Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e407b834ee252024cfbf988069fe65b90d6c876.cer
File:                     8e407b834ee252024cfbf988069fe65b90d6c876.cer (raw, json)
Hash identifier:          V40OzsayL7VLlJ3CRSmv0DpeYBXzbbjUOMMgElgzf8M=
Subject key identifier:   C2:80:B4:9A:DA:87:FA:85:9A:D2:B9:45:73:52:38:31:27:79:AB:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100ED0A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/154d00f0-5f9a-4753-8ab8-8ab4b1accc32/8e407b834ee252024cfbf988069fe65b90d6c876.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/154d00f0-5f9a-4753-8ab8-8ab4b1accc32/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 Nov 2023 15:11:59 +0000
Certificate not after:    Tue 09 Sep 2025 16:30:49 +0000
Subordinate resources:    AS: 273125
                          IP: 2803:4450::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16837898 (0x100ed0a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 15:11:59 2023 GMT
            Not After : Sep  9 16:30:49 2025 GMT
        Subject: CN=8e407b834ee252024cfbf988069fe65b90d6c876
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:d2:ce:92:5e:3e:9d:45:ea:b5:d1:81:6f:18:
                    67:ab:c4:2a:27:2a:f1:1b:91:b6:b1:82:fa:82:39:
                    3e:90:60:de:9c:54:93:08:36:32:12:99:45:99:46:
                    72:1d:2e:66:22:b7:d6:47:05:ee:3b:65:d3:c2:27:
                    7a:34:74:0d:ef:01:73:f5:bf:e4:be:2b:6e:a1:df:
                    31:79:3e:13:18:b5:c1:1e:03:c1:46:b2:7f:dd:1d:
                    b7:80:9b:e8:90:6c:c9:b2:4f:dd:7b:cd:26:7f:97:
                    ff:aa:f6:93:58:19:e6:0b:fe:e2:c2:a8:44:c4:f7:
                    8c:6c:17:08:93:d4:2d:a0:2f:f3:5e:ec:ba:22:1a:
                    1a:f1:1a:c7:39:e4:3c:dd:1b:88:a3:6e:dc:e3:fb:
                    e5:c6:bf:ba:53:87:c3:3d:9b:33:48:c6:cb:52:8f:
                    ff:dd:56:f4:95:ca:cb:16:b7:b8:34:c2:69:b8:96:
                    14:5c:e3:56:2b:18:2e:0a:b2:b3:46:55:11:41:a2:
                    34:d8:80:ff:fb:c9:b8:77:7a:d4:37:d9:cf:91:a0:
                    45:59:e4:6e:77:e2:ff:dc:1f:85:2f:e9:3d:e6:02:
                    2a:b5:8f:23:17:6b:44:64:5d:97:a4:7c:24:d6:d3:
                    95:69:6e:98:42:4d:ff:99:b4:6e:89:cf:b8:c3:66:
                    a7:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:80:B4:9A:DA:87:FA:85:9A:D2:B9:45:73:52:38:31:27:79:AB:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/154d00f0-5f9a-4753-8ab8-8ab4b1accc32/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/154d00f0-5f9a-4753-8ab8-8ab4b1accc32/8e407b834ee252024cfbf988069fe65b90d6c876.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4450::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273125

    Signature Algorithm: sha256WithRSAEncryption
         53:2b:73:21:a2:92:1f:fe:5f:78:28:02:5d:88:9d:00:c5:36:
         b1:9d:a9:77:02:c3:61:1c:bb:c7:05:da:66:64:81:b9:71:10:
         a5:be:7a:40:30:6c:a1:4d:ad:ce:97:bc:79:2b:c2:90:3c:97:
         3a:8c:dd:5f:cd:d3:18:d8:f6:4e:5d:ff:6b:76:93:3e:7e:16:
         9e:73:0f:cb:c4:7c:2c:c8:14:31:29:6f:a5:35:f1:2e:5e:fc:
         21:a7:1d:cb:46:87:2e:5f:30:28:e6:b4:c7:e1:94:7b:7b:8f:
         58:e9:49:0f:fe:e5:be:b9:fc:3e:48:e6:10:9c:c2:fe:bb:69:
         05:18:a6:2b:31:67:ee:99:61:2f:72:4e:c9:40:8e:05:d1:fc:
         79:12:35:65:80:13:35:f3:01:ff:94:f5:d2:9d:44:1b:48:50:
         12:e5:cd:bb:63:e9:2f:61:e9:fc:84:f0:f3:a9:f6:cc:4d:a2:
         90:6e:4f:54:0c:21:1e:e1:49:9c:e4:13:88:5f:59:6d:f3:f3:
         1b:75:2b:4d:ea:44:37:20:a4:78:b2:0b:92:7e:c4:4d:d9:c5:
         12:5f:82:fa:f7:29:2c:0b:20:de:7e:8e:65:01:4e:63:4d:53:
         e4:3f:f7:01:2e:d6:41:f9:6d:1f:a6:29:dc:b2:c9:2e:34:53:
         b1:9b:3a:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----