Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/883dc228242a0404bfff63a1dbe812a5faaad041.cer
File:                     883dc228242a0404bfff63a1dbe812a5faaad041.cer (raw, json)
Hash identifier:          aEBP7WyrlebhRlG+1Z2+tYj2XsfPeEiRDmntO/thL8o=
Subject key identifier:   43:56:27:4D:DC:4F:63:EA:22:EC:F3:03:D5:20:46:DA:3A:E7:66:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA0F07
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/299e9fea-0fcb-44c4-85e7-03562cde3a7e/883dc228242a0404bfff63a1dbe812a5faaad041.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/299e9fea-0fcb-44c4-85e7-03562cde3a7e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 12:11:20 +0000
Certificate not after:    Tue 07 Jan 2025 21:51:49 +0000
Subordinate resources:    AS: 272084
                          IP: 2801:131::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16387847 (0xfa0f07)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 19 12:11:20 2023 GMT
            Not After : Jan  7 21:51:49 2025 GMT
        Subject: CN=883dc228242a0404bfff63a1dbe812a5faaad041
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:fc:95:96:ab:95:db:40:34:43:04:23:a9:dd:
                    83:91:24:e4:1d:1b:91:84:dc:ed:de:50:ff:46:08:
                    00:06:e6:f1:ac:a1:ed:ea:bf:6e:a6:ad:5b:48:85:
                    26:b6:f9:e7:69:d3:ac:91:f1:67:4f:a4:7f:e4:58:
                    0f:91:bd:3a:f7:c0:71:df:ae:13:a2:df:eb:23:cf:
                    f7:9b:92:21:96:25:f7:5d:46:5f:15:c9:67:39:c1:
                    b9:52:e2:cb:e7:c3:74:91:cf:76:c4:8d:c9:6c:fd:
                    f3:c1:97:19:9d:d2:1e:08:9a:c0:8f:8b:94:a6:8f:
                    09:87:0e:2c:13:76:2c:b8:b6:a0:02:c5:27:de:55:
                    14:ca:5b:ee:36:5b:b5:48:94:6a:63:28:bc:d8:62:
                    95:37:62:86:86:59:de:71:fb:84:76:b4:cc:b9:f4:
                    b1:ea:e3:b3:b5:09:cd:36:a9:e2:00:fd:af:05:7c:
                    41:72:1d:fa:6e:4e:b6:7c:cb:80:35:a4:3f:8f:3b:
                    40:9c:70:c6:45:7f:5d:26:36:f7:23:8b:d5:19:45:
                    f1:c0:bd:34:5f:13:c4:48:ba:3e:23:41:3b:b9:11:
                    d1:23:88:d4:e2:d4:99:ca:81:13:ef:6a:76:15:db:
                    a5:e7:53:21:05:83:9e:6e:30:a5:23:25:53:ad:a6:
                    e0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:56:27:4D:DC:4F:63:EA:22:EC:F3:03:D5:20:46:DA:3A:E7:66:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/299e9fea-0fcb-44c4-85e7-03562cde3a7e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/299e9fea-0fcb-44c4-85e7-03562cde3a7e/883dc228242a0404bfff63a1dbe812a5faaad041.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:131::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272084

    Signature Algorithm: sha256WithRSAEncryption
         80:e2:05:93:34:8e:4d:3a:68:c1:45:5c:b6:55:e2:0f:07:89:
         23:53:29:dd:77:4d:8d:14:2e:72:70:6c:18:97:05:0b:ec:fb:
         14:82:08:fa:12:40:6c:b2:76:17:0b:85:f8:ff:06:2e:69:4f:
         63:3c:6a:48:28:88:05:1e:15:f8:2b:c1:f4:46:7f:e5:0d:09:
         5d:69:60:4b:37:4a:77:52:e2:8c:97:fa:05:45:a2:1d:e7:a1:
         5c:aa:e1:ca:94:87:ba:02:73:46:5b:a2:c0:2d:8c:ae:7f:9f:
         49:2f:69:20:1b:30:b6:a4:1e:90:9e:91:52:4c:b1:05:76:f2:
         1d:6e:0a:90:82:49:2c:47:17:78:e9:6a:fc:81:ac:73:62:f7:
         88:f7:9d:a8:e4:91:29:97:69:49:78:10:f0:0c:ab:2a:11:84:
         0c:16:93:92:d4:39:a2:8a:b4:aa:e8:17:7f:ff:d9:f8:5e:50:
         4f:d1:d1:bd:38:67:53:67:48:f8:f7:62:a4:9c:78:c8:e3:c9:
         ea:f4:a8:2f:3a:ad:6b:f2:8c:35:70:e5:0f:cf:d6:be:4b:f1:
         aa:0c:27:b8:48:38:68:cd:59:0b:74:79:2b:02:09:b1:f6:53:
         31:b4:97:76:49:71:42:3f:50:8a:93:dc:12:c0:74:3f:e0:20:
         25:fe:da:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----