Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5acbc1040078c2c220281be4e4aebb06b6460703.cer
File:                     5acbc1040078c2c220281be4e4aebb06b6460703.cer (raw, json)
Hash identifier:          i9SMis/oISAJk8nJXGpm+QjPsTBzR6otZ6Kr5JrseYg=
Subject key identifier:   22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F98E3E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/5acbc1040078c2c220281be4e4aebb06b6460703.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Apr 2021 19:37:29 +0000
Certificate not after:    Tue 15 Oct 2024 15:50:35 +0000
Subordinate resources:    IP: 2801:1e:6800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16354878 (0xf98e3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 19:37:29 2021 GMT
            Not After : Oct 15 15:50:35 2024 GMT
        Subject: CN=5acbc1040078c2c220281be4e4aebb06b6460703
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:f7:4e:e8:23:17:d2:fb:9f:fd:e2:44:7e:
                    e1:bd:e1:d3:1f:ed:59:ca:3b:f1:a0:be:83:80:a8:
                    16:0c:67:3d:75:df:91:b4:0c:69:3c:db:05:14:f3:
                    37:c6:c7:0e:76:fb:50:89:bc:30:92:b9:bb:2f:74:
                    c2:01:81:3d:0f:68:c6:5d:76:35:52:b0:b3:9a:14:
                    bd:3b:d2:20:5b:5a:42:4e:06:f8:a3:9b:7c:1b:6c:
                    04:e9:9e:e0:78:d0:c5:42:c1:05:84:67:96:b3:72:
                    ba:dd:71:1f:b1:ca:81:df:f2:2a:2b:bd:03:e9:b1:
                    eb:a1:a3:62:b6:85:a7:99:85:91:6a:c8:49:21:78:
                    46:36:c6:5c:17:f9:83:f2:93:92:ea:b4:64:52:62:
                    cb:78:77:2d:29:da:8f:85:ce:dd:fe:fb:c9:47:6b:
                    ec:da:83:80:c5:f8:80:8d:3d:7d:c4:0b:8f:56:40:
                    17:e2:59:d0:a4:af:4e:7d:2c:ce:16:8c:3d:e0:d4:
                    37:37:d9:41:79:65:a7:db:e3:93:25:f2:11:e1:88:
                    c0:d5:01:08:ed:67:fd:b3:eb:a2:37:c0:0a:ca:fe:
                    4b:5d:9b:b2:14:5d:80:30:6c:84:d3:bc:4a:33:57:
                    48:a3:19:c5:25:24:55:30:a3:55:7e:e6:29:c9:45:
                    5c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:BD:67:2F:43:87:2D:5D:46:CE:C3:29:6D:5C:C5:C6:C1:78:24:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fbae2463-e3e9-4dfd-95de-5339cc5d1498/5acbc1040078c2c220281be4e4aebb06b6460703.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:64:e5:22:c8:eb:88:3c:56:9a:73:e4:9a:bd:7f:1b:72:eb:
         0e:3e:26:fc:6f:f9:a9:01:0c:3a:b9:f7:c8:e3:1d:c1:d3:8a:
         eb:7b:3d:d2:73:19:d2:03:49:32:42:54:43:33:00:9b:cd:26:
         43:44:36:1c:94:58:bc:a8:ea:cc:bc:1c:cf:72:e5:83:14:35:
         28:e5:6b:6a:25:fc:45:36:3b:8b:43:0e:0d:c0:6e:af:5f:8c:
         1d:bb:ed:2a:a9:e6:9f:08:26:e6:06:30:01:3e:a3:3d:ab:16:
         1a:fc:8f:5a:eb:19:87:f5:75:de:b9:2c:2d:11:a3:0d:da:c6:
         c1:e1:81:83:a0:d5:7b:34:2a:fa:ff:87:b0:8d:0c:bc:5d:7c:
         8f:68:66:dd:ff:af:6d:bc:11:cf:dc:45:4b:40:55:7f:5f:f8:
         81:14:fa:94:1e:26:7f:07:7d:1d:7e:2f:1a:cf:3c:9a:d0:24:
         42:9c:72:78:7b:9b:5e:3e:0a:a6:38:a8:9c:dc:6b:6d:62:fc:
         58:da:a8:bc:b2:fb:88:b4:cf:44:5d:2e:d7:1c:c8:86:a9:35:
         9d:aa:1b:5d:60:28:e1:e7:5c:99:f1:54:c7:33:8f:6c:d0:1e:
         4d:c5:d4:ad:37:64:6e:a9:be:e5:ae:04:9b:f9:93:5a:94:5f:
         28:bb:ce:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----