Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a3e59283b641c91e928a809687727575228d4a69.cer
File:                     a3e59283b641c91e928a809687727575228d4a69.cer (raw, json)
Hash identifier:          mqV++baeixo/dirpcO0/W0i0wLTd7rx4MA3DDttWLdA=
Subject key identifier:   58:F9:15:44:24:45:DE:A1:6F:41:ED:0E:C0:4F:62:3D:37:55:C9:CA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC1D67
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10c5c0b0-cc9c-4b7e-ab2d-af97d1652f0f/a3e59283b641c91e928a809687727575228d4a69.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10c5c0b0-cc9c-4b7e-ab2d-af97d1652f0f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Jun 2023 14:41:07 +0000
Certificate not after:    Wed 04 Dec 2024 21:01:35 +0000
Subordinate resources:    IP: 2801:16:800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15474023 (0xec1d67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  1 14:41:07 2023 GMT
            Not After : Dec  4 21:01:35 2024 GMT
        Subject: CN=a3e59283b641c91e928a809687727575228d4a69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4c:b3:77:ce:df:1a:01:08:71:f9:8d:bd:2e:
                    92:80:7e:c1:15:7f:60:6c:41:df:ea:3e:24:95:2d:
                    86:7c:89:cb:3e:19:95:38:13:75:ba:90:6b:32:89:
                    15:60:a4:63:e4:e4:8b:30:9f:40:9b:70:1b:c1:9f:
                    43:76:02:bb:00:6f:5e:bb:ff:b1:89:1a:4b:1e:3b:
                    93:2c:2c:37:43:a2:f6:64:72:9f:35:dc:8c:4e:c1:
                    5d:2a:40:86:bc:aa:a3:f4:a4:b0:11:a7:76:61:e5:
                    dc:68:7e:c6:b1:45:22:fc:ea:5e:0a:c9:dc:3b:3d:
                    05:eb:7d:48:8e:e2:11:14:86:ee:d8:4a:fd:35:14:
                    f6:cf:ac:5f:6f:ba:8d:20:5f:25:57:12:63:5d:21:
                    a2:bb:64:1c:19:86:f4:d6:05:47:c0:8a:c5:94:8c:
                    1f:bd:65:13:96:bd:70:31:79:c9:87:ee:cc:8d:9e:
                    ab:4a:39:b0:2c:f2:d4:2a:9b:7d:28:e5:9f:32:52:
                    bd:8e:ce:6b:00:4a:3b:2f:61:f0:27:95:52:ad:b2:
                    53:47:4a:94:be:b1:e3:1b:09:71:7b:f4:af:55:c7:
                    9e:1c:d4:53:86:30:f9:63:fb:b0:e7:c4:a3:f9:57:
                    69:d8:da:3c:ff:f1:0a:93:64:e4:64:6d:7b:75:2c:
                    c9:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F9:15:44:24:45:DE:A1:6F:41:ED:0E:C0:4F:62:3D:37:55:C9:CA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10c5c0b0-cc9c-4b7e-ab2d-af97d1652f0f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10c5c0b0-cc9c-4b7e-ab2d-af97d1652f0f/a3e59283b641c91e928a809687727575228d4a69.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         5c:c5:a5:56:95:d2:96:9c:fc:36:ff:87:fc:62:e6:2e:f2:30:
         31:73:ae:19:85:40:f5:3f:b5:5f:e5:d8:91:d6:56:f7:94:32:
         12:34:11:33:d2:2d:cf:fd:6c:3e:20:a1:b4:d2:df:7a:11:46:
         96:e0:96:f7:69:e0:97:40:32:56:f1:b9:68:fa:11:75:5b:43:
         a3:da:22:84:dc:78:c8:4f:69:b0:ca:ef:aa:eb:e5:fe:fb:a8:
         3c:6e:50:30:79:84:ab:89:99:79:0f:ca:d7:aa:b8:5c:91:4d:
         4b:8b:48:cd:40:b6:99:6a:90:19:c8:4f:e3:1c:bc:74:ad:76:
         6d:2e:1a:1c:e1:c9:e7:2f:26:4c:5a:94:05:5b:2d:e6:be:3f:
         28:ae:2d:61:60:47:da:28:97:f4:81:ef:8f:2f:11:05:83:88:
         4a:cb:32:44:1f:c1:0a:bf:85:0c:b9:8e:04:1b:0c:9f:8d:62:
         fc:20:ce:0f:f0:ec:4a:9b:4f:ef:6c:a2:4a:a2:3c:bb:63:28:
         42:d7:8a:c8:d8:12:44:ab:a1:9c:1c:af:94:42:5b:3a:4a:15:
         a1:55:8a:92:91:81:7d:c8:e9:fd:16:f7:cd:63:41:3b:88:96:
         f4:d8:d0:c7:7f:40:77:61:aa:d0:cb:b2:9e:3a:10:23:79:a6:
         94:e9:24:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----