Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8231b46ffbc0826b5632cd643fa03d7d4bebd34b.cer
File:                     8231b46ffbc0826b5632cd643fa03d7d4bebd34b.cer (raw, json)
Hash identifier:          9pRYU883BxdY7NvY8DKVTNXNAgnKuiiMTrAeSZ6srTU=
Subject key identifier:   79:FC:02:00:A4:71:E1:D7:91:F9:25:28:24:5F:70:0F:F5:6C:A6:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103ECBB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/8231b46ffbc0826b5632cd643fa03d7d4bebd34b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 20:40:05 +0000
Certificate not after:    Sun 14 Sep 2025 16:22:24 +0000
Subordinate resources:    IP: 2801:17:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17034427 (0x103ecbb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 20:40:05 2023 GMT
            Not After : Sep 14 16:22:24 2025 GMT
        Subject: CN=8231b46ffbc0826b5632cd643fa03d7d4bebd34b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:30:f8:1b:00:ab:c9:ee:2c:d4:29:89:2a:c5:
                    13:08:27:c6:33:e0:88:cd:25:ed:fc:28:5c:7d:91:
                    a5:6f:b6:8a:5f:84:d0:87:29:99:af:53:24:3e:9f:
                    bb:5c:87:17:fc:c1:73:3f:77:75:23:c1:fa:4d:9d:
                    98:49:19:de:18:ff:8b:0f:32:c4:2b:e7:68:bb:79:
                    a9:45:21:00:be:02:4c:79:78:21:bf:52:bf:d2:e7:
                    dd:72:b0:97:1e:4f:11:0f:58:8e:d5:66:70:58:be:
                    eb:0d:a4:fe:b8:36:1f:b9:62:55:92:08:e2:92:52:
                    28:f6:75:57:d5:fc:44:0e:08:b6:e1:17:50:e8:f3:
                    6a:e8:99:ed:ec:0d:48:21:f0:df:7a:cc:cd:48:21:
                    ab:0f:70:94:8f:b3:e5:76:9e:46:f3:63:97:d1:75:
                    00:31:cf:91:e5:97:61:57:2b:a6:58:72:dd:8f:93:
                    90:10:3b:39:e6:47:7f:67:c6:69:10:b4:49:58:34:
                    9e:41:7b:d6:99:b6:a0:53:0e:61:c5:a6:aa:69:91:
                    4c:1d:93:0e:17:5d:5c:a3:65:8f:82:83:5b:f1:60:
                    eb:18:8e:7e:81:fb:d1:8b:42:29:d6:83:cb:e9:f2:
                    5d:bd:9e:21:44:cd:ec:45:1b:80:ca:59:cf:11:7b:
                    e2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:FC:02:00:A4:71:E1:D7:91:F9:25:28:24:5F:70:0F:F5:6C:A6:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/8231b46ffbc0826b5632cd643fa03d7d4bebd34b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         01:82:cd:d0:58:ee:0a:ed:75:b2:b4:83:36:3e:e4:4f:14:c6:
         9c:da:f5:71:d3:36:ce:ce:d9:8c:f4:5c:45:cb:18:c3:03:9c:
         b4:71:ee:d7:60:79:b0:eb:3c:58:8f:d4:c7:45:cc:f8:25:45:
         64:1f:71:71:c5:c4:c5:11:89:d1:50:54:8e:e5:f0:2a:19:be:
         0e:76:12:95:81:32:8e:a2:e5:a8:9c:30:96:c8:65:21:47:78:
         de:af:57:54:8a:4f:6e:bf:04:f2:41:89:7b:8a:a8:97:5e:e2:
         15:31:b4:2a:be:1a:a6:27:30:48:79:f3:40:46:24:67:53:80:
         60:bd:6c:82:3f:05:f5:c4:fb:85:cf:cf:6e:8e:01:7f:0d:05:
         40:e4:99:36:0d:06:ed:35:f7:12:28:da:a4:8d:b6:8e:b4:7f:
         1f:5c:3d:34:d5:01:1d:6f:3b:29:c8:f3:b5:82:3e:a9:d0:1b:
         a4:6a:68:97:bf:8e:01:39:bd:7d:7d:c7:3d:dd:32:ff:e4:e3:
         d6:81:7c:9a:22:0c:7a:86:69:86:b1:ff:aa:90:41:0b:2f:e0:
         53:b7:6d:c4:29:db:32:22:41:a2:76:7c:b5:9b:2b:6d:7b:b9:
         9a:be:72:3f:e1:51:e8:b5:26:2d:fc:28:a0:61:e5:3d:a4:ad:
         15:68:70:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----