Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f3873d2185c02d28d6e454da708150f962e9305.cer
File:                     8f3873d2185c02d28d6e454da708150f962e9305.cer (raw, json)
Hash identifier:          U8v+5JT8rzCCLum7PqsAFmgcRD2Kaji6e7B83GFtw1A=
Subject key identifier:   18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF941A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 19:12:07 +0000
Certificate not after:    Mon 11 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 28067
                          IP: 64.28.128.0/20
                          IP: 2801:0:40::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15701018 (0xef941a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 19:12:07 2023 GMT
            Not After : Nov 11 14:00:00 2024 GMT
        Subject: CN=8f3873d2185c02d28d6e454da708150f962e9305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ca:5d:84:65:ce:0e:0f:15:ac:08:c4:76:d6:
                    f5:3f:18:6c:bc:e5:8a:72:d2:e2:39:db:a8:19:55:
                    6b:3b:8c:b1:54:d9:7a:c3:77:41:cf:ac:73:6c:b8:
                    21:09:a8:03:c4:8b:7f:a1:25:59:f9:25:08:ea:5a:
                    17:4c:36:f7:d3:74:6d:5a:14:58:10:b3:f3:d7:94:
                    fc:68:d8:33:2d:1e:e4:fb:b7:65:bf:18:e5:92:a1:
                    a4:86:fe:eb:e3:e9:15:70:c4:82:eb:4a:b5:22:81:
                    0f:bc:03:bd:29:4e:0d:56:5b:9b:79:4e:7a:f9:48:
                    9a:b0:87:ee:4e:74:29:9a:e7:3b:dd:5c:99:a3:b6:
                    66:ef:37:24:49:72:11:e2:c6:67:c4:68:a7:25:cb:
                    3e:8e:c0:93:86:bf:21:e6:66:54:d0:ce:e5:22:43:
                    1a:ec:9f:06:e3:0b:b5:f2:75:31:60:4f:b4:c7:67:
                    07:15:58:66:fe:bd:c5:d0:b5:db:dd:61:d1:33:aa:
                    3b:25:be:fb:0c:f9:43:dd:42:fe:44:59:49:a6:7e:
                    af:35:dc:fd:c0:0a:95:77:90:0d:05:9f:9c:fa:9f:
                    dd:5e:ba:7d:eb:81:be:c9:8d:27:0e:e2:14:ea:37:
                    ca:fa:c8:ea:2a:c2:7a:c4:65:42:1b:a2:d4:e7:ee:
                    58:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:97:2E:14:A7:42:04:20:E0:93:CE:80:6A:7F:F4:69:E9:3E:6B:CD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fabccfe9-751d-4419-9a65-e36f96c74a21/8f3873d2185c02d28d6e454da708150f962e9305.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.28.128.0/20
                IPv6:
                  2801:0:40::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28067

    Signature Algorithm: sha256WithRSAEncryption
         71:c8:f6:6e:00:43:cc:dd:a1:d6:c0:9d:91:8d:15:f8:ad:fe:
         d3:d5:e2:c1:69:30:d4:d1:0f:aa:6b:d3:e6:d1:f8:04:a7:6c:
         3b:21:9e:51:5a:eb:f8:95:f1:69:64:af:31:01:99:ec:f7:07:
         4c:b4:f7:d6:43:09:9a:6b:f0:9a:ff:44:be:cd:7b:4f:af:1d:
         eb:39:94:b8:15:67:6d:9b:c8:84:06:5a:5d:ac:fe:44:4f:7f:
         28:30:d4:b0:00:b9:ba:f5:ce:7b:07:e8:a8:df:99:24:5b:dd:
         53:0a:42:2b:e4:8b:cb:70:fa:7a:a2:f6:71:4b:a5:21:a3:8c:
         ae:e3:86:6f:e0:5d:56:02:ba:9f:51:df:e0:f0:59:c0:89:82:
         77:58:fe:b2:36:56:86:8a:e7:bc:60:e9:ee:09:7f:7d:57:ea:
         85:ff:53:5e:79:da:de:ea:f1:72:16:10:d1:ac:72:a5:ba:83:
         61:3e:d9:01:7b:a8:42:3d:01:83:03:b5:88:ec:be:5b:28:ae:
         52:cf:49:a9:4d:64:a3:76:14:f5:81:9b:5d:2c:b6:b0:62:c8:
         ef:e7:16:58:e7:fb:d9:18:d9:31:62:13:03:9c:47:36:d8:a2:
         bc:8d:2b:1e:49:2f:20:8a:f8:4a:a0:e6:b3:e2:c3:b1:e8:6b:
         10:87:24:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----