Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d792d0112ba86d88654d8a761ee4b1249edc741.cer
File:                     2d792d0112ba86d88654d8a761ee4b1249edc741.cer (raw, json)
Hash identifier:          X0OyCyrUqDgvWcOnSIAM2okktAYR7IiVcJs7eTuTUcY=
Subject key identifier:   69:D6:FE:91:CA:82:5D:0B:BD:96:FA:89:B4:E9:2E:B4:2D:3C:1C:46
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F21571
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4b37dc0-879b-4297-a203-561823e2954d/2d792d0112ba86d88654d8a761ee4b1249edc741.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4b37dc0-879b-4297-a203-561823e2954d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 12:57:53 +0000
Certificate not after:    Wed 23 Oct 2024 18:02:37 +0000
Subordinate resources:    IP: 2801:12:c800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15865201 (0xf21571)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 18 12:57:53 2023 GMT
            Not After : Oct 23 18:02:37 2024 GMT
        Subject: CN=2d792d0112ba86d88654d8a761ee4b1249edc741
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c2:6b:15:1e:1e:17:bf:66:15:6b:f3:b4:b0:
                    3e:66:1c:a2:19:21:c4:5f:85:a7:7d:44:9b:23:14:
                    46:52:18:22:aa:8a:42:b4:5a:56:15:7c:7d:e9:b8:
                    fd:1a:df:44:89:53:5c:b7:fe:32:84:0f:b1:0e:44:
                    b5:a4:d7:04:cb:a5:01:49:69:c9:24:7d:13:75:61:
                    ac:81:d3:3c:30:d3:17:42:08:22:0f:fa:eb:7b:ed:
                    09:cd:52:09:0e:4d:0e:55:f4:5c:b3:9c:55:b9:90:
                    37:1a:60:ae:f7:ad:3e:21:58:f7:4e:bd:08:73:be:
                    50:7a:b0:d5:7b:ed:fd:9f:23:68:ba:be:ac:21:55:
                    49:cf:00:29:fe:92:94:fe:2b:8c:43:f7:9e:ac:17:
                    6c:73:9d:f7:bf:c4:ac:ef:d8:00:7b:64:ba:3c:1e:
                    41:99:a0:9a:d7:de:30:77:eb:f9:2f:59:3d:9a:94:
                    01:4c:11:72:26:3f:b6:b4:65:92:9c:f4:18:af:99:
                    47:54:e2:81:03:a6:6b:c8:85:80:24:6c:ab:46:31:
                    09:0f:ad:c7:a2:53:0a:f2:f0:70:39:a7:90:2c:59:
                    e2:ec:73:6f:e7:8e:78:99:94:d5:63:07:5b:0e:ea:
                    fa:fb:d5:b7:5b:e5:da:96:ab:e6:22:91:f2:37:22:
                    ad:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:D6:FE:91:CA:82:5D:0B:BD:96:FA:89:B4:E9:2E:B4:2D:3C:1C:46
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4b37dc0-879b-4297-a203-561823e2954d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4b37dc0-879b-4297-a203-561823e2954d/2d792d0112ba86d88654d8a761ee4b1249edc741.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         99:ef:8e:39:45:30:a1:a6:39:83:ec:89:5b:17:6e:b1:17:0a:
         9e:44:88:15:87:9c:43:4d:d6:c0:5e:fa:72:75:b0:be:53:e2:
         28:0f:97:dc:c4:d6:c5:22:56:fe:82:18:c3:7f:56:81:e6:6b:
         db:94:ec:e7:59:38:a5:c5:ee:6b:86:4e:13:8c:c9:1d:96:e7:
         c1:c1:97:a2:f1:0a:9c:27:ee:4c:90:39:7d:2a:57:c6:43:11:
         35:8d:0a:f2:32:18:e3:bc:1d:44:28:a9:67:c9:9d:0d:51:7b:
         0c:d9:74:e6:d1:17:08:53:25:6b:8a:f8:0a:01:79:a8:65:67:
         fa:f6:ca:09:84:68:9d:78:8f:ce:c9:1e:ae:04:71:a3:9b:60:
         88:5b:94:cb:d9:79:0f:93:db:f5:f9:24:3c:a4:f0:4c:a0:c2:
         6a:f1:d3:d9:67:8e:61:b5:df:e4:38:ec:cb:83:da:9a:12:3b:
         22:20:4c:97:3f:ae:7f:39:58:58:88:50:71:1a:45:8a:d8:0f:
         1a:97:1b:b3:01:04:7b:45:c8:2f:4f:81:c8:06:24:28:32:17:
         a7:50:3d:67:e6:95:8e:3a:9f:c8:79:9a:25:f8:6c:9d:72:bd:
         d1:f8:97:3c:71:a4:da:2f:b2:53:c8:f7:fb:b9:90:29:5c:61:
         38:19:8e:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----