Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6bc0beb89aa367fe793d98417b810ce69112f4f.cer
File:                     a6bc0beb89aa367fe793d98417b810ce69112f4f.cer (raw, json)
Hash identifier:          S2FyFdgngn1XEhRQTSpi5BlG838ABUD7ZCstUGRs7aY=
Subject key identifier:   D8:5C:39:A3:2C:AA:4C:63:E1:DF:94:1B:86:1C:8C:E5:7E:32:B6:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF291D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ea9ab974-b4a6-4698-82da-3888c4ee3ad0/a6bc0beb89aa367fe793d98417b810ce69112f4f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ea9ab974-b4a6-4698-82da-3888c4ee3ad0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Jun 2023 20:42:07 +0000
Certificate not after:    Sat 01 Feb 2025 17:51:24 +0000
Subordinate resources:    IP: 2801:17:9800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15673629 (0xef291d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 22 20:42:07 2023 GMT
            Not After : Feb  1 17:51:24 2025 GMT
        Subject: CN=a6bc0beb89aa367fe793d98417b810ce69112f4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:28:e8:78:69:8d:5c:18:0f:10:e3:25:63:86:
                    84:35:8d:4f:9d:8f:c5:ed:4a:8f:8c:be:40:28:d9:
                    f5:c6:29:28:69:1c:f9:9a:74:25:b6:cb:38:6f:cf:
                    d1:6f:40:7f:e6:4f:b8:42:5b:96:2f:14:4e:ed:f3:
                    f9:0d:53:ac:47:1d:33:d7:3a:8a:1a:2c:0c:1f:bd:
                    81:f6:6d:25:a5:0b:00:b3:a6:93:07:2e:c0:df:74:
                    be:14:59:cc:af:00:a4:99:41:80:0d:b2:c1:dc:c6:
                    69:22:04:78:fd:a4:21:09:fe:38:73:a5:86:f7:ba:
                    2b:91:61:5e:21:7c:33:e9:fe:9b:d9:4c:a0:e6:c9:
                    22:bc:70:cf:07:df:38:26:7d:a9:c8:4e:43:dd:24:
                    6f:d2:7f:95:41:4e:25:2b:d5:01:ba:e9:c7:96:8a:
                    bb:ce:4c:09:f6:94:71:72:a7:18:47:e2:d6:80:f5:
                    29:2f:c6:e1:31:7a:6a:04:10:36:f4:15:de:df:59:
                    2a:aa:b9:da:71:02:3c:98:76:65:13:20:b7:81:0e:
                    37:1c:39:80:31:12:6c:39:9c:3b:04:82:fa:66:fc:
                    cc:77:41:64:70:b5:e3:ee:97:94:43:ab:7c:68:7d:
                    64:d6:99:bd:20:fc:d7:b4:cc:9d:2a:04:89:b6:65:
                    4b:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:5C:39:A3:2C:AA:4C:63:E1:DF:94:1B:86:1C:8C:E5:7E:32:B6:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ea9ab974-b4a6-4698-82da-3888c4ee3ad0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ea9ab974-b4a6-4698-82da-3888c4ee3ad0/a6bc0beb89aa367fe793d98417b810ce69112f4f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:9800::/48

    Signature Algorithm: sha256WithRSAEncryption
         92:7d:d6:fd:89:13:52:3a:c5:18:b2:fd:5c:4d:15:9a:c3:e6:
         31:57:66:ca:40:61:5e:83:db:34:dd:33:52:3a:b4:e5:df:1f:
         12:e9:5d:65:1c:83:2f:a7:22:60:a7:9d:2d:88:92:ab:81:2f:
         26:a9:1a:46:e9:29:fa:69:b6:6b:11:79:14:05:79:2c:b5:3f:
         0d:e7:fd:3d:e1:9d:59:ef:7e:c6:69:0e:bb:e5:81:ae:00:87:
         4d:ff:75:bd:5a:84:0a:41:b5:ef:b4:ce:bf:88:52:23:4b:58:
         48:50:4e:d2:05:08:7b:9b:40:23:66:aa:38:db:cb:ca:8e:5c:
         65:bd:c2:04:8d:5f:30:d7:6f:6d:c2:16:6f:ca:b9:72:bb:a1:
         5e:2c:5d:02:7c:5b:7f:d5:cb:ce:ff:75:f7:2d:91:6e:18:01:
         16:80:f5:9e:05:82:ee:d2:7d:a1:2f:81:fd:22:2f:01:a5:2a:
         9b:86:4f:1a:3b:a5:c8:1b:fd:7d:ed:5b:0c:52:94:05:8f:07:
         d5:ed:e0:53:91:ec:1e:16:40:14:b0:95:a3:37:38:e2:77:55:
         7e:2d:43:c7:92:d5:b9:bb:43:b3:00:1a:2c:73:48:f9:61:26:
         7e:93:7a:28:9e:58:11:40:2b:bd:8c:6a:d8:c6:6d:0d:f3:03:
         05:72:a2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----