Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d97e9df8a52b86a1e3cba4574c04d1d319d1371.cer
File:                     8d97e9df8a52b86a1e3cba4574c04d1d319d1371.cer (raw, json)
Hash identifier:          RFOF1vj/Z96LsxUuC+/o0UeU6rkDY/H0Qd6wY1L4GQc=
Subject key identifier:   9C:74:7C:D4:9E:A4:F8:59:E7:66:93:42:A8:91:03:F7:18:47:C3:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4A75D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/787742ae-49a6-42f7-9e7c-f985b02e6750/8d97e9df8a52b86a1e3cba4574c04d1d319d1371.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/787742ae-49a6-42f7-9e7c-f985b02e6750/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 17:21:55 +0000
Certificate not after:    Mon 16 Dec 2024 20:01:29 +0000
Subordinate resources:    AS: 272074
                          IP: 2803:4b10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14985053 (0xe4a75d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 17:21:55 2023 GMT
            Not After : Dec 16 20:01:29 2024 GMT
        Subject: CN=8d97e9df8a52b86a1e3cba4574c04d1d319d1371
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:90:de:48:52:53:97:d6:04:73:6e:c3:79:
                    70:31:c5:cb:9c:a6:56:0f:d3:e3:82:86:8f:86:e3:
                    42:ff:74:fb:9c:8c:44:62:fd:a2:dc:ae:2f:ef:24:
                    e6:1f:8e:be:6e:5b:6b:d9:60:b2:0a:ac:fb:54:1b:
                    7e:07:ec:4d:88:f7:41:0c:94:77:15:15:c9:50:c1:
                    85:2b:74:d3:93:0b:80:40:59:4b:e5:6a:5b:f8:a2:
                    63:50:67:35:74:c6:14:4c:48:68:73:42:9c:25:00:
                    ca:f4:9c:9d:14:b8:80:81:cf:6e:80:bb:68:7e:4d:
                    05:9d:77:f2:e1:07:62:f7:25:d6:0b:1e:35:46:3d:
                    df:be:53:3b:c5:c4:c6:7c:35:6b:15:fe:5b:e3:93:
                    7f:ec:54:d8:7e:4e:71:fa:ff:a9:51:96:0f:ea:df:
                    15:20:90:a0:73:66:6a:a8:1f:5b:2c:9c:1a:eb:9e:
                    cf:28:f1:ea:5e:36:fc:cb:5a:3b:20:64:42:55:b1:
                    fd:e7:21:94:ce:e3:a6:ec:69:b3:1a:57:12:d7:12:
                    aa:a4:b3:8c:15:ab:bd:22:2e:65:bf:39:df:59:eb:
                    f6:bb:cd:5d:51:37:b5:12:df:93:48:4b:aa:17:4f:
                    eb:c3:bb:8c:60:70:35:e9:2c:33:4c:f9:a1:e7:a2:
                    56:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:74:7C:D4:9E:A4:F8:59:E7:66:93:42:A8:91:03:F7:18:47:C3:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/787742ae-49a6-42f7-9e7c-f985b02e6750/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/787742ae-49a6-42f7-9e7c-f985b02e6750/8d97e9df8a52b86a1e3cba4574c04d1d319d1371.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272074

    Signature Algorithm: sha256WithRSAEncryption
         59:74:b6:8a:f6:b7:9d:7d:70:71:dc:1c:72:6a:a8:b5:77:97:
         78:c3:8d:0c:e1:66:3e:24:e9:04:d0:eb:25:4b:25:27:13:3e:
         56:b8:3a:f5:80:a2:a7:f2:53:87:76:6a:9b:cf:d5:c5:64:61:
         b6:02:1b:4f:c9:f1:2b:c0:90:2f:53:04:34:e0:68:ab:40:20:
         6a:b2:4e:73:d0:7a:fc:ae:68:08:c7:ac:96:19:c5:bd:79:1f:
         4c:ce:d4:aa:4c:86:bd:f6:f2:c7:bc:a0:76:27:a4:57:ca:b5:
         04:94:95:63:d2:15:14:09:ad:cf:c3:89:35:d1:fe:58:c5:1c:
         39:56:3d:a4:c2:4b:dc:fe:3c:b3:31:9c:d0:5e:04:1b:14:94:
         8c:72:d3:27:08:f8:c2:54:39:c6:11:23:24:c3:b8:f1:d3:42:
         d5:b1:a2:5a:21:2f:63:e3:52:48:92:e5:24:8f:a3:2d:27:30:
         ac:09:d8:03:7c:6c:5c:0a:09:40:41:7d:52:4e:a1:e6:86:14:
         03:4e:14:b3:61:5c:42:19:36:8c:01:e4:74:b1:0c:15:ab:ef:
         74:cb:8d:43:c5:68:be:8e:a2:79:eb:59:9b:e2:02:0f:45:e1:
         fb:e4:5a:71:11:de:28:d6:0d:24:fc:02:73:7d:5f:f3:05:f4:
         c4:b6:2c:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----