Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e3768247dee2b6785dbf5d09a72a0a5e37d91ad2.cer
File:                     e3768247dee2b6785dbf5d09a72a0a5e37d91ad2.cer (raw, json)
Hash identifier:          lB54RZwBDlj1E/oanfN1SgrTaZVKC+wp5vNJ4kdKGso=
Subject key identifier:   CB:29:DC:F3:7E:E9:D9:BC:54:D7:C4:39:AA:51:1E:4F:8E:1B:50:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E54987
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5b7aedf3-4d7f-4d35-a4cc-4d481aa98f9d/e3768247dee2b6785dbf5d09a72a0a5e37d91ad2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5b7aedf3-4d7f-4d35-a4cc-4d481aa98f9d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Apr 2023 21:38:55 +0000
Certificate not after:    Wed 08 Jan 2025 21:56:01 +0000
Subordinate resources:    IP: 2801:18:e800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15026567 (0xe54987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 12 21:38:55 2023 GMT
            Not After : Jan  8 21:56:01 2025 GMT
        Subject: CN=e3768247dee2b6785dbf5d09a72a0a5e37d91ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:d3:fa:02:22:48:d9:41:a7:cb:72:8d:35:31:
                    b6:f8:10:23:2a:c2:71:bd:2e:92:72:31:ae:37:c1:
                    57:ad:ca:e5:62:42:2f:87:39:ad:c8:7e:e2:da:ea:
                    9e:4e:c6:e8:39:f3:c3:92:c8:0c:24:01:3a:53:76:
                    d4:6b:49:f2:3a:31:0a:70:79:1c:2e:03:e6:46:6d:
                    d9:7d:fd:ac:a8:24:b6:25:8a:45:39:a3:23:bb:93:
                    11:84:e4:54:f6:1b:d1:4f:d8:ae:54:3b:e8:4a:22:
                    65:a3:61:d3:72:42:3f:a6:c5:27:a3:1b:1c:65:02:
                    d8:6b:c7:6e:6d:2c:b9:13:d4:65:2e:09:c2:c4:ca:
                    4f:f2:b5:13:b9:ec:cd:47:09:cc:00:69:30:24:2c:
                    c6:9a:d2:d3:c6:ba:b9:d9:08:68:50:63:5d:d4:2e:
                    da:cf:aa:33:1f:2a:cb:25:93:f6:04:ae:d0:3f:21:
                    49:47:3a:67:8b:6e:1f:0a:72:4b:3d:d6:70:cf:b6:
                    2c:90:a5:75:3a:1b:76:5d:8f:60:c8:db:09:12:93:
                    80:57:c1:74:53:60:91:91:b6:42:6a:1f:39:05:16:
                    28:f0:16:73:03:00:e5:45:96:3e:f0:e2:89:14:13:
                    40:ee:71:80:cf:e7:8a:f4:ce:5b:f5:59:3d:33:e3:
                    e3:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:29:DC:F3:7E:E9:D9:BC:54:D7:C4:39:AA:51:1E:4F:8E:1B:50:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5b7aedf3-4d7f-4d35-a4cc-4d481aa98f9d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5b7aedf3-4d7f-4d35-a4cc-4d481aa98f9d/e3768247dee2b6785dbf5d09a72a0a5e37d91ad2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         00:80:64:26:09:b7:58:62:30:4b:b5:cd:9d:f8:7f:10:90:09:
         12:f7:ee:47:38:8c:06:6e:d8:2b:25:b5:fd:49:74:40:87:a1:
         d8:ea:ae:25:4b:3b:a6:2f:84:b9:63:72:fc:97:03:3b:be:3e:
         ba:9e:31:fc:15:7b:16:ba:9a:37:d6:af:f8:4a:50:6c:a4:b1:
         c3:dc:6f:c6:e5:f0:83:63:97:ba:17:82:69:e3:0a:d5:e3:17:
         89:86:a5:6a:35:67:01:f7:6f:e6:dd:58:d9:95:b8:de:cb:3a:
         59:cc:dd:ea:63:61:ec:64:86:cd:da:b7:b2:6a:0a:63:16:e7:
         ce:70:e6:fb:50:bf:a2:bb:1d:d1:06:52:ec:3a:3a:07:32:80:
         7d:3a:65:e1:49:9f:6e:88:3a:09:47:4b:f5:7a:da:37:07:f4:
         0c:ef:62:9c:92:75:42:82:37:a9:1b:cd:97:c4:be:26:76:24:
         13:ce:57:57:43:6d:4d:72:52:5a:a4:7b:15:a4:a4:1e:ad:ff:
         0c:53:e8:a0:33:f5:bb:e5:1b:b4:ab:3b:d8:88:8d:5e:a6:f6:
         69:29:bc:f3:7b:97:9a:ba:2f:e4:6c:36:bd:99:78:5e:93:bb:
         58:e3:6d:ab:70:5d:c5:18:fb:8e:2e:35:76:d7:51:0b:92:0d:
         26:c9:b4:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----