Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e057bad8804f01cb8c9cbe2871f53b73725d7d4.cer
File:                     8e057bad8804f01cb8c9cbe2871f53b73725d7d4.cer (raw, json)
Hash identifier:          nmWbHV/wWWTB7gOEsmjwQ4VZTxwP7HmdGkt0aFoTqss=
Subject key identifier:   AD:21:8F:54:FF:25:BC:DA:8C:B6:CC:90:EE:B1:C0:4C:95:89:6C:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8DF3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/701d698d-86a3-441a-9669-8470c8f8f5b3/8e057bad8804f01cb8c9cbe2871f53b73725d7d4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/701d698d-86a3-441a-9669-8470c8f8f5b3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 00:08:34 +0000
Certificate not after:    Thu 19 Sep 2024 14:36:00 +0000
Subordinate resources:    AS: 269843
                          IP: 45.189.108.0/22
                          IP: 2803:e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15261499 (0xe8df3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  8 00:08:34 2023 GMT
            Not After : Sep 19 14:36:00 2024 GMT
        Subject: CN=8e057bad8804f01cb8c9cbe2871f53b73725d7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:7e:2c:24:10:99:5e:4f:69:64:df:bf:c2:23:
                    30:70:61:88:1f:1d:74:56:35:90:92:fc:d1:a1:5e:
                    0b:9f:77:20:57:ec:3d:aa:32:eb:58:38:9e:c1:5e:
                    87:64:c9:0f:07:01:a3:b2:a0:9f:9a:5b:70:dc:5e:
                    82:32:45:c2:33:72:f7:ca:8f:17:7c:08:ce:dd:74:
                    f6:ba:d9:68:0d:b6:bd:e3:f0:b2:94:88:cb:f7:dd:
                    a9:c8:ec:69:a7:4e:a5:e4:90:18:53:69:f5:8a:09:
                    a1:41:fd:38:8b:52:9a:0e:8e:21:11:7e:f6:61:6f:
                    67:1c:b3:92:f6:07:e5:e7:7f:d0:d5:46:64:a7:aa:
                    9b:d0:6f:53:dc:17:1f:32:03:44:84:69:35:f0:bb:
                    82:27:51:d9:96:36:0d:cd:b9:c3:01:c2:62:6a:59:
                    7c:e9:a1:26:e9:cc:de:a3:96:a0:ed:d4:60:bc:57:
                    ca:e0:7e:0d:a8:a8:9f:5a:d8:dc:82:71:f8:4a:47:
                    24:51:f9:e4:8c:a1:2f:ee:c3:34:cc:7b:ee:23:65:
                    ed:d0:c1:13:2b:fa:dc:5e:99:e7:ee:ed:52:71:fa:
                    6b:ef:a6:28:2e:6d:45:8f:02:1c:7d:61:54:0b:bf:
                    65:c4:96:5a:48:a3:60:0e:09:39:86:9c:99:6b:d2:
                    c2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:21:8F:54:FF:25:BC:DA:8C:B6:CC:90:EE:B1:C0:4C:95:89:6C:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/701d698d-86a3-441a-9669-8470c8f8f5b3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/701d698d-86a3-441a-9669-8470c8f8f5b3/8e057bad8804f01cb8c9cbe2871f53b73725d7d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.108.0/22
                IPv6:
                  2803:e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269843

    Signature Algorithm: sha256WithRSAEncryption
         70:63:e2:c0:6e:da:27:df:02:3c:4f:ec:73:0d:ec:ed:e1:bf:
         3d:62:73:5a:22:18:da:7d:5e:8c:5d:65:09:10:a1:96:97:a6:
         18:9e:ed:20:c0:56:85:7d:fa:71:b0:c0:3f:fd:5e:24:66:42:
         45:da:11:e5:54:1e:f0:df:fc:c8:b9:df:7d:34:8e:d8:23:d3:
         86:bb:59:51:d5:e9:dd:ac:af:5a:5b:14:46:1e:6b:06:2f:ed:
         88:12:f1:cd:93:c6:b0:0a:18:b6:b5:64:2a:ec:79:29:ae:3b:
         7b:04:eb:de:4c:a5:0a:7f:a1:62:aa:87:00:6b:8d:d3:c5:7f:
         bb:0e:ef:f5:75:c9:27:52:f7:e7:03:5a:09:9d:d8:55:8c:0d:
         07:65:82:4d:8a:ee:b5:39:ab:c6:6b:53:95:8b:72:89:fa:41:
         5d:b3:a5:39:2d:65:71:d9:4c:d2:00:4c:b8:3e:69:f2:ef:2c:
         09:36:7b:d0:f7:a8:c8:4d:53:16:37:5e:8f:c3:d0:63:a6:13:
         3e:00:e6:49:f6:46:d0:4f:74:f9:59:69:eb:d7:22:f6:b3:50:
         22:49:28:33:a4:3e:35:51:dc:b3:67:31:75:8c:dd:e4:f0:3f:
         08:fe:83:e5:81:fd:ba:a0:64:3b:29:6a:d8:af:5a:37:b6:2c:
         3c:0d:80:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----