Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1268aa0a2ffab6dc153460bfdd57c53b5b2264a5.cer
File:                     1268aa0a2ffab6dc153460bfdd57c53b5b2264a5.cer (raw, json)
Hash identifier:          KGdsw8yCtrTOOxeLbCWgOubiGg8HzMIKfCxvMEfeMXc=
Subject key identifier:   B8:41:4C:7E:FF:13:0C:81:CA:B5:E1:1A:DB:62:B6:AE:33:9F:7F:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102FEF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4e527af5-f009-44f7-89c1-bb3cf3ddb23c/1268aa0a2ffab6dc153460bfdd57c53b5b2264a5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4e527af5-f009-44f7-89c1-bb3cf3ddb23c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Dec 2023 11:05:56 +0000
Certificate not after:    Wed 09 Jul 2025 18:51:49 +0000
Subordinate resources:    IP: 2801:1a:1800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16973554 (0x102fef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  6 11:05:56 2023 GMT
            Not After : Jul  9 18:51:49 2025 GMT
        Subject: CN=1268aa0a2ffab6dc153460bfdd57c53b5b2264a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:89:bc:5e:58:4e:62:55:90:ca:2b:c3:98:14:
                    6d:c4:86:b1:1e:b8:c2:81:d6:75:6a:17:58:ce:61:
                    f5:2a:da:b3:6c:2c:c8:10:8a:2c:77:c8:0a:04:42:
                    98:1a:a5:c4:ee:14:03:30:24:fe:d7:d4:4f:98:83:
                    e4:63:ff:ba:43:00:1b:b3:17:eb:d3:f2:c3:f8:d4:
                    25:34:62:7a:fb:c7:a6:c0:76:e2:ce:a0:8a:f0:f0:
                    ea:df:c3:d9:f3:95:12:bb:cb:e1:00:57:53:9e:84:
                    64:c2:18:54:5c:58:54:7a:c6:4e:ff:71:26:5e:bb:
                    41:70:ef:46:64:7a:c4:fe:15:a4:74:b4:9e:c3:8e:
                    2e:b3:01:6c:55:da:74:ff:ec:3a:86:f7:4c:9f:80:
                    4c:57:52:8c:71:25:28:f4:3e:42:90:9c:a4:df:be:
                    14:cd:42:02:ab:0e:6b:ee:83:2d:95:36:cd:5b:e4:
                    54:ed:87:a0:1b:a3:5d:a8:6f:03:10:09:6a:2c:33:
                    35:c4:0c:8c:a3:bc:ca:1d:97:19:3c:48:2a:ad:76:
                    fa:6a:48:de:94:59:a0:20:00:f7:ce:28:95:d3:05:
                    08:5b:f9:80:0c:d4:a3:f3:ee:65:2c:50:d5:35:99:
                    11:96:b9:54:d5:70:96:4e:af:6f:0a:16:45:f4:a2:
                    e0:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:41:4C:7E:FF:13:0C:81:CA:B5:E1:1A:DB:62:B6:AE:33:9F:7F:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4e527af5-f009-44f7-89c1-bb3cf3ddb23c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4e527af5-f009-44f7-89c1-bb3cf3ddb23c/1268aa0a2ffab6dc153460bfdd57c53b5b2264a5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b5:bf:d4:68:ae:40:1d:b2:1d:76:df:7f:e1:b0:5a:82:e4:c3:
         72:57:29:44:4f:9b:dc:64:f2:01:06:96:7c:1b:0e:f6:f0:9a:
         6d:dd:8a:76:21:32:62:8b:15:49:f1:ac:82:0f:f4:2e:d5:7d:
         23:92:1b:0c:11:44:dd:21:e9:0b:b7:c2:b8:a1:ee:05:64:98:
         89:d4:c4:76:5c:90:34:e8:7f:12:e2:63:65:f8:61:39:12:0d:
         6b:61:a1:29:59:12:03:6e:9e:ba:13:02:8c:e1:4d:af:74:cb:
         8a:5e:69:86:d9:63:b0:79:eb:b7:11:8b:6f:5a:6e:c5:7f:e4:
         5a:15:62:c5:07:73:6d:bd:96:42:7f:90:0c:b7:50:f5:4a:dd:
         65:cd:09:79:ff:f8:be:3b:1e:2e:05:90:76:10:db:e3:af:da:
         1d:ab:e2:cd:3a:f4:6d:83:73:d8:1d:0f:fb:56:07:4d:a7:8e:
         a1:6e:ba:b7:71:81:0c:a2:39:70:28:06:ba:f6:2e:c2:f1:5a:
         6e:14:ac:ab:5d:ab:69:d8:55:55:3f:fe:39:67:f3:65:9a:04:
         63:c6:0b:a7:5d:86:45:85:c3:fd:ca:6b:9a:39:88:3b:3b:2b:
         20:09:b4:c7:18:02:8a:3a:e2:eb:0e:73:42:e4:14:9c:d9:61:
         42:13:ee:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----