Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ebe12192c5a777cd4ac7f461d9df9d8027ae845.cer
File:                     3ebe12192c5a777cd4ac7f461d9df9d8027ae845.cer (raw, json)
Hash identifier:          A0winJ83xxEnyQvO+ys/6XRGVZ1bjrJTM4amZeJ6whA=
Subject key identifier:   A0:03:8A:CA:39:BB:A5:36:62:CC:0C:10:5F:2C:01:7F:A7:6A:DF:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC7BF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/3ebe12192c5a777cd4ac7f461d9df9d8027ae845.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 18 Jan 2023 21:34:11 +0000
Certificate not after:    Sat 05 Oct 2024 17:18:56 +0000
Subordinate resources:    IP: 2801:159::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14449648 (0xdc7bf0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 18 21:34:11 2023 GMT
            Not After : Oct  5 17:18:56 2024 GMT
        Subject: CN=3ebe12192c5a777cd4ac7f461d9df9d8027ae845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:5d:1d:77:07:8d:80:46:1f:80:47:63:04:15:
                    68:17:73:ed:3a:6d:82:52:b2:52:b8:70:61:46:e6:
                    96:9d:15:14:d2:18:2d:94:e1:58:43:45:8f:33:05:
                    b9:4f:5f:6f:2d:f9:d7:c0:61:e6:55:67:c8:13:80:
                    ac:36:8e:05:d8:54:99:52:85:8e:86:1e:0b:b4:0f:
                    4a:4a:29:15:ad:f8:dd:74:ee:28:63:5c:5c:69:a9:
                    96:64:32:6c:a8:94:64:71:ea:f7:18:cf:c8:08:80:
                    46:bd:c7:9d:ef:2f:c1:f1:55:04:f8:ee:a3:a2:d6:
                    76:59:4e:0a:a2:e1:f9:c0:bb:2f:2b:16:f7:fd:c1:
                    c2:ac:fa:8a:fd:1c:24:11:08:71:9a:09:6a:c5:50:
                    83:1f:ef:a7:8a:4d:5a:91:99:8e:c2:72:75:58:74:
                    e7:ba:1c:98:fa:98:3a:55:55:6e:1f:00:9b:5b:77:
                    ec:c9:dd:72:68:ea:ba:b7:06:d0:d4:38:c6:4b:d1:
                    ee:9f:8b:23:03:e9:82:90:86:e3:43:2d:c6:fd:75:
                    e0:b6:b5:c2:49:44:51:75:db:d6:90:1a:e7:e4:1c:
                    89:28:e4:53:f6:4e:61:c1:e3:d7:26:22:c6:d6:4f:
                    b6:44:e5:ec:7f:49:b0:12:94:f4:79:b6:e8:fc:16:
                    75:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:03:8A:CA:39:BB:A5:36:62:CC:0C:10:5F:2C:01:7F:A7:6A:DF:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a6633726-35df-4b6e-b11f-eb20fb2ebf30/3ebe12192c5a777cd4ac7f461d9df9d8027ae845.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:159::/44

    Signature Algorithm: sha256WithRSAEncryption
         1c:91:fa:b4:f8:98:26:44:38:1c:38:dc:0d:6a:96:5c:de:40:
         61:c9:fb:88:8b:5b:f8:6c:70:f1:fb:a2:4b:56:7e:a2:6b:6b:
         89:7c:51:60:a4:6c:bf:aa:2d:e7:48:85:d9:c9:73:3a:57:48:
         a0:1c:9c:cd:7b:8f:31:82:52:f3:f2:39:95:18:df:ff:75:03:
         0b:07:c4:3e:60:e3:04:3e:94:5b:39:52:03:ff:b9:97:26:96:
         2a:9e:91:8f:16:97:50:83:96:ae:64:9a:f5:33:db:6c:0f:de:
         ac:d7:a4:7d:0d:28:fe:38:5f:e6:56:94:67:3b:69:11:c1:d8:
         80:de:9b:d1:40:b6:ab:b1:a9:79:7b:fa:fd:01:2d:bd:2c:3d:
         01:f7:05:1a:83:03:7f:c7:5d:37:0d:eb:f0:34:d1:e8:59:cb:
         09:fe:01:59:6f:3c:09:75:7c:35:e8:22:b6:6a:ae:10:13:b3:
         fd:fe:ce:60:b3:e6:72:c2:6c:69:2d:05:1a:ce:8d:89:d8:aa:
         13:73:fa:17:fd:de:9c:48:d9:6a:84:d3:9d:c4:22:90:71:3e:
         93:91:5f:63:9e:2e:f8:a8:fd:35:3d:a0:1c:bc:57:46:30:42:
         e2:6e:20:ff:7a:e9:16:63:9b:55:51:5e:ff:6f:8e:cf:e4:41:
         4c:1d:f4:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----