Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f9c704a60f5592105a7f0588abf23c15dc54a5f.cer
File:                     4f9c704a60f5592105a7f0588abf23c15dc54a5f.cer (raw, json)
Hash identifier:          rhsS8Bfa6+ji7MVFj+QkyvXC4WCUwGdfTJPIeSpZl5w=
Subject key identifier:   65:31:CA:FF:38:85:FA:A4:5C:D8:E1:88:8E:C1:C7:68:6F:D0:92:46
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA48A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5177f061-0ed9-460f-baf1-dea63b0290d1/4f9c704a60f5592105a7f0588abf23c15dc54a5f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5177f061-0ed9-460f-baf1-dea63b0290d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 21:03:56 +0000
Certificate not after:    Wed 03 Jul 2024 21:03:43 +0000
Subordinate resources:    AS: 264823
                          IP: 2801:118::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15354021 (0xea48a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 21:03:56 2023 GMT
            Not After : Jul  3 21:03:43 2024 GMT
        Subject: CN=4f9c704a60f5592105a7f0588abf23c15dc54a5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0f:fd:38:de:dc:91:6f:36:0d:b6:22:ef:4a:
                    ac:2a:e3:b5:36:94:c7:dd:96:c9:ab:55:ae:a2:09:
                    6a:42:c1:12:2e:07:1e:2e:af:09:ad:ae:45:65:0a:
                    fc:29:10:10:29:c3:5e:40:17:75:a8:dc:1a:2a:07:
                    9b:ca:3a:3b:61:ca:32:e5:02:9e:bf:ef:6f:f1:40:
                    9f:71:8e:7a:25:5b:4f:44:bf:93:6c:bf:d5:31:d4:
                    3b:d4:cc:29:b7:28:61:b6:6d:91:18:d1:09:a5:88:
                    88:c5:69:a9:86:52:e1:aa:0d:f8:c5:04:ef:94:5d:
                    c0:bd:23:c3:0c:f7:c7:9b:57:33:ef:5a:99:f2:38:
                    ec:f1:14:39:06:86:64:40:db:e4:22:7e:f6:b4:c4:
                    84:42:2f:e4:71:ea:d3:e2:e1:d1:df:ef:d4:c1:bd:
                    f0:97:b0:e2:28:c2:69:f5:0a:38:e7:02:c9:70:d4:
                    bf:e7:0d:78:d4:5a:6f:7a:af:b3:6c:b6:fa:d7:45:
                    40:81:83:38:c9:c2:1d:1d:a6:96:6a:d7:d3:37:ee:
                    7c:e4:67:c2:f3:54:76:d6:08:91:49:b5:71:e1:de:
                    f0:03:39:85:43:05:54:27:2d:56:e5:36:b3:0e:03:
                    1f:32:36:b9:6e:f2:eb:e3:df:83:0d:f7:a0:a8:dd:
                    26:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:31:CA:FF:38:85:FA:A4:5C:D8:E1:88:8E:C1:C7:68:6F:D0:92:46
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5177f061-0ed9-460f-baf1-dea63b0290d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5177f061-0ed9-460f-baf1-dea63b0290d1/4f9c704a60f5592105a7f0588abf23c15dc54a5f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:118::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264823

    Signature Algorithm: sha256WithRSAEncryption
         35:0d:09:c4:18:ad:fe:72:c7:08:1f:59:ad:d8:27:20:96:3f:
         67:e2:a3:1a:92:5e:3a:64:89:f2:71:52:17:2d:cb:82:c6:63:
         b8:f9:51:4c:b3:aa:9e:52:d1:15:57:ed:15:63:31:7e:36:c3:
         d2:0e:80:bc:dc:41:7c:7c:2d:35:ff:ca:d2:b8:41:94:3c:3e:
         8a:40:ae:d1:bf:62:b5:67:08:36:c2:2b:d0:22:2c:ff:a7:b7:
         03:5c:b1:fe:64:92:74:64:4e:43:0a:90:29:b0:c3:e0:51:f7:
         5a:0c:25:9f:04:e3:3b:b4:0c:39:c1:32:e3:3c:c1:fb:78:66:
         38:ca:16:af:55:2a:51:d0:a3:3b:a4:ef:7c:93:17:c2:0b:a2:
         c3:d1:da:ee:a6:e2:aa:b6:5b:e7:e3:fe:e3:7b:c1:c9:0a:5f:
         b7:e5:05:d8:ec:1f:64:6f:53:96:d8:d3:ec:28:57:a2:20:3d:
         ab:0f:1e:3f:99:dd:9c:87:a8:84:d1:33:e3:1c:ab:5e:fb:2e:
         90:6e:b2:32:92:35:9f:8b:b0:a9:46:85:48:1c:a9:36:bf:d6:
         41:c3:c0:c8:a7:79:16:99:91:41:d0:bc:d3:8b:70:5b:be:5d:
         d7:91:c3:6c:3c:78:e2:ae:27:e5:ab:4d:12:be:9d:e3:b2:8e:
         97:af:28:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----