Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0f9f05e054c41f789a179022e017a932708e9782.cer
File:                     0f9f05e054c41f789a179022e017a932708e9782.cer (raw, json)
Hash identifier:          VXdK5QAOv3tsr5T+I34GqJbFUupuUvEkgrIjqhjxC0U=
Subject key identifier:   4C:3A:FB:08:E4:E4:EF:FA:24:C1:28:9D:28:28:88:9E:CE:06:FA:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01070239
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/08606283-7863-4e3d-a2df-caf13224e9d3/0f9f05e054c41f789a179022e017a932708e9782.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/08606283-7863-4e3d-a2df-caf13224e9d3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 Jan 2024 13:26:14 +0000
Certificate not after:    Sat 15 Nov 2025 16:15:42 +0000
Subordinate resources:    IP: 2801:1b:6800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17236537 (0x1070239)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 17 13:26:14 2024 GMT
            Not After : Nov 15 16:15:42 2025 GMT
        Subject: CN=0f9f05e054c41f789a179022e017a932708e9782
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:3e:93:9e:c6:ab:ef:b8:00:dd:8f:45:e9:ef:
                    db:77:2d:b0:3e:35:d8:1f:94:5c:70:42:f2:52:23:
                    2c:f6:e5:3b:cc:cd:73:f9:da:d4:2f:a4:db:3d:90:
                    b2:07:30:d2:00:01:cc:c8:ee:77:0b:0a:00:18:93:
                    61:64:5c:3b:58:bc:3b:42:7d:7e:99:9d:4a:8c:f9:
                    43:18:af:e7:41:bf:24:94:65:f0:32:52:77:f7:56:
                    a9:51:fa:47:08:1f:1f:f8:9c:45:db:66:2a:49:93:
                    10:4a:2d:4b:f9:5f:5d:4c:49:6b:cb:6e:4e:3b:9b:
                    d9:cd:fc:27:ee:f2:e2:4c:19:db:6e:b2:3f:ef:f6:
                    83:a5:8b:b9:81:90:01:98:b3:ff:c5:ca:d9:39:12:
                    b1:c1:7f:4d:15:ea:14:02:86:27:bc:cd:bd:6b:5b:
                    4b:3e:88:6a:ed:63:04:ff:96:a4:02:66:e2:bc:16:
                    c9:fb:fc:06:7d:65:8b:ce:68:fa:61:08:14:fe:e0:
                    54:8c:15:b7:26:dc:b3:a3:b4:c0:97:78:9e:93:ae:
                    d6:34:3c:bb:e7:fe:ac:81:43:f3:02:86:f6:1e:34:
                    43:2f:6f:d3:11:68:c8:ee:38:3e:c3:d0:83:9c:d1:
                    28:c6:8d:73:54:cd:a8:fb:3a:3d:5e:d6:1a:4c:8c:
                    32:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:3A:FB:08:E4:E4:EF:FA:24:C1:28:9D:28:28:88:9E:CE:06:FA:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/08606283-7863-4e3d-a2df-caf13224e9d3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/08606283-7863-4e3d-a2df-caf13224e9d3/0f9f05e054c41f789a179022e017a932708e9782.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:fa:bb:70:b0:24:cb:29:36:3d:d0:00:b4:19:d4:b7:f9:e6:
         b5:ba:b9:55:88:18:f5:cd:f3:0d:82:5b:84:08:15:3e:7a:80:
         ff:72:65:25:03:e3:b2:d5:7c:a5:09:4f:0b:03:d8:7a:34:72:
         ff:f5:f6:cd:37:f6:c5:e2:ec:c6:60:7a:92:96:c9:54:b9:a6:
         86:2f:88:70:33:f3:2c:59:db:5f:0f:17:a2:13:5a:8d:79:a1:
         3c:bf:34:67:72:f9:c4:64:dc:ea:35:2b:f3:8b:9b:a1:fa:b2:
         e2:db:81:87:21:cf:ba:37:56:12:59:9b:74:8d:06:8a:3f:20:
         a9:ed:ef:51:43:71:25:98:81:4f:cc:3f:b2:e1:26:fc:09:4f:
         c0:d1:f3:98:55:ce:91:25:3b:47:3e:ca:80:7c:21:5a:a9:5f:
         20:aa:9a:ad:d3:37:7c:1c:34:43:00:8c:80:87:1f:04:f6:37:
         d7:53:80:ba:f3:30:43:6a:a7:37:2b:6d:e6:fe:52:11:70:85:
         0a:e1:28:9b:0a:0a:13:32:32:22:78:c8:99:ab:e7:f7:cf:85:
         6d:46:52:4b:d9:9b:9a:93:bd:14:b7:7b:84:0e:24:84:f3:ab:
         a4:c8:47:fe:8d:8b:ed:03:75:43:41:d0:75:f8:78:a2:12:29:
         00:25:06:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----