Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e8394f7e3b640675f015258ddb717b2381751383.cer
File:                     e8394f7e3b640675f015258ddb717b2381751383.cer (raw, json)
Hash identifier:          KZiPdStkhvODVXcgzua8zxfPQcojIiwCSwSNUfKwGno=
Subject key identifier:   3D:A2:CC:24:AE:4D:8B:1A:1D:D9:FA:04:A8:A2:CE:07:C2:F5:63:15
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F828C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ca48fae5-eb05-4873-a39f-83c1abe5286d/e8394f7e3b640675f015258ddb717b2381751383.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ca48fae5-eb05-4873-a39f-83c1abe5286d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 18:39:27 +0000
Certificate not after:    Sat 14 Sep 2024 23:16:59 +0000
Subordinate resources:    AS: 265873
                          IP: 45.226.64.0/22
                          IP: 2803:ae20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16263368 (0xf828c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  4 18:39:27 2023 GMT
            Not After : Sep 14 23:16:59 2024 GMT
        Subject: CN=e8394f7e3b640675f015258ddb717b2381751383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f5:7a:a0:5f:12:bc:60:e9:b1:6c:65:ed:4f:
                    d6:70:f2:83:7a:89:0a:f6:9c:10:62:d6:51:a2:e2:
                    b9:b0:42:97:e8:ee:a6:61:53:75:1c:fd:2a:44:12:
                    4b:02:76:e8:e8:71:6b:96:3d:bc:5e:74:84:fa:7d:
                    35:0f:9c:6a:38:40:a0:9b:67:2e:5a:8b:a3:81:ce:
                    67:cb:43:49:c3:7d:0f:df:e6:c4:c2:a4:09:4b:b1:
                    0f:d4:35:a0:8b:c0:1a:98:84:06:3e:75:37:0b:ad:
                    76:31:bf:a6:0d:e1:45:c0:3f:0e:48:c5:05:05:95:
                    34:ad:47:58:00:ea:65:46:e9:8b:94:ca:56:24:5b:
                    0c:16:15:94:3f:02:d3:aa:e0:08:57:50:35:94:5f:
                    5b:c6:41:14:a9:80:6d:2b:76:b2:c1:4d:6d:d8:e5:
                    68:c3:bd:70:94:ac:9a:59:34:ff:d0:90:7c:a0:02:
                    65:c9:73:3b:61:08:d2:93:56:15:ec:17:5b:e8:a9:
                    1b:a7:dc:51:c7:a4:3b:ec:e6:08:02:54:de:3a:91:
                    5d:f0:37:e8:c2:6c:51:e8:94:2e:0b:0f:17:40:86:
                    aa:df:e8:83:76:d8:04:ac:26:4c:38:e9:64:25:84:
                    53:da:06:05:02:76:fd:46:77:32:88:bf:a7:90:89:
                    69:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A2:CC:24:AE:4D:8B:1A:1D:D9:FA:04:A8:A2:CE:07:C2:F5:63:15
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ca48fae5-eb05-4873-a39f-83c1abe5286d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ca48fae5-eb05-4873-a39f-83c1abe5286d/e8394f7e3b640675f015258ddb717b2381751383.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.226.64.0/22
                IPv6:
                  2803:ae20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265873

    Signature Algorithm: sha256WithRSAEncryption
         17:48:0b:03:8e:37:fd:51:33:26:a0:80:b5:7b:d3:59:1c:4c:
         4a:99:1f:50:0d:e6:88:ea:23:22:20:26:4f:ac:9c:f7:5e:96:
         55:ec:ff:a9:50:7d:f2:5c:19:db:aa:fd:ce:50:39:0e:ef:7c:
         45:9d:9e:19:1d:78:39:a8:19:90:a7:f9:47:ff:58:31:4e:7e:
         bb:52:29:15:1b:7f:31:33:26:b7:60:08:ba:23:32:08:3d:83:
         3b:09:e6:a6:c2:bc:a2:60:61:81:7d:5d:15:d8:c2:f4:21:2e:
         af:14:38:a3:af:5c:db:ba:df:cd:ab:03:37:7d:f7:a7:f4:4e:
         03:bf:ca:cf:48:3f:9a:d6:03:3f:41:87:70:88:d5:38:23:ba:
         fd:02:8c:93:12:d6:fd:65:19:74:80:ab:62:70:69:18:ea:6a:
         af:c7:92:43:2f:04:a3:19:2c:b8:0f:c5:35:d3:32:1b:65:c3:
         2c:a6:fd:56:89:59:81:dd:08:53:ba:ea:0d:a1:44:c9:7a:61:
         c6:75:cb:e1:16:50:fa:34:aa:00:14:6b:ae:32:77:cf:00:a7:
         47:e3:6d:7b:67:51:27:d1:fd:6e:e4:85:9b:4b:ea:81:46:5c:
         e2:d7:af:01:79:bd:e8:b7:c2:a6:4a:42:e3:83:03:aa:71:3f:
         10:42:c7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----