Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e4085e2acc9178583be5b538c67a2b960023204.cer
File:                     7e4085e2acc9178583be5b538c67a2b960023204.cer (raw, json)
Hash identifier:          KKu/PBap7XGQcrngFzEmQVI9UNEu1tbShCNH4+Zv2gY=
Subject key identifier:   48:C6:40:1C:C8:73:72:69:79:60:1F:9A:8F:AE:63:01:F7:F9:94:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBA1BC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e3504a86-a3a8-4f83-91df-3dc5616c05a4/7e4085e2acc9178583be5b538c67a2b960023204.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e3504a86-a3a8-4f83-91df-3dc5616c05a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 May 2023 13:22:15 +0000
Certificate not after:    Mon 20 Jan 2025 19:35:00 +0000
Subordinate resources:    IP: 2801:19:3800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15442364 (0xeba1bc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 29 13:22:15 2023 GMT
            Not After : Jan 20 19:35:00 2025 GMT
        Subject: CN=7e4085e2acc9178583be5b538c67a2b960023204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:73:bd:52:d4:aa:5e:77:37:00:1c:2a:82:6e:
                    69:46:58:8b:60:02:c0:3c:8d:6e:da:cf:f4:5c:af:
                    1d:88:db:1d:65:7a:6e:e9:47:a5:58:52:a2:ba:3c:
                    0e:90:48:ec:12:ab:23:fd:07:71:93:ae:15:f1:c8:
                    38:9c:e7:c8:0a:8a:d9:aa:4b:c4:7d:27:95:b1:e3:
                    05:29:79:ac:7f:0d:d6:ed:fc:94:b5:92:7d:11:c2:
                    d7:85:0d:e7:f9:bd:f3:b5:30:58:7b:59:af:03:a1:
                    8c:ac:fa:53:80:a2:ef:1a:2d:45:74:89:52:a8:28:
                    cb:e9:81:44:f8:1d:49:5c:75:cc:93:dc:06:82:82:
                    ab:30:cc:84:b7:2f:63:c5:45:7f:56:7e:97:40:5c:
                    50:1c:0e:29:e7:c7:66:25:6b:1e:c0:33:e2:8f:8d:
                    be:86:ce:8d:fa:54:00:b6:58:93:3e:9e:12:ca:6b:
                    31:dc:97:26:d1:ca:ca:4c:d6:d8:65:39:77:40:00:
                    30:6d:3f:74:7b:46:49:da:c8:cd:3e:d2:50:e3:c1:
                    6a:80:27:3a:0d:28:81:6f:29:e8:13:2f:e1:df:a2:
                    f5:9f:76:b1:44:00:f8:56:c6:66:b1:d2:2d:2b:46:
                    7e:94:5e:57:85:a5:d3:dc:02:d5:f0:2c:f5:17:a5:
                    34:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:C6:40:1C:C8:73:72:69:79:60:1F:9A:8F:AE:63:01:F7:F9:94:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e3504a86-a3a8-4f83-91df-3dc5616c05a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e3504a86-a3a8-4f83-91df-3dc5616c05a4/7e4085e2acc9178583be5b538c67a2b960023204.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:19:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         67:91:90:b5:16:5c:ef:30:09:04:c5:c1:41:2c:3f:73:c7:8e:
         99:49:7a:8e:5e:52:b3:81:49:67:d5:bc:e5:f4:f5:65:d9:52:
         0b:8c:60:86:24:dc:b7:6a:84:fd:51:7e:b5:ef:bd:8b:f6:8d:
         f7:89:eb:8a:21:10:85:e4:5f:3b:1a:83:e3:de:bf:3e:5e:3f:
         d3:2c:ef:3d:19:05:0e:16:d1:15:9a:9a:37:7d:68:9b:13:d6:
         dd:d7:f7:44:15:7f:50:7d:72:05:8c:f4:a0:e2:58:8e:d8:e2:
         6b:eb:6a:0e:d6:fc:b2:22:b4:a4:ca:db:bf:76:24:be:6d:a9:
         a4:0f:d8:7b:12:66:bb:2c:a2:7f:8f:f1:72:8c:43:6a:3e:28:
         86:99:0a:5b:08:86:b8:49:32:69:21:0f:97:7d:67:36:24:e2:
         ff:fc:f6:6f:7c:e8:8d:13:e0:a2:8f:ef:f4:40:eb:c8:27:97:
         93:e7:0d:3f:4d:3f:3e:f1:ed:c8:ad:5f:87:d4:b3:dd:0f:6e:
         90:a1:b3:42:d5:99:79:fb:8d:d7:5b:55:76:95:91:8b:df:bb:
         1b:98:8a:4b:0c:61:8a:54:06:5b:9e:d4:16:5a:52:71:b9:d5:
         3c:73:40:d5:ca:c1:c2:db:e5:1f:f9:6a:c8:7c:e2:bb:6c:e8:
         c9:3a:36:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----