Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2159108a6cd9c980d97971b80c5288f1616b1180.cer
File:                     2159108a6cd9c980d97971b80c5288f1616b1180.cer (raw, json)
Hash identifier:          Va43ldoKOJRCeQKp0bXnr8qKT43IhueMEtJsEPNhzRQ=
Subject key identifier:   D6:16:7A:28:9A:86:DC:0A:7E:10:17:46:58:FD:32:3C:81:FB:71:3C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E68FEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c717cb80-8a7c-432a-9db7-db3dea687f27/2159108a6cd9c980d97971b80c5288f1616b1180.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c717cb80-8a7c-432a-9db7-db3dea687f27/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 15:39:58 +0000
Certificate not after:    Fri 31 Jan 2025 21:29:15 +0000
Subordinate resources:    IP: 2801:185::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15110124 (0xe68fec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 15:39:58 2023 GMT
            Not After : Jan 31 21:29:15 2025 GMT
        Subject: CN=2159108a6cd9c980d97971b80c5288f1616b1180
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:63:be:c1:03:81:e4:44:3d:35:2d:80:1d:42:
                    7f:00:04:da:24:17:55:73:c4:00:fe:4f:b8:82:ff:
                    c1:6e:01:26:00:c7:9a:39:bd:63:e5:11:39:d2:f1:
                    2e:8a:e7:5f:b2:ed:7e:bc:ad:55:e7:af:55:c3:cd:
                    0f:5b:5f:9e:9f:16:b7:5b:19:11:14:a5:48:f2:83:
                    0b:d4:c7:41:8f:6c:a3:97:52:26:f3:ee:30:14:98:
                    1d:33:60:51:a0:ef:5f:f5:e7:e9:3c:a6:e4:43:75:
                    68:be:c7:12:2b:97:58:90:0e:1f:69:c9:f6:e7:93:
                    56:9c:6c:3d:d0:6e:39:17:bb:78:13:37:32:3a:b1:
                    10:0c:21:d5:4b:15:60:7b:03:a7:44:ec:64:ee:d3:
                    a3:93:45:c1:82:d5:e4:62:1e:33:8e:a7:0e:42:d4:
                    01:51:e2:37:54:47:ea:1b:9c:71:3d:ca:59:59:ac:
                    5b:99:f9:d7:88:fe:ee:42:4b:7e:5a:a0:59:42:5c:
                    b8:ca:08:fa:2c:2a:75:6c:8a:1f:48:a7:ce:9f:39:
                    50:1a:2b:db:e3:15:f7:b1:80:62:f7:5f:dd:b2:e9:
                    1f:52:98:0f:ed:94:81:74:98:06:c9:ba:96:ae:4f:
                    c0:d1:2a:71:1c:5c:f3:03:37:d8:9f:3e:77:cf:fe:
                    14:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:16:7A:28:9A:86:DC:0A:7E:10:17:46:58:FD:32:3C:81:FB:71:3C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c717cb80-8a7c-432a-9db7-db3dea687f27/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c717cb80-8a7c-432a-9db7-db3dea687f27/2159108a6cd9c980d97971b80c5288f1616b1180.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:185::/44

    Signature Algorithm: sha256WithRSAEncryption
         55:68:6c:25:e4:59:56:cd:4c:40:8f:f1:7b:19:6d:1e:df:4a:
         03:d1:1b:1c:bd:03:40:76:a0:36:78:67:7d:54:6e:35:1f:3f:
         60:4c:2e:3b:cb:5a:d6:9f:cd:f7:2b:35:ed:8c:16:7c:ba:10:
         ff:4b:e6:0f:17:e7:56:0a:ff:72:78:c1:d3:d1:eb:12:64:fe:
         95:c8:d2:47:66:2e:25:98:71:03:5d:7a:cb:cf:b2:c7:64:9f:
         fc:39:2b:19:54:c4:33:b6:07:a6:7e:4f:43:79:3b:66:ef:30:
         4a:ad:d0:42:b0:3f:04:f3:1d:1f:9c:52:f5:4a:7b:47:e9:c9:
         cc:e5:c1:e2:8f:9f:81:56:d6:99:85:99:99:c6:4b:21:04:f3:
         98:d5:28:c6:24:79:8e:8a:9a:70:a6:ee:42:d4:3e:4e:83:dd:
         45:3f:1e:02:c2:20:e8:12:ce:0d:4c:23:9a:63:f1:67:c7:42:
         4e:5a:87:ac:c8:ff:e2:d5:52:be:f3:9c:de:6c:3d:11:44:c0:
         80:b7:d2:b2:c4:61:64:e2:35:60:ba:50:ce:d7:28:ac:f4:ad:
         4e:81:49:f3:3a:95:82:b8:60:ff:7e:38:66:02:a6:49:5d:e5:
         a1:73:87:12:a3:9a:a5:40:b8:be:15:4e:31:a1:ea:0e:83:16:
         cc:11:bb:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----