Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21e7c21f59f7a57c236dcdbd39b87148168bb6ca.cer
File:                     21e7c21f59f7a57c236dcdbd39b87148168bb6ca.cer (raw, json)
Hash identifier:          ASq3clOpQPS4/8SCujnrskiZMvpM3BUHqG7OUIinbRg=
Subject key identifier:   F8:F6:4C:0A:6E:4A:48:8E:ED:05:5E:93:2E:7E:03:8C:2B:F4:D7:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECEDE5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/da2a0b66-29fb-41cf-b81b-ea106dea8527/21e7c21f59f7a57c236dcdbd39b87148168bb6ca.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/da2a0b66-29fb-41cf-b81b-ea106dea8527/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 21:00:42 +0000
Certificate not after:    Sun 26 Jan 2025 21:18:33 +0000
Subordinate resources:    IP: 45.171.118.0/24
                          IP: 2803:e060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15527397 (0xecede5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 21:00:42 2023 GMT
            Not After : Jan 26 21:18:33 2025 GMT
        Subject: CN=21e7c21f59f7a57c236dcdbd39b87148168bb6ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:ef:cf:66:42:b2:50:ac:bb:1c:6a:e1:13:f5:
                    0b:90:30:0e:5a:1d:36:cd:89:d9:d6:75:97:90:7c:
                    6f:c4:02:8c:59:d9:66:86:d8:5e:75:da:02:d7:20:
                    57:c2:40:7a:a4:df:89:90:f2:bf:74:49:d2:f2:8a:
                    36:c5:f3:7c:7d:73:0a:f2:52:81:92:dc:01:0d:a0:
                    a2:52:42:8c:9b:3c:0e:de:29:1c:fc:f9:e8:59:b5:
                    c9:7f:7b:eb:98:f3:fa:c9:15:3c:c2:e9:be:e3:08:
                    58:7a:4e:e2:91:8a:f6:18:d9:01:24:67:88:38:5a:
                    28:d7:5f:dc:5f:f3:85:20:ef:9e:da:25:2d:26:0c:
                    f0:a2:51:33:28:eb:17:df:87:db:33:1f:ca:90:53:
                    8f:c9:ef:71:31:bd:74:f9:5a:3f:6b:48:97:8e:b3:
                    c4:e6:25:f4:98:ea:f0:eb:2d:11:58:f3:82:4b:cb:
                    03:84:79:2f:d6:0a:35:f7:83:7b:fb:a9:34:05:b2:
                    10:f5:d4:8d:27:12:23:84:be:bf:71:c2:c3:da:28:
                    03:16:15:de:21:73:2e:7b:50:1f:b1:2c:63:d8:e8:
                    a2:65:12:24:5f:02:ce:ce:6d:68:af:f9:c2:4d:d8:
                    1c:45:e9:7d:bc:e1:e7:5c:09:af:69:47:e5:13:06:
                    9d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:F6:4C:0A:6E:4A:48:8E:ED:05:5E:93:2E:7E:03:8C:2B:F4:D7:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/da2a0b66-29fb-41cf-b81b-ea106dea8527/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/da2a0b66-29fb-41cf-b81b-ea106dea8527/21e7c21f59f7a57c236dcdbd39b87148168bb6ca.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.118.0/24
                IPv6:
                  2803:e060::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:74:58:f4:5d:98:fc:65:38:a0:5e:bc:0c:d2:15:23:67:ec:
         46:b0:92:35:c6:d3:af:67:6e:b1:86:a4:5b:2a:e4:6b:81:af:
         e5:d0:ed:ef:49:47:c2:16:f3:ae:0d:20:10:bc:fa:8a:38:f2:
         f0:5a:57:e3:b6:63:9c:e4:77:ea:e9:1f:f2:dd:42:f8:72:1d:
         66:60:70:44:0b:c1:71:7f:5c:6f:e7:45:33:41:db:35:05:db:
         c3:f6:7a:70:8f:65:e0:ab:c4:1f:41:82:92:dd:aa:9c:73:0e:
         fa:ad:5d:58:27:56:ad:d0:84:bb:3d:f6:86:bd:fb:50:1b:35:
         b5:9d:7c:de:5e:11:dc:db:4d:4b:0f:9a:f1:a7:40:31:ec:36:
         f0:04:82:a0:b3:a5:57:d4:ad:5b:1b:19:37:fe:75:33:65:16:
         11:87:8d:c2:92:d0:ff:ff:fd:81:51:1d:2c:36:da:9d:5f:c9:
         e2:f0:e2:e5:4d:13:d1:9c:af:3a:e4:70:c3:8f:13:ce:c9:ba:
         d2:e1:d0:43:3d:ca:68:d6:75:77:77:95:25:20:6c:ec:df:0a:
         d7:bc:c9:19:b8:2e:dd:39:06:de:6a:9d:8e:7d:f6:2a:f7:a2:
         14:de:48:b8:80:b0:5c:c7:7c:6d:2d:02:21:fd:b9:a3:b8:99:
         87:8d:3e:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----