Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8f4024f5937927f26c289ca5b920936a0f523fb5.cer
File:                     8f4024f5937927f26c289ca5b920936a0f523fb5.cer (raw, json)
Hash identifier:          GF6h5JaSZXax4SahmdWc6JVF95SvAdv2Uq+Kh4zVKKw=
Subject key identifier:   E1:7E:31:7B:CA:B5:D1:D4:17:77:D7:EE:A6:8D:EF:9D:99:2A:80:21
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106846D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72c78aa8-7917-4b64-a235-8e4af9e46aad/8f4024f5937927f26c289ca5b920936a0f523fb5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72c78aa8-7917-4b64-a235-8e4af9e46aad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Jan 2024 15:59:03 +0000
Certificate not after:    Fri 29 Aug 2025 18:48:26 +0000
Subordinate resources:    IP: 143.208.164.0/22
                          IP: 2803:1140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17204333 (0x106846d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 10 15:59:03 2024 GMT
            Not After : Aug 29 18:48:26 2025 GMT
        Subject: CN=8f4024f5937927f26c289ca5b920936a0f523fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:a3:52:e8:0c:b6:cc:40:90:49:06:e8:a7:7c:
                    a0:66:b3:ce:29:d3:16:73:06:3e:dd:1d:80:85:c4:
                    2d:14:7b:f7:16:62:95:93:ef:0c:a2:b1:b1:e1:05:
                    a6:12:d0:64:6a:36:2f:d1:96:66:c2:0c:9f:c5:42:
                    62:ca:d6:a0:eb:b0:12:ad:a3:6c:5b:8c:89:dd:a4:
                    b1:02:71:60:a7:bb:71:37:d2:8b:3d:a0:f6:33:a5:
                    11:cb:60:ea:89:1e:bc:16:f3:3d:73:43:21:08:c2:
                    9f:e4:e1:92:9c:43:b1:57:db:ba:25:01:9e:2e:0d:
                    f3:46:c0:72:af:d5:aa:a5:d2:58:d5:74:a8:f9:53:
                    c4:83:76:45:f0:5a:e4:cc:c5:7c:40:7e:4d:d1:31:
                    bc:67:d0:4a:51:77:0c:4a:ba:d8:69:1b:cb:88:6d:
                    ee:d6:12:cf:31:23:4b:2a:a4:57:e2:07:d4:c1:14:
                    a3:48:4e:7f:49:64:e7:c8:e6:fc:f2:2a:8b:72:e0:
                    64:02:63:5b:bc:97:be:43:11:16:69:02:93:21:e3:
                    c1:cd:ef:f9:e3:14:5c:8d:42:6a:f1:f9:64:54:f2:
                    5c:0c:b3:07:50:12:05:12:27:1d:33:22:c1:e3:cf:
                    ac:7a:74:b0:c0:e6:56:74:34:f0:c8:d1:51:63:b7:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:7E:31:7B:CA:B5:D1:D4:17:77:D7:EE:A6:8D:EF:9D:99:2A:80:21
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72c78aa8-7917-4b64-a235-8e4af9e46aad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72c78aa8-7917-4b64-a235-8e4af9e46aad/8f4024f5937927f26c289ca5b920936a0f523fb5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.208.164.0/22
                IPv6:
                  2803:1140::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:b6:1a:a5:16:58:e8:9c:08:6c:b2:04:48:80:e6:6f:aa:35:
         39:94:1a:9f:e3:26:8b:ab:e3:85:59:98:bd:da:d6:6a:7c:28:
         bd:67:78:eb:52:fd:2a:86:95:83:87:5d:f2:fd:09:2b:df:73:
         10:e5:f4:5a:b2:d7:1d:9b:16:fe:9c:f7:0b:10:29:d9:c0:42:
         75:c5:25:d6:a0:2c:73:63:cf:38:b7:bc:0a:93:51:a3:88:23:
         f2:ed:8e:8a:47:e3:e8:7a:28:40:b5:ec:fa:fc:33:8d:17:0f:
         fa:3b:58:78:b1:a0:44:b6:d3:8c:c1:19:18:52:6e:46:be:13:
         b1:69:e5:05:c4:0c:43:7d:24:00:63:90:79:c2:f9:85:a9:6f:
         cc:dc:19:4d:4a:11:e8:2e:2b:0c:d7:17:b1:b0:96:b3:56:dd:
         bb:f6:15:1b:d0:18:ee:51:88:69:be:a9:18:f3:2d:72:fe:ac:
         ec:3f:30:f2:79:03:c4:97:ad:00:04:85:a9:95:5f:bd:21:bb:
         54:0f:11:d6:8f:ec:c6:06:18:c7:ab:d6:a4:ab:9c:69:d3:32:
         2a:38:e3:91:2b:09:57:60:e4:07:f2:82:f0:ea:79:b5:60:74:
         16:7e:bb:30:02:38:6a:75:35:27:84:d0:28:f6:4a:24:14:53:
         57:ae:89:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----