Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1141b03028aeea80534b355b37f5c27e33331f7f.cer
File:                     1141b03028aeea80534b355b37f5c27e33331f7f.cer (raw, json)
Hash identifier:          Ws8RI7jWDKHKcLTWCZdbFjqiRPB4tDP0RaPpHaJlImY=
Subject key identifier:   53:4A:17:2D:F0:D1:98:D7:69:8C:E3:73:66:98:26:96:C2:20:BD:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA0482
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f61f12c2-fe3a-480d-9d2a-8b732e563314/1141b03028aeea80534b355b37f5c27e33331f7f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f61f12c2-fe3a-480d-9d2a-8b732e563314/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Sep 2023 19:40:08 +0000
Certificate not after:    Sat 24 May 2025 06:00:00 +0000
Subordinate resources:    IP: 2801:1e:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16385154 (0xfa0482)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 18 19:40:08 2023 GMT
            Not After : May 24 06:00:00 2025 GMT
        Subject: CN=1141b03028aeea80534b355b37f5c27e33331f7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0b:2c:9f:76:91:95:77:93:be:a4:6e:9e:9d:
                    2f:62:5c:10:84:c4:b6:dd:2b:8e:49:cb:9a:6a:15:
                    b2:33:5e:cb:71:f2:c5:41:f5:54:ff:4b:a3:58:9a:
                    a6:77:51:64:65:72:e8:c0:3e:a9:b6:28:32:d9:1a:
                    1d:c4:03:3c:e0:79:b2:7f:22:89:2b:ea:a5:ec:ec:
                    f5:a0:1c:6f:15:23:c3:d8:fe:75:f1:bd:ad:eb:b8:
                    0d:ba:cb:62:8a:10:42:70:9f:e9:0c:8a:3b:50:c2:
                    db:38:7e:ec:b0:b4:fa:48:f2:62:ae:25:d5:a3:ea:
                    88:3c:0a:63:1e:34:b2:3f:b1:5b:5c:da:2e:a8:35:
                    65:b0:29:7a:42:38:af:ad:2c:cb:12:32:3e:36:06:
                    3e:dd:05:aa:b7:c5:d0:0d:4b:34:57:e6:21:b7:8e:
                    4a:82:76:d1:7b:41:2f:c4:d4:49:a2:b7:78:15:96:
                    0a:da:09:d9:9a:f4:8c:50:dd:7e:b4:5c:a7:56:03:
                    9d:22:c2:b1:5e:90:12:ac:2d:f5:d1:e7:ce:2f:6f:
                    5e:fd:d8:76:aa:83:08:58:0e:ce:a9:bc:65:7b:6b:
                    74:9d:d7:03:dc:30:22:08:3b:85:66:09:46:57:4c:
                    b1:fe:cb:89:da:d9:36:30:0d:53:63:5c:7a:12:cc:
                    be:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:4A:17:2D:F0:D1:98:D7:69:8C:E3:73:66:98:26:96:C2:20:BD:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f61f12c2-fe3a-480d-9d2a-8b732e563314/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f61f12c2-fe3a-480d-9d2a-8b732e563314/1141b03028aeea80534b355b37f5c27e33331f7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:e4:2c:56:52:cb:56:bf:2e:1a:58:7a:da:5a:9d:c0:a2:53:
         e4:45:63:8e:2b:3c:06:0d:55:13:e6:1d:58:c3:fe:cb:27:45:
         fa:08:be:71:5b:b1:42:98:9d:37:1d:a9:85:af:81:b0:2c:0c:
         1f:a9:16:88:14:b6:67:4c:06:1a:94:56:07:cb:01:8b:a4:cb:
         1f:1a:41:a7:bd:c1:66:b1:48:a1:17:87:43:db:93:3e:1e:88:
         e0:17:4f:20:22:7d:69:81:11:94:27:ba:00:0e:fa:b5:32:44:
         af:4f:d9:18:bf:86:6d:72:30:4e:67:6e:4e:11:84:3f:a1:82:
         63:97:d1:a5:aa:b5:8c:79:05:1d:0a:bc:32:52:e8:c5:0d:2c:
         90:a9:74:72:58:9d:86:4b:cb:5a:a2:18:13:7b:f5:3b:4e:da:
         f8:77:c7:d0:98:a7:06:4f:06:dd:90:9e:13:ca:11:17:cd:8c:
         dd:a4:54:e3:d1:99:b2:c6:c5:06:84:6f:c6:5c:8d:3e:14:6e:
         c4:2d:cc:3e:ad:a5:ef:72:d1:1e:65:9f:48:9e:bc:b7:a6:3c:
         52:9b:cf:54:d4:60:76:ca:9c:69:62:13:31:01:7a:26:a3:47:
         06:04:32:93:69:5e:8f:4e:61:2b:30:5b:5f:2b:37:bb:57:4c:
         14:c2:37:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----