Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94850393e31377c5cec073c5591dd1c895115d6a.cer
File:                     94850393e31377c5cec073c5591dd1c895115d6a.cer (raw, json)
Hash identifier:          Tc88Zq4qr/96usMvBEp7V9bbJOjh7JFy7+OPnfQyKzk=
Subject key identifier:   8A:8E:99:26:F4:3B:CA:59:E0:A2:89:95:90:05:DE:A0:1D:55:3B:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBCB69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4ba6b966-ef0e-4ecc-baad-31c9b5304664/94850393e31377c5cec073c5591dd1c895115d6a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4ba6b966-ef0e-4ecc-baad-31c9b5304664/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 15:06:07 +0000
Certificate not after:    Sat 24 May 2025 20:09:30 +0000
Subordinate resources:    AS: 28071

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16501609 (0xfbcb69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  3 15:06:07 2023 GMT
            Not After : May 24 20:09:30 2025 GMT
        Subject: CN=94850393e31377c5cec073c5591dd1c895115d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:84:74:0e:9c:59:cf:72:8c:51:81:74:02:
                    b8:54:39:25:e5:85:70:87:41:c2:76:50:ed:81:57:
                    11:32:53:4b:76:75:7e:6f:6a:5e:4a:13:db:02:1c:
                    dc:8d:fb:97:79:da:17:df:dc:af:06:af:18:67:dc:
                    cf:0b:1a:52:8e:a5:f9:30:85:51:45:3e:6b:b0:57:
                    d9:b5:10:7b:98:18:96:98:ba:03:b1:7d:ee:67:26:
                    71:82:83:b1:e8:87:14:18:4b:d4:51:bb:d8:70:ed:
                    9e:0c:bd:d3:69:ea:0b:04:ad:e6:24:a6:b6:7d:54:
                    3f:b8:62:97:7c:ce:f1:af:ca:21:f3:d1:1b:7d:72:
                    46:b5:d1:99:07:27:01:66:c5:23:3f:50:b4:33:f1:
                    b7:a7:be:b1:ce:9e:37:b3:13:da:5f:ac:6a:77:b5:
                    9c:9b:34:0c:a9:cb:5c:50:b9:91:c2:69:73:cb:d5:
                    df:e4:da:03:98:89:9a:22:dd:8a:9b:07:3f:7c:1c:
                    ea:4d:d9:a7:86:32:e9:44:ef:e9:40:82:24:c7:a2:
                    cc:40:36:3e:a6:d3:00:3d:1e:04:65:05:4a:5e:14:
                    97:e8:37:10:64:ac:32:b4:a7:e7:e0:1a:01:a3:75:
                    90:57:61:5f:8e:c0:b3:3b:29:62:e8:4e:90:19:cd:
                    53:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8E:99:26:F4:3B:CA:59:E0:A2:89:95:90:05:DE:A0:1D:55:3B:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4ba6b966-ef0e-4ecc-baad-31c9b5304664/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4ba6b966-ef0e-4ecc-baad-31c9b5304664/94850393e31377c5cec073c5591dd1c895115d6a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28071

    Signature Algorithm: sha256WithRSAEncryption
         a7:3c:b8:55:dd:d9:4d:21:8b:77:44:03:b3:85:b9:6f:63:25:
         0b:87:57:19:21:68:14:81:7f:16:6c:4f:2d:98:b4:1f:8f:e4:
         66:14:c6:7e:4e:e6:6f:2f:7e:4b:a9:c4:c4:8c:be:68:f8:f6:
         83:4c:4c:e6:e5:56:fd:5f:75:20:5b:75:88:d3:f8:d5:87:ed:
         b5:57:78:60:5a:e5:f1:e2:13:8e:9f:38:26:c6:66:b2:36:61:
         af:86:bb:6e:f2:b9:d8:29:ff:d5:17:e5:06:94:31:19:dd:a9:
         8d:bf:a5:50:cb:11:81:94:80:7a:02:4d:8f:ac:ef:26:3f:81:
         59:70:92:59:07:78:2a:52:73:53:d5:6c:03:bf:86:f9:3d:f1:
         78:84:b2:6d:7a:0e:8a:7b:1e:4c:25:97:92:99:69:6c:a1:9b:
         fa:fb:77:e1:9c:ba:fa:d3:f6:88:5b:11:8c:bb:ca:d8:9c:b6:
         55:cb:0f:a5:0e:ee:d0:36:1b:0e:45:9e:2b:e2:3a:c2:b0:b2:
         56:fa:63:8f:a7:e0:62:4d:4a:59:0c:61:ec:54:42:ae:9d:4d:
         9e:32:85:1a:9f:db:ae:0a:99:8a:c1:67:a5:7f:8a:a0:65:c4:
         96:56:6c:51:2f:7d:70:9a:b0:de:d5:a1:6f:37:d3:6e:d2:e4:
         17:b7:d3:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----