Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e9cf41123ed6894a352817e4249195f52cfe85e.cer
File:                     8e9cf41123ed6894a352817e4249195f52cfe85e.cer (raw, json)
Hash identifier:          Bim6YWZ6ej65+DnXH9+JYFbNSzXBBl5ppXAfLJZuhbw=
Subject key identifier:   B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBD8E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Sep 2021 15:22:20 +0000
Certificate not after:    Sun 11 Feb 2024 14:48:47 +0000
Subordinate resources:    AS: 266769
                          IP: 45.234.32.0/22
                          IP: 2803:2f20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14407907 (0xdbd8e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 15:22:20 2021 GMT
            Not After : Feb 11 14:48:47 2024 GMT
        Subject: CN=8e9cf41123ed6894a352817e4249195f52cfe85e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:43:7f:a9:35:65:2b:1c:29:f0:82:ae:6e:dd:
                    1c:5d:de:08:0c:ca:71:36:4e:07:c4:d8:99:56:f0:
                    84:69:f9:8f:13:85:cb:cb:63:00:7f:3b:9d:eb:f2:
                    7e:6f:2b:ad:15:af:d7:ad:e8:0b:b8:cc:80:a1:d9:
                    c1:e5:30:46:73:2b:a3:c8:21:82:85:d5:c7:a7:5d:
                    29:7a:4e:e3:d2:ba:ed:25:b7:42:25:20:a2:56:f3:
                    60:a8:14:40:48:29:7d:fe:53:e1:48:ff:62:1e:2c:
                    a9:ec:f5:0b:1e:8f:36:1c:83:2c:76:83:38:d8:8c:
                    6d:37:4d:ad:ec:6a:2c:6f:51:a7:c4:b7:66:a9:ec:
                    55:09:d4:13:65:bf:df:4b:5f:8f:66:a0:61:11:8b:
                    b0:46:6a:8f:40:2e:e3:49:8a:bf:e8:f2:14:a8:59:
                    23:b4:d9:1d:1f:27:74:fa:3d:8f:ac:55:ec:6d:6e:
                    be:f4:29:8c:ec:0e:16:3c:50:b2:0c:77:71:e9:df:
                    ae:e2:6b:96:4f:15:86:93:bb:92:b7:8e:21:b8:1f:
                    d2:29:4c:88:32:40:64:24:d8:e0:7f:1f:16:06:fd:
                    87:74:45:ee:b6:3e:ac:d1:f4:4d:e2:d6:b3:54:c2:
                    4d:86:a1:c9:60:42:9a:7a:21:5f:c3:c1:34:71:ea:
                    01:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:EB:E3:06:23:F7:F0:5D:51:4C:29:EA:72:46:CC:D0:F8:30:E7:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/21fbe07b-352d-4dad-a763-e458524c159b/8e9cf41123ed6894a352817e4249195f52cfe85e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.32.0/22
                IPv6:
                  2803:2f20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266769

    Signature Algorithm: sha256WithRSAEncryption
         97:83:d3:ff:f2:42:4e:28:77:0d:78:06:85:47:c9:b7:58:2f:
         02:ef:09:69:ad:96:4e:ff:87:44:a3:49:1a:07:49:e6:75:a9:
         ba:7d:3d:5f:5c:43:82:3a:18:d4:f6:16:7e:3b:43:a1:61:2e:
         9e:80:88:92:86:c7:52:c3:fe:12:6d:41:0d:dd:5e:6d:2a:01:
         a5:33:43:b0:e5:19:96:49:3d:a4:f8:29:88:7d:f2:a8:5e:61:
         ef:60:a1:b6:ca:d3:6d:33:8c:46:2d:90:4d:88:e1:5f:13:dc:
         ed:ee:95:7a:e5:4c:29:15:db:33:49:52:dd:f7:fb:f6:71:f3:
         51:41:84:31:16:54:6d:5b:49:4a:b1:64:65:1b:c6:3b:73:c2:
         36:41:0c:e2:ec:ce:8f:b4:27:50:56:99:23:96:0f:5b:87:60:
         70:90:72:d7:50:10:ff:8b:2c:32:b9:11:ee:8a:78:bf:17:fa:
         4b:32:6b:8a:b5:cf:ce:c3:2b:26:35:dc:c3:b7:cf:51:25:5f:
         c9:fb:33:25:0f:f3:24:62:91:37:34:7e:4c:32:e4:6e:c7:75:
         f7:d0:59:a6:3a:96:d4:fc:7e:2d:36:d9:07:79:2c:40:8c:89:
         8b:a9:95:46:43:93:d4:11:f9:4b:76:d7:fb:0d:50:ea:3d:cf:
         4b:f9:bb:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----