Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e23d8995a214f24c1775ef4be60658dc7f662dd.cer
File:                     2e23d8995a214f24c1775ef4be60658dc7f662dd.cer (raw, json)
Hash identifier:          YdnVf8LkE2dQwT7D9TqIRZFGfd8kc15FoHQvCEsMpFs=
Subject key identifier:   2B:27:D8:AA:3F:16:90:0F:4D:8C:21:91:00:FA:67:B4:DA:21:92:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4B4A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dff39da4-2d39-49f1-9c68-2935773d36fc/2e23d8995a214f24c1775ef4be60658dc7f662dd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dff39da4-2d39-49f1-9c68-2935773d36fc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 20:10:31 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 164.73.0.0/16
                          IP: 2001:1328::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14988449 (0xe4b4a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 20:10:31 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=2e23d8995a214f24c1775ef4be60658dc7f662dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7f:ed:b8:75:96:0c:53:5a:4a:a6:33:ae:3f:
                    8e:8c:d9:f3:59:ea:92:d2:ca:97:bd:7a:e4:b0:8b:
                    18:26:19:45:c2:c3:fa:e4:15:8b:aa:6b:53:e9:3f:
                    fd:9d:f0:b0:dd:5d:d6:cd:ea:9a:b3:f0:72:0c:17:
                    41:61:b2:ee:a9:52:7e:07:51:af:0e:b0:a6:3b:47:
                    fb:f6:d5:3e:88:d7:c9:0c:f1:a1:80:0a:65:fe:cf:
                    a3:4b:8b:21:2d:5e:7f:be:4f:82:c2:e6:3f:6b:6f:
                    0c:94:9e:34:cd:1d:9a:26:16:1c:cc:1f:7e:20:db:
                    b2:3b:e9:dc:b9:81:98:a7:ff:d8:63:dd:35:d1:c4:
                    7c:c9:33:a4:fd:d2:8a:56:ba:e6:f6:b9:bd:e2:fa:
                    f9:f3:dc:7a:6b:38:1f:d9:03:00:ec:d3:93:60:8d:
                    92:75:d0:5d:d8:05:75:cf:6e:27:53:f8:f3:b0:98:
                    05:51:bd:df:7e:88:94:33:b5:3f:2c:63:71:af:a3:
                    36:d2:33:81:eb:cc:f2:d7:17:34:88:b5:91:38:7d:
                    f5:9e:14:db:2a:6a:4b:52:fd:d3:ca:67:f7:1c:df:
                    50:2a:11:2b:20:1a:9c:c0:0e:e9:4e:c5:d4:c6:07:
                    b4:90:29:83:ef:73:ec:f8:ec:7e:ea:41:af:75:3b:
                    c1:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:27:D8:AA:3F:16:90:0F:4D:8C:21:91:00:FA:67:B4:DA:21:92:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dff39da4-2d39-49f1-9c68-2935773d36fc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dff39da4-2d39-49f1-9c68-2935773d36fc/2e23d8995a214f24c1775ef4be60658dc7f662dd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.73.0.0/16
                IPv6:
                  2001:1328::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:65:e3:4f:c8:e0:d6:7c:08:e6:b7:e9:93:b9:67:bd:86:a7:
         2e:e9:56:5a:09:70:4f:ba:98:7b:d9:66:ac:c6:10:e3:c2:b8:
         9b:97:fc:eb:bb:06:d7:4b:26:82:d6:f3:71:7d:87:26:44:62:
         2d:8e:d9:68:af:a7:50:4d:f9:1e:eb:a7:0b:ce:37:c9:52:ac:
         47:b5:60:b1:13:8e:a3:f7:f9:83:26:ef:74:d8:03:13:26:93:
         6a:f7:1b:74:78:fb:7c:22:de:ae:91:4e:78:78:6f:df:35:df:
         c6:d8:65:0c:e3:32:71:e7:d1:5e:9b:b7:ff:fe:8f:de:32:70:
         d4:b6:29:dc:11:55:78:dc:70:62:7e:23:0f:3c:f3:a1:1c:5a:
         b3:30:04:05:50:9e:1b:b9:1a:8d:d0:c1:8b:2f:46:a7:5c:cd:
         c4:6d:0a:4d:87:55:75:95:1f:fd:aa:db:9b:08:5b:56:8a:26:
         1a:72:ec:a5:7a:d1:4b:ec:1c:dc:ea:34:b8:98:5a:41:5e:cf:
         c3:91:94:34:2d:89:20:ed:8e:fd:81:52:d7:c7:06:98:c5:47:
         95:d4:5c:56:8e:28:9c:b8:f8:83:65:4f:7f:20:65:0e:d6:66:
         ce:ab:1d:91:33:76:74:dc:0a:3b:50:83:74:8f:2c:f2:59:de:
         fa:4a:a2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----