Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fca2663f85a0db4664c5d56273c48e95dc819b2.cer
File:                     5fca2663f85a0db4664c5d56273c48e95dc819b2.cer (raw, json)
Hash identifier:          ahbvaKqyLPlk5TAfaeY4zWKds3c1QGkrGHuM7jJL8pE=
Subject key identifier:   B9:4F:3E:6A:19:A9:80:03:9E:7C:A1:28:87:59:F0:8D:72:39:D0:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECF408
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5fe52bef-49c2-4afd-be6a-8505f1ace69b/5fca2663f85a0db4664c5d56273c48e95dc819b2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5fe52bef-49c2-4afd-be6a-8505f1ace69b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 21:25:39 +0000
Certificate not after:    Wed 01 Jan 2025 15:03:08 +0000
Subordinate resources:    IP: 2801:16:3800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15528968 (0xecf408)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 21:25:39 2023 GMT
            Not After : Jan  1 15:03:08 2025 GMT
        Subject: CN=5fca2663f85a0db4664c5d56273c48e95dc819b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:72:5f:ee:a4:77:ed:30:e3:52:ff:1e:58:f7:
                    bb:c7:6f:3d:2d:54:be:5f:b8:ab:3f:c6:12:04:f5:
                    cf:9e:61:1f:f9:4a:c2:27:95:27:5e:eb:af:67:d7:
                    83:dd:9d:87:fe:11:96:20:ca:be:db:72:70:d8:3b:
                    aa:30:05:97:63:ce:4b:a6:a3:c1:0b:61:28:ca:2c:
                    01:6c:a8:1d:0b:e2:32:35:65:0b:59:d0:e1:7a:58:
                    a0:f1:ce:5d:e2:11:8e:b9:47:78:5c:7e:eb:98:ed:
                    6b:f3:82:80:ef:a1:d3:51:f6:4c:56:28:e6:96:c8:
                    44:1b:34:77:03:26:d6:a5:ca:e0:c3:fa:5c:34:6f:
                    44:55:b5:a1:9e:56:fe:08:32:8e:ab:62:6a:dd:5e:
                    dd:fc:f8:25:30:d3:84:b3:48:e8:71:35:37:5f:09:
                    fc:9a:ff:0a:2a:66:3b:ff:c1:4c:8c:59:cb:10:90:
                    40:cc:a1:48:da:40:b9:12:55:6b:d0:c8:ee:c3:25:
                    b0:30:0f:0b:7a:ea:93:34:65:e1:41:39:6b:58:63:
                    e3:19:3b:68:4f:c7:c8:d5:fe:35:5c:d3:b0:51:3f:
                    b9:53:e5:f8:77:44:42:f8:c8:59:df:b7:ab:33:ac:
                    59:b0:42:c4:12:2c:0b:59:aa:4e:e0:20:e3:6d:47:
                    45:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4F:3E:6A:19:A9:80:03:9E:7C:A1:28:87:59:F0:8D:72:39:D0:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5fe52bef-49c2-4afd-be6a-8505f1ace69b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5fe52bef-49c2-4afd-be6a-8505f1ace69b/5fca2663f85a0db4664c5d56273c48e95dc819b2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         51:82:34:7b:7f:4d:47:4b:97:3b:d3:0e:37:3f:fb:79:be:57:
         32:6c:40:a2:84:c2:7e:32:8b:c8:b1:1c:65:84:14:63:aa:75:
         2d:3c:06:4e:56:6b:a9:98:ca:53:37:48:ad:02:ef:d8:ac:34:
         65:cd:63:f8:63:e2:4f:0c:b4:d8:42:39:95:56:05:46:f2:b0:
         f5:bc:3f:40:8d:bd:1f:41:3d:ab:5a:fe:7b:30:ea:d1:14:21:
         66:06:ad:8b:6c:46:15:d1:95:2e:fe:fe:74:0a:2a:1a:5f:67:
         fa:67:fc:e6:0b:a5:1e:df:1e:5c:9e:02:bc:26:48:93:93:28:
         b8:ac:c6:69:14:de:0f:ca:47:1c:e6:55:ce:49:45:ce:72:b2:
         aa:a1:8c:5f:03:e4:75:f8:4d:43:0b:f1:72:bb:e5:7b:dc:d2:
         97:65:07:23:41:49:0c:e8:c2:8f:16:85:1b:23:fb:80:cf:a0:
         2f:80:66:b8:d9:b9:3e:36:df:0c:66:27:4c:33:94:73:48:d6:
         7b:66:c6:9a:98:32:fa:72:d1:f9:7d:1f:78:5a:dd:d7:b6:12:
         ff:73:76:40:bc:73:c5:b9:33:56:43:93:e7:b3:f5:b0:cd:14:
         b6:33:8e:e7:0c:87:6a:31:cf:ea:49:cf:3e:b2:d4:b1:fb:1a:
         e6:22:b9:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----