Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf7db3c4cf5f605f41b402229d28442a44a929a9.cer
File:                     bf7db3c4cf5f605f41b402229d28442a44a929a9.cer (raw, json)
Hash identifier:          xzL+eL/DZxIW11ncTIgcu1fPERWhXVo/JClxIXHZPuc=
Subject key identifier:   35:78:C0:3B:A5:D6:EE:9B:FB:2F:31:52:B6:2A:6C:36:15:38:86:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010410E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a82db0b4-b61a-4e44-a7c2-7e8c45aaaf46/bf7db3c4cf5f605f41b402229d28442a44a929a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a82db0b4-b61a-4e44-a7c2-7e8c45aaaf46/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 15 Dec 2023 15:48:05 +0000
Certificate not after:    Sun 12 Oct 2025 14:28:11 +0000
Subordinate resources:    IP: 2801:18:7800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17043681 (0x10410e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 15 15:48:05 2023 GMT
            Not After : Oct 12 14:28:11 2025 GMT
        Subject: CN=bf7db3c4cf5f605f41b402229d28442a44a929a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:fd:31:88:16:bb:de:45:6b:5b:53:04:91:06:
                    56:38:13:38:20:05:4c:53:eb:60:e6:d3:4a:6b:b2:
                    5f:b1:0d:61:6c:e6:f5:ac:15:51:28:2b:a1:2f:d8:
                    d6:76:56:28:23:60:57:ab:ec:4a:af:c3:1a:4d:27:
                    f8:c0:1c:9b:cd:dd:9f:c3:51:74:57:2f:76:f6:83:
                    a5:ef:43:85:0d:23:79:0f:3f:ec:51:85:64:20:e1:
                    a3:cb:81:bf:1d:2d:5e:78:e1:a2:62:0b:df:56:51:
                    42:ba:39:df:42:8a:f9:b0:12:56:ab:8f:84:d5:9b:
                    6c:8a:ca:80:c3:ef:73:38:51:e9:4d:f1:1c:54:a2:
                    2d:5f:e3:78:0d:89:39:80:11:4c:59:7e:51:55:7b:
                    2a:96:bc:d3:2a:05:e9:53:ff:45:7d:a1:35:bd:a3:
                    a9:00:08:81:2b:78:62:cf:fb:f3:35:98:91:53:11:
                    04:0b:9b:d5:96:1e:c4:c7:97:87:5b:d0:92:34:b9:
                    9a:37:71:7e:17:18:18:49:b4:e8:99:f0:45:7f:23:
                    e2:b3:20:c2:43:94:d2:f8:98:69:3d:8f:ff:35:61:
                    05:f5:01:52:e7:b8:b0:c1:6d:c3:6e:d0:cc:d1:3a:
                    c0:68:35:2e:44:43:61:8a:b5:93:ab:73:2a:d6:d0:
                    68:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:78:C0:3B:A5:D6:EE:9B:FB:2F:31:52:B6:2A:6C:36:15:38:86:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a82db0b4-b61a-4e44-a7c2-7e8c45aaaf46/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a82db0b4-b61a-4e44-a7c2-7e8c45aaaf46/bf7db3c4cf5f605f41b402229d28442a44a929a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         41:12:f5:a8:96:1a:ee:6a:cf:4a:54:07:12:fc:27:b5:1c:0d:
         ca:5a:d8:5f:e1:49:db:e2:b0:15:d8:62:89:44:39:34:84:85:
         e4:5b:fc:a3:98:44:46:97:7f:84:e4:c0:09:d3:c1:48:15:08:
         1f:7b:59:e6:7b:d5:c6:58:e2:d5:5a:e3:3b:62:2a:68:c0:0d:
         1e:d4:54:8c:f5:c5:da:f3:c5:79:71:2c:1f:e7:65:04:54:35:
         4e:90:60:b0:8b:b8:cd:cf:db:99:75:3d:3e:07:4d:fb:d6:9d:
         ab:92:81:1d:53:e1:d7:67:80:68:c8:5b:83:34:d8:c4:2b:73:
         cd:c8:d4:85:4c:32:50:d5:e5:35:16:f2:21:53:7f:2a:44:5b:
         92:9c:73:93:6d:e9:47:30:51:70:13:ba:c1:bd:ad:9b:a2:fa:
         d4:98:6b:82:58:5d:17:41:2b:ef:73:92:7f:9a:e3:94:e8:86:
         c9:4a:5e:8e:3f:ce:86:90:9c:8c:10:3f:81:87:f8:14:f1:df:
         18:0b:57:b9:2e:4f:74:33:bf:a4:82:06:e0:3e:21:4d:35:82:
         e6:3a:ac:d2:24:2b:c6:68:cb:aa:cf:ff:7f:9a:3d:84:69:50:
         93:38:47:99:27:4a:2a:c3:28:62:76:fa:87:58:19:d3:10:9e:
         3c:9f:67:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----