Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/afa28e5595f18c0ececf23e6e1232f4f41c53291.cer
File:                     afa28e5595f18c0ececf23e6e1232f4f41c53291.cer (raw, json)
Hash identifier:          fnxXgZejLyt1bH/P4aZlNhXdqm7+ijT5pc1oXGUNZUY=
Subject key identifier:   F8:3F:D1:68:2D:B6:E5:D2:62:EB:AA:83:AD:D8:59:71:A8:20:39:FF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0F553
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0e075999-02b9-4db0-bacc-963c76c73d85/afa28e5595f18c0ececf23e6e1232f4f41c53291.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0e075999-02b9-4db0-bacc-963c76c73d85/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 16:06:23 +0000
Certificate not after:    Thu 01 May 2025 19:50:04 +0000
Subordinate resources:    IP: 2801:1e:5800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15791443 (0xf0f553)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  6 16:06:23 2023 GMT
            Not After : May  1 19:50:04 2025 GMT
        Subject: CN=afa28e5595f18c0ececf23e6e1232f4f41c53291
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:9b:41:0a:7a:35:f0:1e:26:04:2b:45:84:44:
                    a2:8e:3b:c4:dc:b8:2a:13:cd:a9:dc:fe:60:68:b9:
                    11:89:98:d2:51:18:05:6a:c7:3d:6e:45:66:96:89:
                    0b:fd:d0:17:15:47:df:04:8d:e6:a6:aa:6e:5f:f2:
                    9b:4c:2d:65:5b:5c:08:ce:06:a6:fb:90:ae:27:80:
                    19:c2:f2:6c:27:5e:67:38:1e:b4:5e:21:e5:81:e5:
                    3d:c7:c5:24:67:49:28:21:f8:db:5c:59:9b:98:eb:
                    c1:9e:0c:c3:a6:08:32:79:50:2e:18:56:be:c4:8b:
                    04:95:b2:c7:b6:70:b2:98:57:f7:73:92:12:66:48:
                    76:53:cf:89:e9:cf:2a:1e:f1:87:b2:71:31:8d:7e:
                    22:39:8c:4a:1d:88:76:65:fd:89:5a:e5:ca:fc:b5:
                    96:58:d1:36:f5:7c:43:1e:c8:1e:12:da:78:e1:f5:
                    b0:85:81:d1:28:b6:eb:fa:96:c7:47:2f:15:ed:db:
                    95:57:94:89:fe:5f:7d:0a:69:6f:2b:35:74:0f:61:
                    1b:88:23:74:d7:1d:bf:60:80:63:56:da:03:e9:34:
                    ce:21:3c:fa:b0:b4:51:21:ac:68:3e:1f:a9:e2:fa:
                    7c:67:0e:dd:ef:10:d4:e1:44:7f:5c:1a:ff:d6:a1:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:3F:D1:68:2D:B6:E5:D2:62:EB:AA:83:AD:D8:59:71:A8:20:39:FF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0e075999-02b9-4db0-bacc-963c76c73d85/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0e075999-02b9-4db0-bacc-963c76c73d85/afa28e5595f18c0ececf23e6e1232f4f41c53291.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         1d:34:2b:21:63:e9:d6:f5:44:4f:ba:8f:79:39:73:02:f7:99:
         bd:11:fc:eb:d8:d3:b3:d2:8c:7a:83:52:23:40:f7:bd:07:80:
         a4:b7:73:66:18:90:a7:9e:5b:a9:af:2a:9f:f4:81:e6:34:c6:
         3e:97:b1:0e:b3:62:f9:93:d8:b5:ff:43:ef:f9:4e:06:a0:39:
         5f:c5:29:b8:36:c0:26:7e:50:be:79:25:3a:10:53:c8:ee:bd:
         1a:10:b2:fb:c2:78:cd:1a:92:56:d8:3a:3a:3c:9d:95:10:48:
         2e:19:e6:9e:93:1e:45:ae:c3:cb:f9:76:fc:80:66:a4:d2:e6:
         81:3d:59:9a:3f:0b:33:a1:b7:ff:4d:92:d4:3f:72:0a:a8:90:
         b7:e7:b5:78:36:29:e5:fb:7b:c4:39:08:c5:00:b0:0b:f3:65:
         58:ab:a9:fe:e7:72:87:18:4d:92:e8:db:13:27:ba:cf:18:ca:
         fe:fc:85:e2:21:1b:00:93:3c:de:38:f5:80:18:c3:68:6a:dc:
         86:15:8f:37:c9:05:47:48:e1:b8:7d:19:8e:f3:1c:ab:a5:11:
         33:09:e4:eb:9a:17:aa:d9:fb:da:51:8a:ac:ec:6a:89:f2:60:
         6a:a0:dd:2b:9a:a2:f2:7e:6a:93:40:b1:5a:d9:9c:0a:44:a4:
         05:7b:ca:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----