Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bc31babad7d0bd7ba2fc3f9eae19434771fb967e.cer
File:                     bc31babad7d0bd7ba2fc3f9eae19434771fb967e.cer (raw, json)
Hash identifier:          l+y4AmnWDIJWH1aeXetqdNSfUz0qNrjnXKpQJhD8+a8=
Subject key identifier:   EF:A2:00:AA:72:2C:1A:07:C3:0C:8A:B3:91:9B:58:E7:0D:E6:33:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE88F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/918a59ce-18c9-408c-abee-0e6f947c5e50/bc31babad7d0bd7ba2fc3f9eae19434771fb967e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/918a59ce-18c9-408c-abee-0e6f947c5e50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 17:01:34 +0000
Certificate not after:    Mon 24 Jun 2024 23:35:04 +0000
Subordinate resources:    IP: 2801:180::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15632628 (0xee88f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 17:01:34 2023 GMT
            Not After : Jun 24 23:35:04 2024 GMT
        Subject: CN=bc31babad7d0bd7ba2fc3f9eae19434771fb967e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:f1:0c:c3:da:64:00:12:70:c2:92:5b:d6:33:
                    f5:10:f5:d7:c2:e2:20:b0:d6:93:43:ae:56:34:8b:
                    c8:12:fd:9b:f5:41:d3:6d:6b:56:94:b8:d2:b2:76:
                    35:7c:9c:98:96:38:e4:80:82:39:b5:6e:a6:cb:43:
                    95:6f:8c:74:17:6b:1d:d2:f9:29:71:77:64:b1:47:
                    fc:6f:ea:7a:db:cc:9c:c6:9d:11:d9:92:86:cf:bb:
                    7d:fe:ae:92:f5:6f:21:fd:f3:d1:4b:04:5b:db:e4:
                    42:40:e4:8e:c4:72:11:88:de:70:01:ba:94:3b:47:
                    88:76:6d:1b:5e:20:66:ff:d5:26:97:21:27:49:21:
                    2b:10:c9:da:d0:e5:bb:a9:37:1c:2d:f9:a7:52:55:
                    87:19:e8:ec:b9:02:1e:82:79:3c:04:d9:48:65:4d:
                    33:02:0a:2b:fb:2a:3c:ec:18:0c:6f:dd:14:af:4b:
                    e7:63:cc:5a:a8:98:1d:aa:1a:5c:0e:a4:4f:f2:1f:
                    1a:1d:32:26:3e:28:a9:e9:4d:6b:7d:4e:f8:f2:87:
                    d1:9d:3d:35:88:35:63:06:07:cf:65:34:62:bc:11:
                    cf:17:b2:8d:f3:ce:ab:26:40:42:31:88:17:08:e6:
                    76:ee:fe:75:35:b6:33:ec:aa:df:ff:50:c1:96:7e:
                    ae:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:A2:00:AA:72:2C:1A:07:C3:0C:8A:B3:91:9B:58:E7:0D:E6:33:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/918a59ce-18c9-408c-abee-0e6f947c5e50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/918a59ce-18c9-408c-abee-0e6f947c5e50/bc31babad7d0bd7ba2fc3f9eae19434771fb967e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:180::/44

    Signature Algorithm: sha256WithRSAEncryption
         9e:f0:17:dd:42:86:75:d7:f0:09:92:5c:63:71:05:56:59:69:
         e2:64:b0:c0:45:9b:50:97:24:f8:10:7c:c6:bc:83:cc:45:b1:
         b3:b5:d6:f5:fa:e5:f4:42:8e:9a:b0:18:ee:0f:de:61:61:b8:
         ac:e2:54:67:bb:31:1f:74:ee:73:30:42:78:a0:5d:f7:7d:9f:
         55:93:c2:58:5f:77:c4:6f:f4:fc:7d:7d:7b:85:67:32:20:a3:
         bc:ee:1e:36:54:11:fc:c7:34:b7:22:42:34:8b:cf:2e:f5:64:
         b9:b6:58:4e:33:69:aa:9b:f0:64:e3:63:c2:ad:00:20:13:de:
         62:9f:f2:b0:e7:0f:f7:4e:53:1f:de:3f:e2:63:c2:f0:7f:15:
         15:1d:17:8c:48:a8:bc:63:d2:f7:ff:ff:e0:32:bb:ec:91:2a:
         3f:50:64:47:57:be:0f:3f:c4:57:a5:97:14:1e:9f:41:32:60:
         cd:58:43:cf:4c:65:72:f5:39:87:f5:a2:e5:6d:c3:cc:68:7d:
         42:5e:1a:d7:92:a9:52:1d:aa:5a:7c:84:13:c7:29:3b:29:61:
         25:07:61:0f:48:00:a6:01:8e:5f:65:91:0e:8c:af:01:49:c4:
         2d:dc:23:96:46:67:c5:a0:d6:be:4f:ce:13:2e:05:f2:9d:b7:
         ab:2b:b7:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----