Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/af2525ad978c94a844028b74c079c3019a1e5058.cer
File:                     af2525ad978c94a844028b74c079c3019a1e5058.cer (raw, json)
Hash identifier:          0oRZ+HqbZf8++VPgbiNSKTJRoAMSxw3DjYn6Z5Yv4nM=
Subject key identifier:   91:9C:45:66:D3:D0:52:F1:43:08:E8:A3:1D:13:E1:A6:B9:7E:D2:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF06B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4934d0b6-38e5-402e-82f9-3db3afd3fad9/af2525ad978c94a844028b74c079c3019a1e5058.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4934d0b6-38e5-402e-82f9-3db3afd3fad9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 19:11:42 +0000
Certificate not after:    Fri 27 Sep 2024 15:10:45 +0000
Subordinate resources:    IP: 2801:14:6800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15664821 (0xef06b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 19:11:42 2023 GMT
            Not After : Sep 27 15:10:45 2024 GMT
        Subject: CN=af2525ad978c94a844028b74c079c3019a1e5058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5b:6c:5e:5d:a8:cd:57:6c:11:2e:53:b1:f8:
                    a2:3e:4c:7d:e9:98:eb:83:ff:70:2d:91:cb:d4:26:
                    dd:1b:be:4c:09:fe:19:ac:ae:6b:74:5d:2c:4a:e6:
                    47:50:30:3b:b1:0e:38:6f:5d:10:52:34:b8:09:5d:
                    dd:89:65:51:48:94:6b:2d:cb:4a:c8:69:2b:5d:3a:
                    b3:f1:de:62:bc:02:e7:b5:6f:e5:c2:a1:e9:be:af:
                    c4:4b:a4:44:d7:bc:22:0c:43:67:a5:b4:83:c8:38:
                    af:8f:43:e7:15:e6:01:48:92:39:ed:55:fc:50:dd:
                    a4:2c:3d:69:d1:40:b8:b8:9a:78:26:e9:fc:cd:23:
                    7c:ff:05:73:76:d4:5f:e1:94:6e:6f:b4:dd:49:7a:
                    2a:0e:83:c9:07:df:8a:3e:76:7d:b6:3a:1f:11:4d:
                    b7:96:75:a9:47:d0:05:de:06:8b:9d:78:52:06:41:
                    08:7f:13:fc:b4:53:e2:82:23:81:36:4d:50:e8:11:
                    63:13:be:03:c7:b1:00:eb:66:3e:71:e0:6a:92:7c:
                    c5:f2:eb:c3:9a:90:cd:0c:d5:4c:b2:3d:33:1f:4b:
                    f6:67:73:28:21:3f:fd:9d:c2:2c:f5:fc:3e:47:e0:
                    a6:63:c4:c7:8b:7c:e4:75:a7:8a:87:fa:af:7c:c5:
                    a4:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:9C:45:66:D3:D0:52:F1:43:08:E8:A3:1D:13:E1:A6:B9:7E:D2:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4934d0b6-38e5-402e-82f9-3db3afd3fad9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4934d0b6-38e5-402e-82f9-3db3afd3fad9/af2525ad978c94a844028b74c079c3019a1e5058.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:6800::/48

    Signature Algorithm: sha256WithRSAEncryption
         9d:2a:b0:b6:bf:f6:d1:cc:19:3e:65:0c:34:99:3c:98:7c:3b:
         59:7e:d7:70:7e:ac:fa:d8:04:71:2f:9f:57:fb:18:4d:0b:5d:
         36:22:13:d4:f3:76:a5:bf:63:89:fd:29:ab:1e:62:db:3b:ba:
         13:db:c1:18:6c:e8:56:32:5e:cf:06:e3:96:69:62:84:32:c6:
         ba:31:5f:70:ba:e8:5f:2c:94:2e:54:5e:46:dd:e1:0d:7e:bd:
         98:c5:aa:b4:eb:87:06:f5:11:73:68:60:73:31:51:43:c4:bc:
         b6:b1:c6:3d:b2:d2:48:0e:7c:ca:3a:db:2e:57:c4:53:c1:7c:
         a6:63:6f:77:2a:59:b7:fc:0d:64:01:52:27:ab:7c:eb:68:88:
         89:80:95:66:41:83:18:f5:54:0b:48:13:c2:5f:85:be:ef:f9:
         2c:47:0e:99:81:58:ea:e5:65:f8:23:16:99:45:d7:66:c6:a2:
         11:3f:ca:48:19:90:76:df:c3:57:3b:2c:49:fd:39:93:04:68:
         15:fa:12:7c:ba:05:20:e4:9c:1c:46:d1:79:0d:4c:80:49:f4:
         60:08:8e:0e:47:77:49:7e:97:ae:9a:3c:5e:98:f4:20:21:1b:
         57:8f:5b:c7:7b:3b:dc:57:b4:7b:ab:83:3f:fd:d9:04:ed:83:
         bf:56:5a:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----