Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2b0604e3eec7948020d73c1a1f64cd84cad803b0.cer
File:                     2b0604e3eec7948020d73c1a1f64cd84cad803b0.cer (raw, json)
Hash identifier:          5UxiX/jCrt5ix69RhPHlbylYN2ptzbZ2mBTuHtH2wRU=
Subject key identifier:   57:F4:4C:F2:3E:E5:FF:F2:91:08:9B:16:66:CC:7B:99:7B:1C:B5:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE5590
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/194a99eb-0a99-431b-941c-afe3d93e85cd/2b0604e3eec7948020d73c1a1f64cd84cad803b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/194a99eb-0a99-431b-941c-afe3d93e85cd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 13:14:43 +0000
Certificate not after:    Sun 08 Dec 2024 04:00:00 +0000
Subordinate resources:    IP: 2801:0:360::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15619472 (0xee5590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 13:14:43 2023 GMT
            Not After : Dec  8 04:00:00 2024 GMT
        Subject: CN=2b0604e3eec7948020d73c1a1f64cd84cad803b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:7b:8b:98:c5:ab:52:44:22:49:71:89:55:
                    4b:c4:8a:4a:1c:d3:51:9f:ed:8d:fc:92:49:bf:6a:
                    7f:40:14:ac:4c:52:33:51:6e:6a:12:00:a2:34:83:
                    6f:b5:6d:2c:41:69:5e:85:42:b1:e5:2a:8b:a8:24:
                    62:be:04:dd:ba:70:71:30:0a:dd:9b:67:7a:64:dd:
                    00:b7:27:5e:13:b0:3f:53:51:45:30:b5:09:90:9c:
                    42:66:5e:53:5f:1d:73:ef:74:c5:05:cb:8a:57:7f:
                    a1:15:b6:68:93:e5:e6:50:0c:3b:87:ff:92:be:f8:
                    c9:85:6c:db:51:87:fa:dd:dc:a1:48:2b:23:02:9f:
                    b4:3f:ba:03:ac:40:76:12:50:30:c6:be:0c:d2:59:
                    75:d1:bd:07:39:e5:20:02:d0:ce:1f:2c:6d:3c:36:
                    ca:e8:58:fe:4e:89:79:4d:75:71:1f:cb:7c:7d:d5:
                    34:54:80:01:19:bd:ac:3d:d6:7d:3b:74:4d:65:8c:
                    49:95:61:e8:97:c9:ac:d2:24:f3:7d:34:bf:b5:8d:
                    35:2d:9e:e5:b4:c8:99:73:12:7d:35:7d:4c:be:85:
                    8d:9a:5f:4d:93:93:6f:e0:03:1e:9f:ff:2b:b8:db:
                    76:61:7d:94:37:f2:db:5c:80:cb:da:80:00:74:08:
                    68:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:F4:4C:F2:3E:E5:FF:F2:91:08:9B:16:66:CC:7B:99:7B:1C:B5:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/194a99eb-0a99-431b-941c-afe3d93e85cd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/194a99eb-0a99-431b-941c-afe3d93e85cd/2b0604e3eec7948020d73c1a1f64cd84cad803b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:360::/44

    Signature Algorithm: sha256WithRSAEncryption
         72:fe:cb:8c:16:b9:e2:1c:32:37:e9:53:1b:e5:d1:ae:1d:a6:
         0b:07:0f:5a:00:09:b7:25:b0:03:25:a6:8b:54:5a:16:52:ce:
         75:fa:c5:f1:48:43:f0:00:0b:29:ff:fb:fa:ad:ed:ad:14:59:
         a3:17:9d:7c:d5:da:41:28:1e:27:87:e5:05:16:e0:01:b3:99:
         2b:24:bb:e4:df:39:52:d7:d1:f5:2a:93:5a:9b:dd:d1:4a:15:
         bd:c0:6d:13:a0:eb:5f:fb:77:c6:d6:19:ed:1e:ff:f0:9f:2d:
         6d:7c:4b:2a:79:43:e0:70:f6:fb:e8:17:7a:6b:26:3f:9c:1c:
         0a:a3:16:60:90:ce:c9:e9:6c:73:60:c0:14:a8:38:ac:aa:df:
         97:34:49:29:4d:70:8f:93:bf:4b:bb:a7:a1:1a:99:89:19:1c:
         b7:b6:91:0a:1a:6f:87:fe:29:60:2d:cf:73:18:03:2c:62:0c:
         f6:bb:5f:fd:dd:e7:c4:1f:3b:64:40:d4:2e:77:79:a2:6a:d5:
         c7:95:5d:26:1d:0a:10:7e:89:ac:50:25:f0:57:05:13:7c:fd:
         44:fb:2e:c9:c5:6f:61:7c:a0:9d:77:9c:d0:bc:d6:b9:55:18:
         36:38:ec:14:4c:cc:20:df:29:5c:0e:40:e9:09:01:64:e8:e5:
         c5:d2:27:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----