Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86c878f8fb518b77b03f25c8a73403a1bc44f652.cer
File:                     86c878f8fb518b77b03f25c8a73403a1bc44f652.cer (raw, json)
Hash identifier:          LjoE1CvRLc9LrgMW+x2Kwp52zWJExpoJdyvCdtYjcpg=
Subject key identifier:   22:B8:46:B2:7E:1A:43:3D:A4:AC:F0:72:20:F9:04:55:49:AB:A0:5A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E58E3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e9253cb6-19df-4a5f-a369-74956a59ad71/86c878f8fb518b77b03f25c8a73403a1bc44f652.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e9253cb6-19df-4a5f-a369-74956a59ad71/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 12:39:54 +0000
Certificate not after:    Mon 20 May 2024 23:24:57 +0000
Subordinate resources:    AS: 263724
                          IP: 2800:3d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15044156 (0xe58e3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 12:39:54 2023 GMT
            Not After : May 20 23:24:57 2024 GMT
        Subject: CN=86c878f8fb518b77b03f25c8a73403a1bc44f652
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:1c:3b:e7:cc:d9:e2:07:63:6f:ee:bf:c1:1b:
                    7d:bd:85:2d:85:6e:16:c4:7d:fe:b1:ee:ff:56:d0:
                    6a:1f:0b:87:3a:86:7e:8e:01:e8:59:ed:76:25:51:
                    bf:80:da:e2:82:72:7e:44:16:cf:92:07:8c:db:87:
                    fe:40:43:fe:7e:0c:8c:f7:db:02:0f:f0:ca:23:04:
                    c2:2b:42:8d:5c:0c:a6:f0:5d:99:5e:df:a2:20:e2:
                    df:3b:6c:f8:98:ab:75:4b:63:1b:4b:9e:96:f0:80:
                    0e:0a:cf:ba:46:c8:15:5d:a5:8c:9b:04:f0:af:40:
                    41:ab:15:3d:31:27:98:bd:79:cd:ea:85:76:c3:26:
                    4c:37:03:89:57:41:b8:e1:13:1c:52:33:81:ea:4e:
                    64:6c:1d:89:7a:ea:27:7c:29:c6:b3:b1:93:d4:d8:
                    ca:73:06:a4:b4:46:55:0f:d8:68:5e:3b:74:4b:71:
                    0a:a6:f1:92:a2:70:b3:92:e1:82:2a:1d:c5:a1:5f:
                    e7:c2:2b:41:05:47:d2:11:5b:67:8b:bf:bf:29:63:
                    6c:1d:20:9c:5c:65:23:58:f6:a1:08:10:d0:5b:29:
                    f9:f8:46:f6:31:bb:46:6d:b3:7e:c9:38:6e:86:ee:
                    6f:79:9f:0b:77:e9:7c:66:f9:3a:05:9c:cb:3d:ce:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B8:46:B2:7E:1A:43:3D:A4:AC:F0:72:20:F9:04:55:49:AB:A0:5A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e9253cb6-19df-4a5f-a369-74956a59ad71/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e9253cb6-19df-4a5f-a369-74956a59ad71/86c878f8fb518b77b03f25c8a73403a1bc44f652.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2800:3d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263724

    Signature Algorithm: sha256WithRSAEncryption
         02:70:b6:e2:89:13:70:71:f8:fc:61:2e:58:83:bb:5e:64:27:
         2b:a9:b3:d2:36:37:38:fa:f6:c6:0d:f1:78:d3:6d:6a:7a:00:
         71:91:4f:48:e9:4f:c6:d0:63:70:14:5a:de:2a:07:de:ec:3d:
         cd:e0:43:1f:67:21:4b:40:e1:67:17:a6:94:af:39:ad:95:b4:
         a1:a0:5a:68:ea:ad:f5:b7:01:f6:32:f2:ef:ad:0a:58:7f:0e:
         4a:eb:0f:e3:88:6b:dd:d2:3a:47:ee:51:ed:13:1b:54:7e:d4:
         af:00:93:b0:a7:1e:1d:d3:42:ab:e3:94:49:0b:f5:fd:98:1f:
         fb:a3:96:99:10:20:b8:0c:43:d9:75:b8:ba:60:ec:db:b5:ca:
         53:9e:bd:f0:4c:b9:58:0d:dc:2b:8d:eb:5e:71:44:ce:2d:fd:
         17:a2:da:8d:c1:0a:ee:75:02:52:6a:e4:1f:24:86:69:df:82:
         cb:14:4e:67:23:55:95:35:99:48:78:a8:7e:4d:8d:8a:ff:17:
         87:c0:92:2e:7d:c8:cf:39:f1:9b:a6:31:c3:33:a4:f9:1c:4c:
         dd:e6:4a:ec:7b:cc:32:99:ea:30:16:0e:ce:a3:6e:d2:43:3c:
         f9:1a:90:09:64:0f:08:78:d9:83:ac:99:d7:36:f1:2e:20:5f:
         0c:87:88:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----