Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/69e924ae350ef46f8fdff04296d0b4ba08a055f3.cer
File:                     69e924ae350ef46f8fdff04296d0b4ba08a055f3.cer (raw, json)
Hash identifier:          ERyughNVc28DNyXejPJKDajiyhnua5Ve1n7k+F6rLzk=
Subject key identifier:   82:C9:8A:A8:AE:BA:B9:56:73:E6:7B:2E:85:97:7C:4A:25:5F:E4:D6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010949ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8b3fa269-92b2-4fa4-b1f9-adfa99e41485/69e924ae350ef46f8fdff04296d0b4ba08a055f3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8b3fa269-92b2-4fa4-b1f9-adfa99e41485/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 03 Feb 2024 17:56:53 +0000
Certificate not after:    Mon 27 Oct 2025 15:32:30 +0000
Subordinate resources:    IP: 2801:1d5::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17385965 (0x10949ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  3 17:56:53 2024 GMT
            Not After : Oct 27 15:32:30 2025 GMT
        Subject: CN=69e924ae350ef46f8fdff04296d0b4ba08a055f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:c3:1f:74:2b:fb:28:90:fe:18:40:cb:43:1f:
                    45:e6:2c:af:2f:b8:16:f2:3d:e7:ba:d2:e5:80:af:
                    78:23:f3:f5:7e:5a:2a:34:13:e7:a1:36:6d:21:7f:
                    0d:28:52:a5:04:96:81:de:eb:2c:19:d0:6d:06:9c:
                    bd:b4:26:64:a1:13:b5:d7:63:be:85:fb:50:6e:03:
                    11:01:ca:cb:4b:65:67:73:bc:7d:0f:e1:af:f1:b3:
                    08:2f:60:4b:2f:8e:42:98:c6:4e:98:27:2b:84:cd:
                    ec:c0:38:92:4b:ab:31:88:44:40:f1:66:0a:4a:ee:
                    d1:56:df:59:cc:b5:ff:71:3e:59:d6:ff:30:3a:46:
                    98:b2:66:03:e3:32:67:80:ff:bf:cd:6d:16:74:45:
                    ef:2e:10:92:d5:2a:28:c8:03:80:0d:d7:eb:c7:72:
                    70:0d:84:9c:71:99:7d:32:4c:a6:ca:be:7c:c8:6e:
                    45:3a:25:bd:90:61:09:58:e5:31:e8:17:fe:0e:2a:
                    d8:d9:38:99:e0:c9:9b:48:06:4f:04:c3:6a:cb:c3:
                    de:a7:27:7d:eb:30:05:20:70:0b:45:78:93:92:de:
                    84:17:06:46:1f:66:09:db:51:3a:e3:71:d0:39:ed:
                    8a:15:2c:66:49:6c:2f:48:96:15:81:fa:56:73:a6:
                    31:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:C9:8A:A8:AE:BA:B9:56:73:E6:7B:2E:85:97:7C:4A:25:5F:E4:D6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8b3fa269-92b2-4fa4-b1f9-adfa99e41485/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8b3fa269-92b2-4fa4-b1f9-adfa99e41485/69e924ae350ef46f8fdff04296d0b4ba08a055f3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d5::/44

    Signature Algorithm: sha256WithRSAEncryption
         70:5e:3c:f2:4e:14:76:c4:b6:64:df:37:d9:9a:9a:c8:b9:69:
         c5:7b:31:6d:82:a8:d1:ab:b7:a8:52:5d:66:8d:77:63:b9:82:
         c5:81:89:68:7b:5b:5b:a6:57:93:76:e5:54:9e:48:75:aa:54:
         c0:99:b7:3a:b0:27:e6:56:d6:e0:93:5b:a1:8c:27:6e:47:51:
         0d:ae:21:11:f2:3c:c2:95:b1:2f:db:2f:53:00:47:42:b9:50:
         dc:1d:78:ec:87:1b:f4:2b:bf:cf:90:65:3e:ec:fc:bd:d1:ac:
         ae:4a:30:81:64:22:93:42:85:77:57:84:8d:de:0d:00:20:8a:
         fe:ef:07:89:f5:df:ca:cb:14:66:8b:83:f3:8a:2f:50:a1:82:
         a6:5e:58:58:78:f6:e7:4a:06:00:90:cd:f4:04:fd:f1:b0:82:
         ac:f7:e9:a1:e9:56:7c:ed:31:c3:c7:60:05:dd:4f:74:5c:1b:
         ab:ae:81:0d:1b:b5:6b:7f:71:dd:62:12:9d:51:95:5a:af:6f:
         de:52:d2:92:20:bf:ef:28:96:5f:48:a2:3f:96:67:e3:f3:af:
         7f:3a:ea:44:75:ca:45:2b:8d:92:6a:8c:c9:15:00:00:b1:f2:
         fe:27:d3:4a:e3:d6:71:23:48:1e:3b:b9:0c:10:9f:75:2a:9f:
         e4:2c:cc:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----