Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8426e97aca03c783498e5affa3fc289fc57e0369.cer
File:                     8426e97aca03c783498e5affa3fc289fc57e0369.cer (raw, json)
Hash identifier:          OaaqaaPe6GVzmhe98yaROWZwn1EF3rrZu6IVd4B/HV8=
Subject key identifier:   18:6F:F3:6F:B8:A8:49:47:58:30:59:C6:C6:E5:29:48:58:9A:F3:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAB980
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d6156742-0757-4d2e-8654-17faeefca3d0/8426e97aca03c783498e5affa3fc289fc57e0369.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d6156742-0757-4d2e-8654-17faeefca3d0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 16:11:58 +0000
Certificate not after:    Tue 19 Nov 2024 17:22:22 +0000
Subordinate resources:    IP: 2801:1a:9800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15382912 (0xeab980)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 22 16:11:58 2023 GMT
            Not After : Nov 19 17:22:22 2024 GMT
        Subject: CN=8426e97aca03c783498e5affa3fc289fc57e0369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:51:d3:50:d9:09:19:9b:6f:dc:68:b5:3d:0a:
                    d9:77:fe:c4:8e:f4:0f:ba:fb:e5:10:a4:9d:c7:d5:
                    91:96:fa:0e:b0:c2:79:89:6b:d0:aa:a1:2d:49:14:
                    da:d8:62:42:d1:ad:5a:fa:44:79:4f:57:e5:64:76:
                    83:6e:90:4e:15:2d:bd:de:1c:71:97:62:6c:a6:97:
                    f1:9b:90:65:92:50:06:7a:60:41:96:96:4e:7f:a1:
                    96:0c:b4:a2:79:a2:bc:94:a6:c7:b9:29:59:ef:82:
                    a7:a0:33:f3:48:9c:fa:fd:1f:89:94:75:69:b7:ae:
                    28:7c:d4:2e:46:6a:c2:10:13:47:3b:5b:41:1c:76:
                    a4:96:63:d7:4f:91:48:10:ef:a6:0b:e7:b8:ec:6e:
                    3e:81:90:fd:6f:c8:b8:3d:18:73:81:bf:60:a9:b6:
                    af:da:95:de:e9:c5:55:32:14:76:e4:bd:4b:e8:84:
                    ee:b4:a5:9f:ae:f4:66:2b:84:a9:4c:b2:31:1f:58:
                    db:82:e3:6f:f1:54:e6:d0:77:8c:ee:09:84:4e:34:
                    16:42:9b:cf:14:b3:09:2d:60:a1:62:9a:17:67:56:
                    59:69:44:3f:22:ef:e6:7f:55:b2:01:3a:c3:1a:bf:
                    72:5f:ed:a7:23:47:b5:ce:b9:a7:07:ae:72:6b:18:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:6F:F3:6F:B8:A8:49:47:58:30:59:C6:C6:E5:29:48:58:9A:F3:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d6156742-0757-4d2e-8654-17faeefca3d0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d6156742-0757-4d2e-8654-17faeefca3d0/8426e97aca03c783498e5affa3fc289fc57e0369.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         0e:f0:05:0a:c0:f5:b2:b8:62:9a:04:12:5f:00:ff:65:7e:02:
         37:a0:1b:15:a4:82:77:0d:52:db:27:f6:3e:10:c2:bb:af:0c:
         6e:c8:fb:a5:34:e7:42:71:80:2a:03:bf:f2:44:d2:b1:1c:95:
         f7:9c:55:ad:07:a5:e1:6e:e6:5b:21:bf:73:aa:f5:b1:07:85:
         dd:04:6e:1f:52:86:9f:27:8a:e7:ac:19:83:b7:cf:a6:fc:ac:
         35:4f:e4:a0:2d:e3:12:ac:68:30:8e:0a:1b:ca:2f:51:bb:64:
         51:56:af:b5:44:ba:df:6d:a5:82:0f:3a:ea:f0:c2:80:7b:3a:
         0b:cc:57:cd:50:35:2e:fe:7d:1d:75:11:0e:67:68:fa:b0:e0:
         b6:6d:07:8b:ff:5a:48:fc:aa:df:d4:c5:4f:c7:ea:9f:2e:5f:
         c0:e3:0c:87:3e:23:cd:3f:d6:69:0a:2e:88:d3:f4:9d:3a:e4:
         dc:5a:4c:d9:4b:e3:aa:33:21:21:a9:f8:ad:c0:e4:af:fb:ee:
         23:31:26:b1:33:b8:0d:85:5b:9f:5f:93:16:e8:03:84:76:dc:
         8d:81:ca:d0:1e:2f:f6:04:83:b8:af:61:a8:f8:25:84:0c:9b:
         6e:cd:74:e1:cd:c2:0f:8b:e8:4b:59:ce:59:81:2a:1f:b1:0e:
         67:72:ba:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----