Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/edfa984466364b4704187815839d24a681756724.cer
File:                     edfa984466364b4704187815839d24a681756724.cer (raw, json)
Hash identifier:          NCoAj4N7NAq0aZCdefhE1PSYAbbiSz50xudWNzxjglE=
Subject key identifier:   D2:EC:84:6D:C1:F8:47:1D:F5:18:18:78:0A:E0:AF:FD:0C:AD:17:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F53C29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ab985d70-6800-4782-90f8-d63c923cc003/edfa984466364b4704187815839d24a681756724.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ab985d70-6800-4782-90f8-d63c923cc003/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 13:19:14 +0000
Certificate not after:    Thu 26 Dec 2024 17:41:55 +0000
Subordinate resources:    AS: 28040

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16071721 (0xf53c29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 15 13:19:14 2023 GMT
            Not After : Dec 26 17:41:55 2024 GMT
        Subject: CN=edfa984466364b4704187815839d24a681756724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:e2:a0:16:a4:39:06:05:b9:ad:25:c4:e0:f8:
                    a7:bf:f5:3f:7d:9a:aa:e4:ec:89:3a:6a:ff:dc:d6:
                    c5:00:35:1a:21:3d:1c:25:7b:15:34:a7:c7:54:ef:
                    c5:0d:e6:a3:fd:cc:08:e8:f9:88:2c:b8:43:00:45:
                    37:7a:a1:98:a5:ee:95:87:a6:40:6a:3f:ff:3b:3d:
                    86:59:77:b6:72:e7:37:cc:be:1b:17:c3:c4:33:53:
                    19:0b:f1:8b:d5:c8:b5:99:f6:31:88:2d:af:29:5b:
                    7a:98:25:ff:8f:24:4e:31:71:4c:2a:e3:c4:00:6b:
                    58:8a:f6:46:39:bf:df:84:1d:86:e7:e6:35:e5:41:
                    1f:c6:a6:df:f8:90:17:db:a6:93:4e:1d:8c:0e:cd:
                    07:26:4d:e9:e1:ee:dc:0d:36:15:8e:2a:47:e8:0d:
                    8b:eb:e7:2a:8b:15:a6:14:43:9f:f7:b4:18:40:82:
                    87:a9:07:a9:59:9d:b2:65:ac:87:2b:8d:db:ff:39:
                    aa:ea:99:0c:2a:c3:62:bc:d9:6d:a1:f7:9d:03:ef:
                    11:8c:2e:d1:f1:fe:e8:1c:b2:ef:b2:99:42:cc:c2:
                    0c:6a:4b:92:2b:db:cf:33:9e:46:ba:4f:66:41:63:
                    0b:88:8e:40:80:ec:5d:9d:9e:75:3f:93:f9:dc:02:
                    c3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EC:84:6D:C1:F8:47:1D:F5:18:18:78:0A:E0:AF:FD:0C:AD:17:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ab985d70-6800-4782-90f8-d63c923cc003/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ab985d70-6800-4782-90f8-d63c923cc003/edfa984466364b4704187815839d24a681756724.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28040

    Signature Algorithm: sha256WithRSAEncryption
         1a:d7:c3:d8:01:23:ac:a3:5e:a8:07:cd:51:2c:36:12:43:2a:
         50:c4:8f:5d:28:54:a8:7d:3c:fd:f6:ea:cf:d4:2f:8d:b1:b8:
         74:3d:33:65:51:03:64:6f:dd:7e:43:c9:8b:b4:35:6c:c8:27:
         e7:bf:3e:50:f4:52:d0:94:43:12:44:29:13:2f:ca:7c:c9:6c:
         c2:59:c9:4e:5b:38:cb:28:e8:28:83:ee:5a:df:ef:0d:b6:e9:
         d7:79:54:85:6f:e9:5d:a6:ca:10:c0:51:0e:a8:c9:37:0a:f3:
         2b:84:37:48:bc:3a:e1:95:08:55:b9:05:c7:e0:38:db:73:ac:
         98:b1:78:6c:11:0f:4c:d0:e4:04:90:ec:1b:a9:cb:a1:2f:bb:
         4d:f8:01:12:cc:46:ec:ae:86:2f:e9:1a:19:26:4d:b5:cc:8f:
         c4:5c:1b:6e:cb:34:f4:90:82:79:fa:5e:d2:f1:8a:5b:84:42:
         21:4a:14:79:09:81:0b:95:6b:5b:6e:8e:94:f1:bd:4e:22:fa:
         76:c5:fa:e8:e3:b0:f1:2f:83:c0:5b:ca:2d:e7:ae:ba:42:d8:
         81:21:ca:52:7e:55:e3:d2:f1:f0:49:2e:9d:19:c3:ad:fe:67:
         c2:10:4d:41:dc:cc:a5:20:c6:f9:b5:26:51:66:90:48:c4:53:
         7a:bd:ab:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----