Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b8c8edb8547f0b16e183a1564d634e68a649407.cer
File:                     1b8c8edb8547f0b16e183a1564d634e68a649407.cer (raw, json)
Hash identifier:          lVWw3UZrLXH5OwEn1clhjWu8DXs9JqimpRc2fI3rQTg=
Subject key identifier:   61:3F:F4:21:6D:65:A5:51:02:30:47:5E:4A:6A:C9:3B:11:6E:B3:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D1A47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1125b751-bd17-432e-be3e-94546ef6cc52/1b8c8edb8547f0b16e183a1564d634e68a649407.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1125b751-bd17-432e-be3e-94546ef6cc52/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 15:49:04 +0000
Certificate not after:    Sat 23 Aug 2025 06:00:00 +0000
Subordinate resources:    IP: 2801:1e:7800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17635911 (0x10d1a47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  7 15:49:04 2024 GMT
            Not After : Aug 23 06:00:00 2025 GMT
        Subject: CN=1b8c8edb8547f0b16e183a1564d634e68a649407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:81:b4:40:57:da:05:b6:a6:57:c7:13:41:b5:
                    2c:bb:fc:a7:85:4d:dc:dc:07:a4:01:aa:ef:9a:72:
                    af:79:e8:33:64:a5:9e:d3:b7:9c:22:d5:37:91:95:
                    f0:85:2c:3d:5a:9e:3c:57:26:89:91:45:8e:6f:1a:
                    f3:71:39:a7:2e:20:92:41:e1:63:31:a1:ed:f4:90:
                    0f:43:12:dd:8d:4a:ff:dc:7b:52:b0:13:b9:05:d3:
                    78:f5:89:e9:50:be:6f:ed:1c:34:5f:63:42:9e:0f:
                    bb:62:79:8f:11:42:9e:1a:43:82:38:02:13:32:b7:
                    0e:f9:32:31:f5:93:47:3e:0b:8b:eb:cd:73:49:82:
                    6e:88:a7:c2:2d:dc:c4:2d:62:16:03:7c:b4:2b:d4:
                    49:fd:bb:15:b5:08:ce:b9:76:b0:66:a1:f7:bc:25:
                    12:8b:63:90:e9:fc:fe:49:db:5b:d5:51:1f:a3:76:
                    2e:3f:05:90:e2:2c:90:d2:c8:3a:b9:87:e5:98:2a:
                    c3:65:f9:ca:f4:0a:91:13:8b:66:42:65:77:22:5c:
                    cd:06:32:7c:1a:cf:2c:6c:ac:97:66:01:75:17:ca:
                    d7:44:8f:38:d1:98:98:53:55:d1:1b:57:f9:55:cb:
                    43:e8:92:7e:e8:b5:f1:28:ba:45:7e:8c:52:e4:8a:
                    2c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:3F:F4:21:6D:65:A5:51:02:30:47:5E:4A:6A:C9:3B:11:6E:B3:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1125b751-bd17-432e-be3e-94546ef6cc52/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1125b751-bd17-432e-be3e-94546ef6cc52/1b8c8edb8547f0b16e183a1564d634e68a649407.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         11:08:77:99:aa:3a:de:ad:e6:c2:a4:d5:22:01:73:48:eb:f8:
         28:a4:00:d5:a8:dd:08:af:bb:f5:ca:3e:9f:4b:a0:ec:4c:61:
         14:14:10:e0:d2:a6:8d:f2:94:2b:13:8e:05:a1:30:b5:82:38:
         50:eb:d6:be:23:c9:88:ef:34:6b:85:c9:34:e7:59:07:0b:7a:
         40:14:eb:70:9d:25:1e:09:42:43:44:a2:56:2c:80:a0:fb:70:
         7c:ba:36:a8:af:e7:b9:a6:35:83:bc:ec:87:9b:e5:df:6f:ea:
         d4:31:18:f1:79:9a:65:7b:a1:c8:2a:03:90:c6:2a:fe:2f:d5:
         5f:c3:26:09:dd:e3:97:99:8f:7e:69:2c:e2:53:d7:40:21:90:
         76:bb:c9:bb:b6:d2:cd:be:f0:c9:eb:1d:90:2c:74:b6:33:ad:
         5f:b0:23:0e:e9:27:f2:e9:08:1b:fb:80:28:98:ae:8f:ec:78:
         67:14:a7:95:06:5c:b9:a7:df:17:e1:fd:6d:66:4e:ef:5e:37:
         46:84:4c:80:51:76:fa:50:3e:a0:d2:34:b6:9b:9c:73:7b:7c:
         c8:ab:94:82:8b:3e:f0:1f:a5:0a:77:92:68:e7:16:18:e4:4b:
         37:9c:aa:74:7a:59:fe:83:cf:ba:9b:90:45:0f:ea:5c:57:8a:
         2b:67:4d:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----