Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d157042e626c6c5b9527d6e1e1e2b584c338c9b4.cer
File:                     d157042e626c6c5b9527d6e1e1e2b584c338c9b4.cer (raw, json)
Hash identifier:          zMj1Mjc4eRl+ai00BtTw8e3lmMNsUeNIZzfl5tB4ido=
Subject key identifier:   5F:6D:88:76:27:72:00:32:C4:93:23:18:8F:D9:22:24:CC:E2:16:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7058A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bc069748-08b6-40ce-954c-8b17ebeb77e8/d157042e626c6c5b9527d6e1e1e2b584c338c9b4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bc069748-08b6-40ce-954c-8b17ebeb77e8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 28 Aug 2023 22:16:55 +0000
Certificate not after:    Thu 15 Aug 2024 04:06:28 +0000
Subordinate resources:    IP: 2801:106::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16188810 (0xf7058a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 28 22:16:55 2023 GMT
            Not After : Aug 15 04:06:28 2024 GMT
        Subject: CN=d157042e626c6c5b9527d6e1e1e2b584c338c9b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:0b:8a:80:91:e4:1b:e3:69:fa:c9:e1:bc:d1:
                    ea:73:2b:01:65:19:17:4a:da:d5:0a:d8:98:99:9d:
                    3b:ab:f4:70:b4:1b:b4:1d:0e:77:4d:d0:07:8d:af:
                    76:86:c0:27:ac:25:74:a0:e6:8e:f0:9e:c4:38:34:
                    3f:65:45:b8:33:65:fb:6b:e5:7f:8d:ea:c5:ab:b3:
                    ab:32:da:3e:d5:7a:1c:66:d3:86:cd:79:15:56:09:
                    6e:6e:d2:e1:55:57:8b:96:12:a4:99:2e:e7:5d:68:
                    27:59:48:a4:c7:82:9c:9b:74:9c:95:b2:19:86:d7:
                    04:27:c2:d0:ed:5a:dc:56:a8:c8:b2:9a:f9:24:a5:
                    18:ef:42:20:62:76:84:b7:98:f1:5a:46:3a:eb:1c:
                    5c:94:fe:15:5b:62:f4:12:be:b4:1d:8e:55:78:f8:
                    70:7d:1d:b4:57:01:d7:b1:9d:83:9f:ad:e9:22:d2:
                    8c:54:db:c0:d9:d0:be:d5:68:01:50:f0:68:4d:01:
                    87:5e:79:28:7c:7b:e9:09:4d:42:92:ad:f0:21:7d:
                    d0:6f:43:34:60:46:1e:17:9f:1a:43:a7:c8:34:c7:
                    b0:4f:92:dc:09:eb:30:d3:fc:22:96:1b:6e:58:76:
                    ae:f2:a0:87:39:a5:c6:ac:aa:8b:52:00:85:50:ee:
                    61:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:6D:88:76:27:72:00:32:C4:93:23:18:8F:D9:22:24:CC:E2:16:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bc069748-08b6-40ce-954c-8b17ebeb77e8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bc069748-08b6-40ce-954c-8b17ebeb77e8/d157042e626c6c5b9527d6e1e1e2b584c338c9b4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:106::/44

    Signature Algorithm: sha256WithRSAEncryption
         8a:b9:f2:14:39:1d:52:49:b1:ea:65:e8:26:18:17:c7:ad:2e:
         84:4c:22:bb:ac:c8:41:17:35:94:35:66:1f:bf:0a:c5:63:2b:
         85:c8:1a:45:ac:45:5a:dd:70:f7:96:62:1c:23:27:ac:78:ed:
         9e:bf:bb:ce:d1:9c:6a:bf:2a:e9:ec:49:f8:a6:62:b1:ba:1a:
         10:b4:56:08:76:ba:c0:28:71:fa:9c:d3:07:7b:65:31:4e:cc:
         7e:40:99:98:7e:7d:c0:12:d6:34:b1:44:c6:d9:6c:d2:50:59:
         91:30:42:7e:67:f7:8c:7b:4b:ce:6e:03:d0:54:4b:fa:1a:2c:
         e0:f2:0e:f1:6e:2c:58:1e:ac:cb:26:95:18:36:cc:14:07:40:
         3e:91:ae:77:9b:dc:05:40:ba:fc:55:ec:d5:ee:c3:63:7e:70:
         d4:12:b3:62:0e:63:7f:a7:f1:cb:3d:df:41:7f:04:99:eb:cc:
         2a:19:8a:03:c0:c6:58:15:35:30:7c:c1:6f:18:af:da:01:df:
         a6:78:89:52:98:68:43:4c:75:dc:58:2a:2b:79:c6:fb:70:ab:
         45:3d:09:65:98:c1:10:44:46:13:21:88:e3:cd:76:63:01:ee:
         a9:9e:53:f1:56:e0:60:3c:a2:8d:f4:4a:41:d8:78:06:0d:5c:
         70:14:1c:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----