Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d6057134d4c0674a838d1e99e38c1deeb586ab03.cer
File:                     d6057134d4c0674a838d1e99e38c1deeb586ab03.cer (raw, json)
Hash identifier:          AdcxX3cX0xGMOIf3FSXlFL4GiL6hR0BSQePBhUYgiKY=
Subject key identifier:   87:8A:65:28:F6:20:A7:14:C7:6F:D9:D7:E8:0A:BA:73:DD:76:13:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0BACE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/abdedcb5-d574-4dae-9d7f-e85d0e19fb48/d6057134d4c0674a838d1e99e38c1deeb586ab03.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/abdedcb5-d574-4dae-9d7f-e85d0e19fb48/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 06 Mar 2023 20:19:12 +0000
Certificate not after:    Fri 06 Dec 2024 15:35:32 +0000
Subordinate resources:    IP: 2801:10:3800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14727886 (0xe0bace)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  6 20:19:12 2023 GMT
            Not After : Dec  6 15:35:32 2024 GMT
        Subject: CN=d6057134d4c0674a838d1e99e38c1deeb586ab03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dd:1e:8e:d4:48:fc:e2:62:5c:f3:f5:78:82:
                    ee:cc:8a:48:2e:a8:1c:13:cd:49:70:2c:5f:9b:e4:
                    28:22:37:43:3e:f1:21:c8:f4:4d:a6:c2:17:ce:01:
                    70:ce:ee:7f:3f:98:a1:0f:ce:c0:7c:99:64:e3:29:
                    dc:10:c8:48:3c:27:ef:37:18:9a:e2:d4:0d:38:75:
                    18:f9:e7:73:3b:57:af:77:81:30:6b:bd:d2:91:5d:
                    85:ca:25:66:05:f4:d2:e8:6a:e7:39:c8:f6:fd:ed:
                    e9:45:ef:18:13:ed:79:60:e5:91:71:6b:37:4c:a5:
                    0e:94:e8:c3:70:09:69:8f:5d:86:bb:91:15:50:54:
                    da:73:b7:6d:95:ae:ee:a0:61:88:e5:55:35:43:58:
                    5f:35:ac:51:9c:d5:1c:16:bf:81:57:bf:68:23:1a:
                    4c:2f:28:19:b2:d6:88:ae:c6:c1:81:58:61:38:f9:
                    6b:d1:0b:f8:2f:6e:42:c3:0d:e2:54:02:12:c6:ef:
                    30:d0:92:22:88:ce:52:f6:67:7f:5e:91:ba:69:6e:
                    4c:dd:27:b4:62:50:42:48:aa:0c:9e:09:9a:25:4b:
                    3a:50:5c:e8:d4:7e:70:45:83:16:8f:3c:10:08:25:
                    ff:fd:e3:2e:15:5b:d0:22:20:4d:d1:25:88:2f:07:
                    58:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8A:65:28:F6:20:A7:14:C7:6F:D9:D7:E8:0A:BA:73:DD:76:13:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/abdedcb5-d574-4dae-9d7f-e85d0e19fb48/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/abdedcb5-d574-4dae-9d7f-e85d0e19fb48/d6057134d4c0674a838d1e99e38c1deeb586ab03.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:67:96:f5:bf:bd:46:13:48:2e:ad:6f:e0:06:78:56:50:c0:
         6d:d7:c8:28:d8:7b:48:74:f7:91:a3:f7:5f:fb:67:99:54:bd:
         4e:d4:00:47:f4:e2:d1:4a:8c:d5:f7:43:d1:27:b6:bb:3b:51:
         51:2b:7f:b6:46:de:de:c4:36:0c:ca:cf:60:5e:d7:96:71:1a:
         cd:a2:c6:d7:9c:1b:c0:ba:8c:e5:07:49:3d:33:c1:e2:5e:e8:
         65:e6:63:57:bf:56:6b:66:9d:d4:55:1d:46:2d:6a:18:6b:e8:
         ac:2c:b9:56:fc:f2:25:56:f7:0c:79:0a:30:89:c6:d1:92:3a:
         89:00:77:16:b9:2a:76:f6:e8:26:15:d7:cf:6a:39:b1:6d:1a:
         53:da:40:f8:16:2b:fd:72:b2:a1:df:df:55:56:72:8e:cc:99:
         5c:53:af:48:d5:df:9f:c8:0d:4b:07:45:d9:ad:ef:e8:5a:b3:
         2d:38:2a:0d:ed:29:bb:54:d0:a7:30:1f:3d:b5:7d:9d:eb:6b:
         76:cb:d4:f0:b8:b0:d1:a4:91:e1:d5:46:89:46:c9:ee:21:6f:
         39:7a:4d:a5:78:68:ed:3d:4a:d2:da:9e:a6:a0:48:60:68:64:
         12:d9:37:9c:07:1b:f3:dc:ab:13:a4:db:df:c4:3b:fb:24:81:
         46:ca:74:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----