f:70:da:63:f4:8e:17:e3:39:56:8d:a3:81:
         92:99:9f:48:af:d1:5e:01:6f:20:43:cf:ef:ff:bc:10:d3:3d:
         fc:48:7f:e1:7c:92:a8:0b:ff:59:6b:04:b4:43:43:c6:b0:56:
         c1:3b:3d:6c:4a:af:ba:5a:99:e3:ca:4e:d4:7b:68:a0:96:d0:
         71:61:ed:00:85:ed:2b:c2:0f:e4:67:3b:67:76:d4:ed:93:2d:
         88:22:f5:25:28:74:31:bb:24:ac:c9:62:df:40:aa:8e:cd:44:
         0a:fb:cf:a0:a0:d6:df:67:43:d3:17:ae:16:13:7e:0e:36:ab:
         24:38:2e:57:47:40:f1:00:c0:eb:df:40:8c:aa:d7:71:b6:5e:
         06:94:65:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----