Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8a6e1009a335fd957b7af520db090a0167a089ab.cer
File:                     8a6e1009a335fd957b7af520db090a0167a089ab.cer (raw, json)
Hash identifier:          89P5CkBu8Y7mIr2QoPB9t1G3nX+K2ppXuT4JKVVyXYk=
Subject key identifier:   30:F1:7B:2F:1C:EF:52:7F:C7:23:D8:B7:22:8A:CB:62:29:2D:2A:05
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F467A0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a0dba9b7-1791-43ac-9525-09d1f621cbdc/8a6e1009a335fd957b7af520db090a0167a089ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a0dba9b7-1791-43ac-9525-09d1f621cbdc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Aug 2023 13:27:21 +0000
Certificate not after:    Mon 08 Jul 2024 15:19:46 +0000
Subordinate resources:    IP: 2801:12:1800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16017312 (0xf467a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  9 13:27:21 2023 GMT
            Not After : Jul  8 15:19:46 2024 GMT
        Subject: CN=8a6e1009a335fd957b7af520db090a0167a089ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:0b:97:2c:08:2b:4c:d6:c4:20:21:f3:be:
                    6a:7d:b4:ba:6a:96:b1:f0:cd:00:ac:cc:3f:61:6c:
                    1c:37:a5:39:c7:42:d4:9b:0d:16:ba:b9:4c:e4:fd:
                    4e:5b:a7:48:6b:ac:d9:c7:1c:7b:7f:04:43:00:39:
                    39:4a:58:2f:1b:70:4c:00:44:f4:43:a9:6a:52:13:
                    4c:5e:ac:a8:7c:9a:3b:de:4d:1d:21:d8:c8:71:12:
                    d9:96:a5:06:e0:53:77:28:83:a0:f1:17:21:b8:c4:
                    14:3d:d1:3b:98:5c:c4:5f:d9:43:c9:a7:7d:77:9f:
                    36:4b:53:23:5c:c0:5c:95:81:b9:c0:c6:5d:60:dd:
                    f8:ca:54:7d:2b:30:98:65:b3:37:43:c9:21:28:b7:
                    53:cc:eb:6e:5c:dc:77:3a:ee:89:31:34:60:35:1a:
                    57:b3:9c:b9:b2:12:7d:78:09:4e:a8:0b:83:59:d4:
                    82:f2:9d:40:1c:8c:99:06:35:49:96:ff:5a:93:f2:
                    b1:9a:4f:9c:49:40:50:95:ea:38:c3:20:9f:66:5e:
                    0b:15:85:6b:c7:43:f8:9c:1b:ea:72:de:f5:f9:d1:
                    b7:5d:5f:4e:6a:1c:d6:95:3d:89:14:a8:e5:6d:55:
                    b4:f9:f3:93:57:82:75:3d:0d:74:18:69:8d:f7:da:
                    cc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F1:7B:2F:1C:EF:52:7F:C7:23:D8:B7:22:8A:CB:62:29:2D:2A:05
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a0dba9b7-1791-43ac-9525-09d1f621cbdc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a0dba9b7-1791-43ac-9525-09d1f621cbdc/8a6e1009a335fd957b7af520db090a0167a089ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:a8:c3:55:f3:f6:39:41:70:97:5e:54:18:7b:1c:64:ee:71:
         13:ae:2d:63:85:64:0a:28:48:53:6b:51:8a:71:e0:12:95:e5:
         05:6a:e9:cf:0f:0f:b5:c7:61:23:eb:f1:9e:5d:39:0f:03:76:
         0a:56:9a:3d:65:21:ee:41:24:8f:35:90:11:21:e1:90:6a:7d:
         16:a1:fe:4c:11:2a:75:eb:e3:c2:ef:f9:ff:69:b7:1d:8a:69:
         86:2f:00:00:56:38:3a:48:cf:eb:f5:fd:b4:65:db:b6:77:c7:
         32:a1:46:43:0a:2b:a9:f8:11:74:a6:b4:af:67:dd:c4:bb:16:
         ca:30:af:28:86:67:ce:08:f7:9e:0f:c2:4a:9e:45:dc:13:6a:
         43:59:b3:f7:11:53:1b:72:d6:8a:81:ba:77:26:10:53:7e:c5:
         b6:1e:86:c9:73:6a:8f:96:ba:b4:fe:be:16:c7:70:0c:a5:b9:
         17:3a:ed:e5:4d:1d:38:60:79:7e:4e:8d:10:bd:f9:fb:aa:95:
         af:b5:93:e0:89:08:92:99:44:b4:a7:d0:fb:10:8a:90:88:c8:
         b3:b3:72:67:ac:7f:1b:a9:d4:06:da:90:f7:46:26:e6:e7:07:
         f5:8c:7f:df:05:5a:68:d3:40:8b:b8:b4:bc:a6:b9:0d:ce:e2:
         15:8c:58:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----