Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9ee161d8d84e4bf3c3889359f0157370b052dbb.cer
File:                     b9ee161d8d84e4bf3c3889359f0157370b052dbb.cer (raw, json)
Hash identifier:          kQBjd0AU6xDhshaWqS5da1gfcEfUIhZ/lGpfGQzYcEA=
Subject key identifier:   73:F5:F4:6E:92:CF:EC:B6:26:B1:42:59:28:9E:D4:56:92:0B:7C:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4BF74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/be8f27f6-cd8e-4a04-aef0-65542eac561d/b9ee161d8d84e4bf3c3889359f0157370b052dbb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/be8f27f6-cd8e-4a04-aef0-65542eac561d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 22:36:18 +0000
Certificate not after:    Fri 27 Dec 2024 18:40:05 +0000
Subordinate resources:    IP: 2801:1f:c800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14991220 (0xe4bf74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 22:36:18 2023 GMT
            Not After : Dec 27 18:40:05 2024 GMT
        Subject: CN=b9ee161d8d84e4bf3c3889359f0157370b052dbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:72:93:5a:c7:b4:85:8c:98:32:91:99:fe:08:
                    42:38:35:8f:ee:da:3d:ea:b8:2a:05:ff:e2:14:78:
                    3c:b9:d0:00:9e:25:f9:95:b2:6c:17:8a:59:63:e3:
                    be:7e:4c:c0:8b:0f:80:73:16:f8:7f:bc:df:17:3b:
                    8c:23:70:cd:40:b8:c2:38:8a:ea:e2:77:f4:03:23:
                    5c:ea:6e:87:3c:4d:36:4a:34:c2:8f:fe:24:f8:d3:
                    92:28:a0:0d:56:76:b6:62:bb:b3:5e:b1:cb:3a:2f:
                    42:61:6f:95:fe:ba:5d:38:a2:c8:6c:88:00:76:66:
                    11:36:44:69:88:22:34:f9:5c:71:77:06:33:e1:dd:
                    4e:8b:62:09:4f:35:e7:9a:43:42:66:51:76:ee:6e:
                    ed:c5:00:2c:e1:4f:7c:be:d3:a3:0b:d9:fc:a8:17:
                    05:03:b8:23:b4:e1:9a:f1:a4:cc:0b:74:0e:49:ce:
                    2f:0e:5a:9f:66:48:cf:4b:59:8d:b8:a4:a8:6e:32:
                    d3:da:07:8d:8b:96:5a:bb:44:bc:e1:cb:5a:c8:58:
                    9a:36:74:3a:2c:a0:7f:de:99:f8:5a:35:24:47:70:
                    67:40:51:da:e9:25:ec:e5:e0:12:56:15:0d:bc:45:
                    a4:be:d5:dd:b8:fa:22:65:36:51:b3:73:07:22:f1:
                    86:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F5:F4:6E:92:CF:EC:B6:26:B1:42:59:28:9E:D4:56:92:0B:7C:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/be8f27f6-cd8e-4a04-aef0-65542eac561d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/be8f27f6-cd8e-4a04-aef0-65542eac561d/b9ee161d8d84e4bf3c3889359f0157370b052dbb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:c800::/48

    Signature Algorithm: sha256WithRSAEncryption
         46:57:5f:cc:5c:ef:a0:f2:ea:e2:d1:30:66:e1:0d:ec:03:f1:
         13:ac:f2:cb:9d:e7:1d:fa:f2:e6:da:df:c3:7e:1d:e2:1a:b6:
         64:94:ad:4c:ae:59:ef:b2:20:17:ed:4b:a4:9b:4a:f8:b8:8c:
         b4:16:5a:69:09:43:3c:5b:f2:75:24:3f:82:57:01:71:f4:db:
         24:89:b2:a2:88:a1:8c:da:3c:67:e6:cb:35:29:ae:5b:a4:1b:
         53:70:bc:7e:cc:2e:df:e8:d8:e4:da:d2:2d:d8:d1:08:3f:4b:
         c7:97:ab:c3:44:ab:75:aa:94:5e:71:b4:2f:ce:d7:0a:eb:9f:
         bc:93:40:9b:8c:f3:e2:a9:0a:20:3e:bc:97:66:f8:4d:bb:9c:
         dc:55:d1:f5:e3:2d:67:8d:4d:c2:67:b5:46:a2:76:5d:80:5d:
         04:56:96:57:2d:1b:74:8d:cd:28:8c:f6:39:fe:5d:48:ce:c1:
         5c:ea:2b:76:5f:99:14:d2:34:06:b2:56:90:5e:37:3b:62:0e:
         5a:26:9e:af:39:ce:07:c8:8f:2b:a7:48:3f:49:f9:3d:75:5d:
         49:7f:0d:18:dd:29:24:fe:cf:e9:00:3b:ef:0a:98:8b:e4:c8:
         07:b1:79:51:c0:58:13:1c:3f:6c:f0:0e:0f:a7:b2:0a:cf:5b:
         f1:08:ca:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----