Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ddde838997f4341200fa2d13fa72b1392b8aecb.cer
File:                     4ddde838997f4341200fa2d13fa72b1392b8aecb.cer (raw, json)
Hash identifier:          3GpQjqfjPhRT1G/3C0xD4pH/XrWpNu7kcs4xJ8IEamw=
Subject key identifier:   D5:2F:85:E9:51:0D:79:32:BA:3D:CE:A5:83:35:D3:BD:2C:56:9F:21
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E95BC7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ec1f4087-45d6-46b1-aac4-6cc38c8197f1/4ddde838997f4341200fa2d13fa72b1392b8aecb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ec1f4087-45d6-46b1-aac4-6cc38c8197f1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 22:12:29 +0000
Certificate not after:    Wed 12 Feb 2025 20:32:05 +0000
Subordinate resources:    IP: 2801:1d:3800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15293383 (0xe95bc7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 22:12:29 2023 GMT
            Not After : Feb 12 20:32:05 2025 GMT
        Subject: CN=4ddde838997f4341200fa2d13fa72b1392b8aecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:7c:e2:a6:15:b1:04:6d:b8:bd:b2:9f:dc:61:
                    09:30:9b:f3:b9:55:b4:71:d4:64:84:1e:e4:87:ca:
                    af:df:00:a3:11:73:75:e6:b0:a7:9f:e4:a4:57:31:
                    00:66:bf:c4:7d:83:01:e7:b4:19:b3:ac:57:09:65:
                    d4:96:0d:5d:86:4c:ed:f2:b9:32:b1:06:1f:94:5e:
                    07:ec:f3:21:99:96:11:5e:ca:67:12:b3:89:12:9a:
                    a6:e2:26:7c:1e:41:5b:f3:da:8f:e0:c4:29:08:97:
                    36:39:1c:df:18:b1:59:d7:00:b0:fd:79:7c:b6:59:
                    14:ff:d7:79:10:60:c5:05:1c:97:84:7b:aa:03:15:
                    3b:9f:37:e1:44:93:d5:f6:02:a7:e2:da:0e:9b:a9:
                    c0:47:fa:90:6c:05:3d:e9:20:1a:75:8a:94:e1:1c:
                    60:b7:01:f6:52:5c:b3:8e:e9:ee:7e:29:cd:08:73:
                    bd:2a:92:43:4f:f0:bb:85:3f:97:05:2a:8d:b3:d4:
                    d3:d4:76:d0:f1:13:ec:34:59:96:43:12:e8:2a:9c:
                    84:d6:30:18:61:57:3f:a1:08:6a:66:10:0c:8a:41:
                    2c:ab:d1:e2:83:0b:90:a0:4e:f8:e9:f0:31:73:a4:
                    09:a3:d8:03:9f:22:e4:52:c0:c2:a8:f2:40:e8:4a:
                    79:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:2F:85:E9:51:0D:79:32:BA:3D:CE:A5:83:35:D3:BD:2C:56:9F:21
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ec1f4087-45d6-46b1-aac4-6cc38c8197f1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ec1f4087-45d6-46b1-aac4-6cc38c8197f1/4ddde838997f4341200fa2d13fa72b1392b8aecb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:27:9a:b5:db:78:4b:97:e9:47:b8:96:6d:6a:d9:4c:2a:4f:
         d9:33:08:d3:76:31:60:4f:6c:77:51:06:45:95:c9:ba:2b:01:
         89:48:c2:75:d3:ba:79:86:a2:4d:32:e3:18:e0:9b:cc:ef:ba:
         ea:52:d4:9e:12:1d:90:c4:9a:98:d9:1e:c9:b8:be:23:aa:56:
         2a:d6:2f:0b:78:8f:91:ab:eb:26:85:89:59:00:bb:74:2b:c7:
         b6:80:95:1c:69:aa:ce:10:87:26:00:be:38:b9:96:ea:a1:a7:
         a1:9f:75:81:73:76:1e:c3:66:72:d7:bd:91:5e:40:e2:7c:4f:
         43:8d:e9:eb:cb:35:23:b4:21:7b:1f:15:75:88:2a:47:46:b4:
         d8:5d:2f:1c:eb:6a:c4:74:4e:cc:0e:c6:fd:96:cc:31:be:f0:
         f5:66:69:e5:bb:57:5f:06:58:d3:1c:40:a1:32:e1:16:e6:ef:
         de:84:6f:57:66:01:49:e2:fa:e5:d5:fc:ab:77:fe:93:a4:e9:
         42:35:48:fc:62:fc:0d:62:f4:72:7f:0a:2b:5a:d8:32:0d:03:
         c7:5a:60:9e:a7:4f:d7:01:bb:67:2c:5e:e9:10:8a:c9:1e:1d:
         7c:6a:b5:62:bb:ca:b3:3d:93:5e:99:37:f3:c6:61:73:67:c5:
         c3:c2:a9:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----