Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a22a8eca30c2be9a1d2359f357c932b9c39e0453.cer
File:                     a22a8eca30c2be9a1d2359f357c932b9c39e0453.cer (raw, json)
Hash identifier:          GNMGrLIMPJWWcOXFkQa9o9NiHbfypQh9gCxS3nnbk+Q=
Subject key identifier:   CB:07:94:C8:4E:7F:BF:20:51:26:CE:D3:59:DE:13:EC:3A:BA:C7:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F654B6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0325165d-67fd-4869-b56e-78b3074b62e2/a22a8eca30c2be9a1d2359f357c932b9c39e0453.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0325165d-67fd-4869-b56e-78b3074b62e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 23 Aug 2023 15:16:09 +0000
Certificate not after:    Tue 23 Jul 2024 16:43:09 +0000
Subordinate resources:    IP: 2801:13:5800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16143542 (0xf654b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 23 15:16:09 2023 GMT
            Not After : Jul 23 16:43:09 2024 GMT
        Subject: CN=a22a8eca30c2be9a1d2359f357c932b9c39e0453
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:bc:61:33:93:b3:72:5f:33:00:32:67:c8:
                    4a:5b:79:4c:eb:b4:c8:18:45:6f:52:32:79:a4:db:
                    43:63:a0:cb:e5:ca:6e:86:36:77:fc:4c:19:81:0c:
                    a7:40:41:9f:a9:da:04:48:ab:25:30:cf:03:c9:83:
                    66:47:42:32:be:5c:56:eb:b7:f5:40:ef:29:58:c0:
                    bf:63:e3:e7:d5:8c:a5:65:65:b4:53:f8:f0:eb:77:
                    5d:71:3a:a9:59:63:ee:d7:84:7b:07:ee:fe:3a:7c:
                    08:2b:c6:27:c7:52:62:95:28:6c:81:27:3a:c5:7d:
                    80:58:8a:7a:be:d1:7c:3e:2f:5c:6f:5f:56:32:2d:
                    bf:84:2b:1a:2d:da:f9:9d:88:40:3c:71:78:45:ad:
                    59:a5:5b:a3:c2:fc:25:ec:2f:2a:20:25:e5:68:b6:
                    05:be:27:df:f2:3d:e7:65:7f:84:ee:95:6b:86:30:
                    5d:83:fc:71:fb:fd:ea:ee:bc:c3:be:71:58:1c:b1:
                    09:c6:80:b4:dd:dd:68:f9:b2:08:b1:e7:a9:e7:e7:
                    cf:4c:b9:cd:61:f7:10:76:5f:36:db:04:55:fb:d2:
                    dc:a4:29:ca:c7:02:c8:43:6a:2a:11:f4:ea:4f:43:
                    0f:fd:ca:88:99:7e:bc:6d:86:ee:0b:4e:46:17:b9:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:07:94:C8:4E:7F:BF:20:51:26:CE:D3:59:DE:13:EC:3A:BA:C7:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0325165d-67fd-4869-b56e-78b3074b62e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0325165d-67fd-4869-b56e-78b3074b62e2/a22a8eca30c2be9a1d2359f357c932b9c39e0453.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:b2:2d:03:94:83:1c:d6:57:ad:1f:cb:a6:41:93:1f:d2:15:
         bc:be:cd:b1:e2:3e:c6:31:a3:2d:cc:68:7d:9c:5b:c7:1f:e7:
         20:61:05:cd:19:01:59:fe:59:dd:d9:3f:d2:66:a1:4b:19:8b:
         51:f1:59:b7:b7:d1:f3:7e:21:44:57:42:ea:f0:22:55:d9:31:
         55:32:d2:33:15:89:9b:ae:ae:d4:0d:84:f7:40:36:35:57:65:
         2a:fe:e9:19:d7:24:ac:c3:46:17:47:ff:a8:be:06:e1:da:25:
         cc:a4:b7:8c:50:fe:e7:ca:a1:13:d5:a2:05:48:c1:f4:f2:25:
         af:9f:e3:59:e3:49:3e:95:00:6a:db:12:4b:62:dc:f9:70:12:
         06:43:45:eb:82:ea:85:1e:f1:f0:58:66:d9:05:1b:bf:70:72:
         66:b8:03:25:b4:26:1a:4e:cb:d9:61:ef:5b:7d:90:18:d0:2e:
         f5:a3:0b:67:85:e7:88:ea:31:f2:31:6d:ca:2c:c3:41:d4:6d:
         e7:15:af:58:84:6f:3d:77:11:f1:93:0c:44:de:32:f2:9a:b1:
         b7:34:72:80:50:da:c5:c1:8f:ef:be:61:07:b2:68:b9:f1:28:
         cf:b6:fa:e3:b3:26:f4:65:d2:8b:38:74:1c:63:4d:3f:a0:c0:
         0c:b4:d0:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----