Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d76e0c3afec151836435660d4330e5bd6d11ce6f.cer
File:                     d76e0c3afec151836435660d4330e5bd6d11ce6f.cer (raw, json)
Hash identifier:          k2boH4cTWAPaW5IUnOmREleoEmySwP1xG9Mve2k3gUg=
Subject key identifier:   09:0D:5F:15:36:91:6E:DF:07:06:31:CE:5D:2D:D2:CF:FD:68:D2:A6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E95CEE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/35119f94-f410-4335-86d9-b6da9d78b0e9/d76e0c3afec151836435660d4330e5bd6d11ce6f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/35119f94-f410-4335-86d9-b6da9d78b0e9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 22:18:28 +0000
Certificate not after:    Sat 09 Nov 2024 15:14:09 +0000
Subordinate resources:    IP: 2801:16:d800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15293678 (0xe95cee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 22:18:28 2023 GMT
            Not After : Nov  9 15:14:09 2024 GMT
        Subject: CN=d76e0c3afec151836435660d4330e5bd6d11ce6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0b:ac:04:27:9e:7d:bc:95:37:8c:ce:97:21:
                    74:8f:4d:4d:27:56:ba:1a:04:80:05:c6:2d:73:c2:
                    18:95:a7:c9:28:fa:60:40:75:eb:8f:f1:5e:0f:37:
                    2a:77:d0:54:f3:9a:df:73:83:a0:10:88:c8:7f:77:
                    bf:42:6e:84:89:fd:00:eb:e8:c3:af:9a:79:df:3f:
                    9e:81:97:3d:47:d1:bd:fd:72:74:35:7e:e3:91:e2:
                    6a:ef:e2:01:60:00:41:f5:35:02:4f:02:e9:c2:10:
                    eb:aa:76:b3:ee:e9:0c:4d:51:c3:bd:6c:fc:d0:21:
                    26:fd:3b:24:67:aa:78:f6:1b:7b:98:98:92:2a:84:
                    1e:78:7a:c5:73:55:82:1d:c6:06:62:c2:57:84:88:
                    a6:c6:cc:70:50:81:f4:a2:af:30:82:a4:5b:29:88:
                    68:a7:69:ee:03:8d:51:59:36:17:f6:7f:4f:ce:70:
                    08:2b:28:7c:f4:a2:4f:3d:66:98:77:94:f4:e1:a8:
                    5a:16:18:c7:b5:32:4d:f7:de:d7:7d:b6:8d:f2:d9:
                    02:4f:a1:74:d8:4b:2f:56:01:52:2f:35:00:bc:0b:
                    62:ac:ef:d3:1d:08:a5:6b:ad:bf:b3:03:ff:1a:9f:
                    67:ff:b1:b2:79:fc:a9:e9:fa:ef:36:18:e2:97:c0:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0D:5F:15:36:91:6E:DF:07:06:31:CE:5D:2D:D2:CF:FD:68:D2:A6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/35119f94-f410-4335-86d9-b6da9d78b0e9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/35119f94-f410-4335-86d9-b6da9d78b0e9/d76e0c3afec151836435660d4330e5bd6d11ce6f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:16:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:1d:ee:54:b8:85:08:7b:a6:0a:1c:de:a1:bc:5f:b2:14:bb:
         45:cd:b6:db:34:d1:21:b3:6a:50:3a:76:10:e1:9c:a5:ac:26:
         db:f9:44:1a:78:d8:e6:5d:4f:92:98:da:5e:c3:9f:5d:a6:90:
         b3:89:67:a3:a0:9f:63:89:28:c7:00:e4:8a:3c:b3:96:50:d1:
         03:53:e2:30:6b:e8:02:42:e7:a4:82:56:a9:c5:f9:f5:c5:c6:
         78:b8:3b:f5:0c:cc:c4:6f:14:01:38:24:d5:77:11:cf:0f:a5:
         3d:8a:40:00:6d:6a:f2:f4:ef:85:47:55:ae:fb:f3:f8:1a:48:
         c1:01:fb:b5:70:59:c1:03:ab:23:ee:b0:22:e8:de:35:16:82:
         d8:30:bc:cb:42:5f:63:12:7f:2f:65:7e:fe:ab:ef:10:7c:bf:
         6e:a5:5b:9d:36:22:29:85:f8:0e:5a:6d:70:2d:d2:55:98:88:
         e3:ce:b0:28:09:e5:44:bc:d0:45:b6:12:72:5f:79:64:0d:09:
         e4:7d:be:0f:44:68:59:e5:a5:55:e2:b8:93:b1:77:2c:ec:ab:
         2d:d1:23:22:a5:35:e6:b0:c0:7b:95:26:42:d0:6c:0e:fc:92:
         58:7f:4a:87:01:3b:46:e5:42:b6:32:24:db:e7:4e:ec:f6:50:
         da:51:52:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----