Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/add8af711eb7401694e992ec4abe38f4bdf4a72d.cer
File:                     add8af711eb7401694e992ec4abe38f4bdf4a72d.cer (raw, json)
Hash identifier:          ZELquwm4qMK8G7Djkb2XvXQRuqWLfSr3+tUmgEwRK3U=
Subject key identifier:   D3:39:04:6B:51:AB:21:3A:AF:8A:A2:A9:3C:9E:4D:FC:E4:BC:AE:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA5BEC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/add8af711eb7401694e992ec4abe38f4bdf4a72d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Mar 2021 16:10:38 +0000
Certificate not after:    Tue 23 Jan 2024 18:07:31 +0000
Subordinate resources:    IP: 2801:1ee::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14310380 (0xda5bec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 16:10:38 2021 GMT
            Not After : Jan 23 18:07:31 2024 GMT
        Subject: CN=add8af711eb7401694e992ec4abe38f4bdf4a72d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5b:6a:ce:85:72:45:f9:f2:1c:e5:2b:05:75:
                    9a:b4:14:4a:16:ee:62:29:47:04:e6:e2:71:0e:6f:
                    24:50:ae:06:8a:c2:28:c7:03:c1:9c:2e:d2:6e:ba:
                    e3:cc:70:97:db:af:3b:40:1f:c4:5c:3b:fe:16:69:
                    74:f8:17:63:13:be:7c:99:1a:ee:ba:85:b2:73:ae:
                    94:09:0b:af:83:58:7a:75:70:6c:23:78:01:1f:e9:
                    38:d6:8e:07:5a:51:a8:1a:b8:6a:70:64:45:0f:2b:
                    b2:ec:2d:d0:05:79:df:10:4a:15:3e:9b:33:b3:34:
                    e0:14:ee:94:23:45:75:a9:d6:7b:aa:c9:72:b4:94:
                    53:3a:12:dd:14:1d:95:a2:21:2b:f0:b4:04:a6:db:
                    78:b0:f9:63:ce:c8:c1:ea:86:8c:15:16:08:85:d2:
                    5f:9d:0b:e7:a7:78:0d:6b:4d:86:7f:eb:27:cd:0c:
                    c8:b3:6b:fc:b0:86:b4:cc:9b:b6:1c:ee:3e:22:94:
                    a0:9c:2b:fe:c0:e6:f5:4f:72:31:78:c2:99:e4:8d:
                    a5:14:10:cb:ae:d2:f7:15:c5:d0:f6:34:8a:9f:4e:
                    6f:b7:ad:14:f4:e8:18:f6:7c:23:75:fd:e4:9b:df:
                    37:71:f4:a6:7a:2f:ee:dd:f3:24:af:4a:f4:db:63:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:39:04:6B:51:AB:21:3A:AF:8A:A2:A9:3C:9E:4D:FC:E4:BC:AE:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/45e10697-d39a-419f-bdf5-9e6cad9bd8dc/add8af711eb7401694e992ec4abe38f4bdf4a72d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1ee::/44

    Signature Algorithm: sha256WithRSAEncryption
         7f:c7:da:7f:d4:6f:d4:d0:f0:65:37:e1:8b:d6:8e:27:8e:39:
         e0:65:60:b7:b4:7b:45:c7:c6:0e:60:38:d9:37:09:00:a5:3b:
         ef:d0:ea:58:d3:92:20:7c:5a:3c:94:45:16:c9:56:55:e7:47:
         76:30:9f:71:f8:22:88:a1:fc:2b:87:88:7d:1c:8f:09:50:2c:
         66:28:b6:e0:65:74:77:f8:d2:db:27:e6:d4:52:4d:5d:8c:03:
         50:80:a6:8d:87:b1:f5:21:f9:95:b7:54:5d:5d:07:58:7b:47:
         89:8a:ec:ea:38:4d:2c:f3:b2:c2:08:40:ae:b6:e3:95:90:23:
         68:18:f0:72:4b:8a:3f:d7:03:69:6e:8d:30:1c:15:a4:14:0e:
         a6:4e:9c:17:ec:b3:a3:95:4b:e2:07:ed:48:b1:b4:00:14:46:
         98:cf:18:99:e3:d4:04:06:27:0e:f7:92:f5:fd:13:db:fb:82:
         ec:9e:1f:24:79:87:bb:72:57:ce:9e:a3:10:97:24:56:ad:ec:
         ec:e2:ec:5c:d3:d0:5d:91:0e:6f:a3:24:e1:1b:b1:f6:d3:d0:
         87:ab:b4:b7:d6:73:38:22:03:a4:aa:bd:31:38:86:27:15:c3:
         67:19:78:b9:c6:84:3e:8a:46:ec:ee:1f:e6:b8:fc:f8:33:28:
         6b:6f:70:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----