Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e346b9efa64e019c55730d116dd29aa97da1530.cer
File:                     8e346b9efa64e019c55730d116dd29aa97da1530.cer (raw, json)
Hash identifier:          34l356At7tBk3ccFDl5v1SKTxJj2AWIwIwxHAHaPTX8=
Subject key identifier:   2D:F0:31:7C:07:29:A7:78:A0:87:9F:B9:41:2F:08:01:2A:B0:FE:FF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D40CBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/8e346b9efa64e019c55730d116dd29aa97da1530.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Oct 2022 13:27:51 +0000
Certificate not after:    Thu 07 Mar 2024 23:07:48 +0000
Subordinate resources:    AS: 263196
                          IP: 143.202.136.0/22
                          IP: 186.148.80.0/21
                          IP: 2803:4b00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13896891 (0xd40cbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 13:27:51 2022 GMT
            Not After : Mar  7 23:07:48 2024 GMT
        Subject: CN=8e346b9efa64e019c55730d116dd29aa97da1530
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:4e:40:fe:5d:ca:35:39:5b:3f:bd:59:38:37:
                    5c:af:c4:e4:68:54:e8:e5:ba:ad:87:d7:83:10:9b:
                    a7:7f:7b:f7:bc:e3:84:b6:90:94:21:3d:65:87:da:
                    7c:9a:cb:99:cf:5b:9f:13:9e:03:d4:4f:01:c2:7b:
                    31:b1:6f:3e:13:b7:78:81:a1:dd:4c:f1:e8:85:42:
                    ed:95:eb:18:31:32:05:12:01:c7:72:a0:5d:e8:b0:
                    d5:eb:56:8b:25:84:72:85:23:50:7b:0f:5a:3f:93:
                    7e:66:8f:19:b2:ba:18:f8:3b:a0:a0:97:f0:fd:2a:
                    5b:f7:06:dc:00:55:c0:1a:63:72:aa:55:ee:09:37:
                    90:7f:b3:b7:21:44:cc:bd:28:26:bd:55:13:b8:cb:
                    70:41:4e:1b:b6:42:0a:5e:f7:00:95:c0:ec:7a:bb:
                    b0:ce:2b:19:54:9d:3c:3e:d7:30:7e:27:d0:ea:13:
                    43:ea:ff:5f:5d:e0:2c:56:ce:91:f3:dd:51:11:fc:
                    6f:f3:43:3a:cf:0d:e4:12:c8:a0:cc:8d:81:4a:9f:
                    13:d7:bf:0f:cb:36:e7:aa:a9:a8:62:9d:20:68:50:
                    e3:77:7e:26:97:99:16:d7:52:e1:03:7f:69:7a:3b:
                    10:f6:28:a6:8a:ee:c9:e7:45:31:b8:4b:f5:f6:8c:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:F0:31:7C:07:29:A7:78:A0:87:9F:B9:41:2F:08:01:2A:B0:FE:FF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8b25cd5b-863f-4256-9888-0424ce6ce73b/8e346b9efa64e019c55730d116dd29aa97da1530.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.136.0/22
                  186.148.80.0/21
                IPv6:
                  2803:4b00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263196

    Signature Algorithm: sha256WithRSAEncryption
         a9:92:fc:1c:a7:cd:b0:e8:bf:61:0e:08:87:11:01:2b:5a:33:
         f2:7c:df:de:7a:7f:8f:96:df:cf:09:4b:be:8b:de:b7:13:63:
         e6:84:a5:14:40:49:1d:7c:ff:cd:28:c8:1a:9a:b5:fa:51:ea:
         7e:47:99:a0:6e:d5:2a:2d:c9:37:30:ad:2b:86:7e:88:73:d9:
         cb:cc:34:ca:35:fd:4c:b8:80:87:26:21:ef:95:d9:34:a8:25:
         a5:ea:93:0f:fd:be:ef:31:f1:e5:b1:e4:79:95:db:13:c1:55:
         41:bb:6d:f5:81:be:52:38:11:1b:92:34:3c:60:10:e5:b1:25:
         99:5e:03:a6:6c:41:16:d8:b5:43:da:20:6e:39:d9:18:09:20:
         fb:51:34:97:89:6d:cd:98:99:ab:db:33:3e:90:ab:47:d7:6b:
         fa:28:1a:ff:05:94:43:3c:71:54:80:cd:f0:f7:d0:09:e5:45:
         ab:7c:29:18:0f:3a:b6:57:03:17:c3:cc:72:41:b7:5e:66:9b:
         a0:40:da:4e:9b:0e:1e:ba:88:9a:de:81:88:82:4b:08:2c:4d:
         11:29:c5:c9:98:9e:c3:2e:c9:ed:2e:20:e2:35:97:5e:44:cc:
         01:9d:7d:3c:f3:89:cd:f1:e9:60:69:ec:a8:f5:a3:d6:f8:7a:
         f7:0b:f1:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----