Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8bcd1317855382d4b25f71224feff3a451c48f7f.cer
File:                     8bcd1317855382d4b25f71224feff3a451c48f7f.cer (raw, json)
Hash identifier:          CSgnhuNYKQB0a9HSWPDPfFZPY40U/F4RvCkp37TOFzc=
Subject key identifier:   FF:FF:EB:C2:B4:4D:49:60:30:6C:B7:58:AC:5A:34:9A:0C:4C:FA:F4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7BBFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2366b736-8a81-4b7c-9fb2-83f13470ba56/8bcd1317855382d4b25f71224feff3a451c48f7f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2366b736-8a81-4b7c-9fb2-83f13470ba56/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 01 Sep 2023 15:26:45 +0000
Certificate not after:    Sun 25 Aug 2024 17:48:00 +0000
Subordinate resources:    AS: 272895
                          IP: 2803:a690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16235519 (0xf7bbff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  1 15:26:45 2023 GMT
            Not After : Aug 25 17:48:00 2024 GMT
        Subject: CN=8bcd1317855382d4b25f71224feff3a451c48f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:35:0e:4d:27:ea:9c:f4:d5:67:57:fa:ea:dc:
                    50:b5:09:14:78:92:cd:cb:b6:ec:94:9f:a5:7e:c6:
                    d1:61:0e:75:9d:c7:d3:89:1f:80:41:ee:3a:d8:f3:
                    ee:f0:3f:c1:b6:2a:e1:f8:6c:55:e4:9c:b6:e5:57:
                    54:ee:58:15:f6:ba:e2:be:f1:33:8d:62:48:ff:af:
                    9a:e2:da:2f:90:99:9e:bb:4e:f6:3d:ab:f0:30:6c:
                    14:3b:27:76:46:3e:6f:9b:a8:24:22:fa:b3:a9:e1:
                    b1:8e:82:b1:86:d9:ea:b3:64:45:07:e8:9e:b2:f8:
                    dd:34:1c:83:34:79:38:78:d0:13:19:bb:5a:8d:61:
                    e6:4c:f8:d9:0c:42:53:5f:f1:b6:0c:31:bd:bb:f4:
                    b4:21:a6:cb:98:1a:69:52:e1:7f:54:a8:cb:d8:42:
                    86:c7:e5:b9:b4:ed:83:c5:da:12:68:64:ad:23:f6:
                    ca:86:4f:39:85:57:be:be:fd:1d:2a:64:c3:fc:1e:
                    02:88:e2:8c:6a:e9:31:28:d5:f4:1d:c8:63:aa:79:
                    da:7d:88:96:07:79:a5:f1:9a:b1:14:b7:0c:49:82:
                    3e:d0:c3:8d:ef:e3:4e:c7:71:40:36:61:f3:3a:6c:
                    da:62:ee:3b:64:6c:d4:6b:1b:1c:32:54:6a:46:61:
                    67:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FF:EB:C2:B4:4D:49:60:30:6C:B7:58:AC:5A:34:9A:0C:4C:FA:F4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2366b736-8a81-4b7c-9fb2-83f13470ba56/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2366b736-8a81-4b7c-9fb2-83f13470ba56/8bcd1317855382d4b25f71224feff3a451c48f7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272895

    Signature Algorithm: sha256WithRSAEncryption
         18:c0:a2:e1:24:17:4b:34:ab:8e:08:33:5d:70:76:c5:64:22:
         cf:0b:f8:bf:99:af:28:85:ca:fa:27:65:b4:fc:fc:f6:db:45:
         08:32:f8:6d:8d:84:47:1d:50:c4:72:29:d5:4f:08:ac:4f:2e:
         9d:bb:e6:84:7f:19:64:18:8d:3f:6a:26:6d:fb:be:27:b8:8c:
         7c:6f:e1:93:b7:d3:09:8d:85:bf:62:63:9c:b3:03:29:78:ac:
         73:54:2a:4d:a2:05:94:dd:28:9c:48:48:a9:e5:ff:d5:74:33:
         3d:d2:38:17:bf:02:32:c1:e2:d8:97:ed:90:ab:c0:30:eb:a4:
         81:1b:08:a0:92:10:f1:fc:5b:d5:4c:55:d7:cd:0f:73:de:9f:
         93:e2:a7:1e:1a:cf:30:bc:8f:56:2e:94:d7:ab:c7:a9:3f:41:
         29:3a:93:49:e0:5d:8a:34:a9:36:12:97:ff:36:ff:80:c4:a1:
         fd:68:50:ef:d3:76:4b:94:4a:d3:d1:55:7d:63:92:2a:10:33:
         6a:3e:41:ac:eb:71:22:c1:3c:99:30:e2:dd:aa:18:ba:ec:cd:
         ff:a4:b9:99:ec:a0:fa:5f:ff:f9:46:2a:f9:4e:0f:83:53:b0:
         ad:cc:34:0b:c1:6b:7e:6f:45:64:e1:c9:6c:9d:bf:1c:31:16:
         84:f0:e1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----