Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3de8f34c6bef230f59f763da9b5d287a1a38f579.cer
File:                     3de8f34c6bef230f59f763da9b5d287a1a38f579.cer (raw, json)
Hash identifier:          APnwgpSzumaUQ8bhkHBucxXiv99UUfPjEFEsJ0BE5qc=
Subject key identifier:   D1:47:D9:AD:E2:33:7A:7E:DD:16:9F:0C:5D:CC:6C:3C:45:C2:DD:11
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC2791
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/23fabada-4e47-4b3a-8da2-a1a9ce94b025/3de8f34c6bef230f59f763da9b5d287a1a38f579.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/23fabada-4e47-4b3a-8da2-a1a9ce94b025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 19:29:36 +0000
Certificate not after:    Sun 27 Oct 2024 20:16:29 +0000
Subordinate resources:    IP: 2801:1a:d800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16525201 (0xfc2791)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 19:29:36 2023 GMT
            Not After : Oct 27 20:16:29 2024 GMT
        Subject: CN=3de8f34c6bef230f59f763da9b5d287a1a38f579
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:a3:58:c0:97:68:65:52:f1:10:8d:ed:06:
                    47:4a:e2:3b:3d:45:76:19:95:c5:12:14:e2:e7:bf:
                    6e:81:05:fe:13:bc:3b:7f:70:57:94:69:8d:a8:26:
                    27:3d:fe:bc:69:70:0b:44:20:a2:39:e3:b7:42:94:
                    f8:17:dd:ab:dc:63:b1:2e:7f:37:d8:81:de:cd:5f:
                    00:fe:c9:2a:3a:31:b8:3c:86:28:bc:97:24:47:0b:
                    d1:32:28:33:ad:83:63:81:1b:4a:49:e6:c0:b8:e4:
                    de:87:74:2c:4a:81:fc:d2:fc:ba:d2:42:52:20:9a:
                    00:0d:57:bb:1f:64:d5:38:b0:e8:04:3a:45:10:fb:
                    46:18:9e:b2:d8:e4:c5:60:a9:ed:2f:7d:19:32:e0:
                    90:a8:9d:d0:88:5c:cd:3b:af:97:89:7d:8c:e6:e3:
                    b1:5c:c4:60:58:3e:d7:83:35:f9:50:02:6b:90:ed:
                    ec:7a:c5:53:f3:59:cc:ed:29:b8:7a:0e:3b:e9:c1:
                    dc:1b:d4:1b:1f:c2:b1:77:52:b1:f8:71:85:93:2f:
                    f4:d1:d4:84:f4:5e:b6:c0:83:fe:16:cc:20:14:9c:
                    f7:a2:1a:ab:98:98:c9:32:8c:52:97:aa:94:a2:75:
                    73:43:2a:5f:99:b1:f0:92:ef:2c:09:da:ed:6e:aa:
                    17:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:47:D9:AD:E2:33:7A:7E:DD:16:9F:0C:5D:CC:6C:3C:45:C2:DD:11
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/23fabada-4e47-4b3a-8da2-a1a9ce94b025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/23fabada-4e47-4b3a-8da2-a1a9ce94b025/3de8f34c6bef230f59f763da9b5d287a1a38f579.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         38:18:12:f4:63:22:3b:d9:09:07:b6:08:f6:b4:ca:34:13:2e:
         e3:ad:a9:9b:7d:c3:64:c4:36:42:33:ce:8f:cc:33:75:fc:ba:
         21:89:10:92:07:04:89:7b:04:14:09:51:67:89:64:e0:73:46:
         97:d6:c0:b4:fe:df:ec:3d:90:b8:f4:7c:8d:09:f3:83:a9:65:
         92:0d:90:a5:fe:51:0b:3f:2a:bc:ad:a5:8a:43:72:ac:aa:31:
         ac:44:d7:14:07:b2:0f:b1:85:25:ca:f0:0c:b4:d4:5e:58:ee:
         a8:d1:cf:d6:b9:89:25:97:eb:73:4e:27:f7:28:35:09:8c:c2:
         22:a4:72:4b:bb:ba:26:b4:b7:40:18:19:9f:a0:ab:fe:2d:46:
         3b:b4:58:e4:e1:eb:2d:95:f3:19:4c:56:0c:f5:83:f2:d1:22:
         7d:a6:be:91:f3:af:c7:01:31:d5:e6:47:2a:8d:8a:3f:a1:88:
         42:31:86:dd:c9:9d:19:c2:f9:69:f8:50:72:3e:33:f8:26:b7:
         7f:dc:49:c5:a6:a0:76:45:df:37:51:98:a1:04:de:2a:69:dc:
         ce:09:3a:09:bf:60:c0:5a:fe:50:f7:d2:19:b8:ba:82:42:af:
         60:a8:b5:10:ad:82:4a:ef:1a:9a:c7:e0:de:1b:3b:bf:3c:05:
         56:d0:74:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----