Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/228e26e6d35fd1c575922b6f33809c64b17fdcdf.cer
File:                     228e26e6d35fd1c575922b6f33809c64b17fdcdf.cer (raw, json)
Hash identifier:          qeS7iTzM8s6hnjgzqJouCn7QXLQoWAJzMfmqtQF6ARQ=
Subject key identifier:   CD:09:B3:F6:D7:21:DF:00:59:16:18:1A:54:28:98:85:00:80:D9:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C8EB8D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/228e26e6d35fd1c575922b6f33809c64b17fdcdf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 02 Jun 2022 13:51:23 +0000
Certificate not after:    Sun 31 Mar 2024 19:57:50 +0000
Subordinate resources:    IP: 2801:1c:5800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13167501 (0xc8eb8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  2 13:51:23 2022 GMT
            Not After : Mar 31 19:57:50 2024 GMT
        Subject: CN=228e26e6d35fd1c575922b6f33809c64b17fdcdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:84:7f:18:12:27:5a:3e:24:6d:0a:ca:d5:d5:
                    54:0e:f7:05:c5:8c:fb:3d:01:42:12:df:35:d0:26:
                    8f:2c:eb:37:e8:e5:dc:e7:46:84:f7:7a:f0:b7:ea:
                    b1:e2:16:d9:9f:b1:cd:b0:f0:18:a6:6e:77:b4:03:
                    ca:95:44:08:07:f8:d9:f0:18:b6:f7:35:9c:d6:a6:
                    8d:b0:8f:b3:ca:5e:d5:7e:6f:58:8d:50:8b:12:c0:
                    57:1d:ab:79:a3:d9:2b:46:72:db:d0:8d:fe:30:da:
                    0d:05:d6:6e:dc:11:7b:39:59:2d:0a:07:1b:5a:83:
                    c9:04:1f:c6:0c:8a:4e:fa:f6:e0:33:af:2d:e0:3b:
                    cd:e3:48:9b:da:01:f9:e3:ff:b0:4a:34:95:7f:23:
                    9b:31:f3:ce:82:40:1a:e5:3b:71:c7:9d:55:86:12:
                    dc:41:b6:f4:fa:ed:21:63:89:ea:9a:fb:6e:4f:b7:
                    37:fd:16:f5:33:04:49:c4:6a:87:f4:80:24:51:c4:
                    6c:c9:06:6e:4e:58:d8:86:e8:64:4d:75:c1:3d:aa:
                    c2:b0:f4:83:c3:90:04:a2:50:9a:fe:17:aa:d3:0b:
                    dd:48:22:25:bb:37:79:77:46:3e:e5:95:c5:cf:7e:
                    36:2e:bf:6e:17:7e:6c:6a:a9:2d:b9:c7:e6:2b:aa:
                    58:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:09:B3:F6:D7:21:DF:00:59:16:18:1A:54:28:98:85:00:80:D9:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/13ddcac7-9b11-4157-b7b0-22d79b0cab32/228e26e6d35fd1c575922b6f33809c64b17fdcdf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         12:62:48:3c:f6:48:45:ff:32:04:8e:87:7d:57:e5:bc:5c:07:
         2b:c9:7a:78:78:9c:3d:37:99:95:f1:26:fc:1f:59:39:a0:e6:
         25:8a:79:07:ce:f1:66:86:11:73:cd:a2:d6:d5:1b:aa:34:04:
         80:aa:e9:f1:0d:bb:de:d4:9f:99:46:34:80:94:fd:63:4a:1c:
         7b:f2:e3:1c:55:65:57:cb:dd:8b:e0:7c:71:c5:75:d3:21:4d:
         e1:4e:90:7f:12:68:f1:9d:f1:cb:48:db:5d:ed:47:3b:41:83:
         4f:d1:60:fb:47:f0:d0:bb:69:63:16:81:45:63:4e:59:13:4e:
         d2:8a:52:d0:64:6b:e9:13:46:7b:50:5a:87:f2:00:b6:77:2c:
         3b:41:6a:a9:3a:b6:b1:07:6e:57:9a:93:fa:f5:3d:2b:a5:13:
         cd:1a:ea:91:e4:0c:f3:00:7d:91:4a:d8:ec:5c:bb:b4:b6:a3:
         3c:62:7a:79:b1:d7:25:4d:4c:d4:8b:fb:a2:76:1f:1b:82:36:
         d6:34:e7:c4:d8:d0:da:6c:8f:ad:54:23:b1:ce:07:f3:b5:39:
         ad:cc:ff:99:ca:e2:c7:00:ee:d4:37:37:5a:63:b0:d6:44:3e:
         fb:17:32:82:fe:aa:c9:24:33:2c:2c:65:74:98:64:37:35:13:
         76:3e:de:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----