Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e9d7c98777852cfea6473cdd2738839911e021a.cer
File:                     6e9d7c98777852cfea6473cdd2738839911e021a.cer (raw, json)
Hash identifier:          H+lGp0Ta9GKC+m0RoHZ5dsX+I3I60Jmcr1jWrKXpKUY=
Subject key identifier:   42:EB:59:8F:DF:6F:2C:02:F6:7F:D4:EA:C9:DF:A0:85:9C:51:3B:4C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA2628
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/406faf67-5cfb-4c59-a723-6f3834c2f5c6/6e9d7c98777852cfea6473cdd2738839911e021a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/406faf67-5cfb-4c59-a723-6f3834c2f5c6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 May 2023 14:26:02 +0000
Certificate not after:    Fri 16 Aug 2024 20:43:33 +0000
Subordinate resources:    IP: 2801:142::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15345192 (0xea2628)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 14:26:02 2023 GMT
            Not After : Aug 16 20:43:33 2024 GMT
        Subject: CN=6e9d7c98777852cfea6473cdd2738839911e021a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:ad:09:44:49:7e:99:d8:b9:b5:bb:11:6d:b3:
                    02:ac:f4:0b:2d:46:b6:e5:30:3e:bf:47:2c:24:39:
                    92:4f:8d:dd:8c:f8:fa:6a:57:01:e1:08:97:31:27:
                    87:5f:1b:99:f0:2a:80:a6:fc:d9:77:fe:04:4a:2f:
                    5f:c7:44:5b:34:58:57:43:1e:10:a0:c5:86:18:ae:
                    28:e8:21:ba:97:12:e6:62:62:bb:2f:84:86:81:15:
                    d9:7a:7b:e9:a5:d5:4f:b3:0b:7d:99:08:60:10:fe:
                    ee:de:94:82:7d:34:58:df:39:e7:da:79:7f:0d:40:
                    71:ee:16:e7:ba:03:60:5a:3a:4b:4a:7d:09:ef:b5:
                    13:b9:e0:97:48:36:ca:c5:d5:25:dd:5a:b5:13:a4:
                    20:3a:c3:de:d0:10:6a:6a:d5:10:ff:07:a3:54:f7:
                    f3:87:65:d9:ee:05:22:46:cd:b8:86:6f:ea:4e:37:
                    c7:a9:a2:99:6b:f2:57:45:e4:42:91:46:6b:37:b2:
                    6e:be:de:1b:3f:54:06:97:7a:1c:a6:bb:4a:9d:a5:
                    4f:21:cc:98:1f:62:8e:88:ff:db:fe:0a:ab:53:ed:
                    7e:60:11:2e:f3:e3:2a:ac:41:a5:db:ac:ab:fc:d6:
                    63:45:35:7c:55:8b:3f:6d:23:9f:59:e7:ab:64:52:
                    f2:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:EB:59:8F:DF:6F:2C:02:F6:7F:D4:EA:C9:DF:A0:85:9C:51:3B:4C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/406faf67-5cfb-4c59-a723-6f3834c2f5c6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/406faf67-5cfb-4c59-a723-6f3834c2f5c6/6e9d7c98777852cfea6473cdd2738839911e021a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:142::/40

    Signature Algorithm: sha256WithRSAEncryption
         56:ed:05:e6:52:a3:0a:ee:d0:68:34:7e:6d:39:e8:11:6e:39:
         24:fa:97:1e:6b:79:54:8a:c2:f0:28:63:7c:68:13:1b:17:99:
         a7:f2:29:c4:1c:84:ca:f6:20:c1:8a:1c:d9:50:c3:b8:36:4c:
         5d:ab:40:6f:6f:f0:e5:e5:76:70:eb:a8:90:a4:14:9d:5a:71:
         c5:6c:3c:77:5b:40:bd:b7:7f:ac:b6:69:fc:38:39:26:9e:f4:
         14:1e:83:69:7d:02:69:ac:df:21:11:a2:78:50:b7:fd:b8:8d:
         b9:e5:c9:5b:79:72:1f:98:62:0d:62:73:14:4b:74:eb:4d:79:
         09:04:72:46:89:fd:ad:9f:62:fa:c4:ff:aa:75:ca:7f:56:c3:
         17:95:72:ad:3c:6b:2d:f9:97:1c:84:d1:60:09:58:b8:fb:f5:
         de:44:80:f1:27:30:e0:00:5d:3d:6d:00:b2:9e:4e:b3:0f:47:
         4f:b1:e1:a7:19:40:12:56:53:d0:94:3c:23:b7:1b:1a:07:f5:
         98:b8:64:4e:60:0e:6a:e5:f8:54:e8:93:b3:9a:71:06:42:15:
         bd:98:c1:15:6a:fb:11:df:2d:83:f9:67:2c:2b:87:e0:2f:61:
         48:92:5a:c4:43:84:24:5d:86:89:81:ad:10:f3:3a:91:32:8f:
         26:4b:13:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----