Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e47a8e6e94002bc64c0b98eb9119b85eed0a3054.cer
File:                     e47a8e6e94002bc64c0b98eb9119b85eed0a3054.cer (raw, json)
Hash identifier:          T9vMpLqoHMoFyRiMip8VaKqEjUYeR9PHvGrYON3GV3k=
Subject key identifier:   E7:4D:4B:68:1D:33:63:AE:01:19:04:00:30:1F:54:70:C9:16:03:10
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE7AC3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3e696052-40d6-4d23-ab2c-a74b252b5e5e/e47a8e6e94002bc64c0b98eb9119b85eed0a3054.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3e696052-40d6-4d23-ab2c-a74b252b5e5e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 15:46:39 +0000
Certificate not after:    Fri 20 Dec 2024 17:43:04 +0000
Subordinate resources:    IP: 2801:1e:800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15628995 (0xee7ac3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 15:46:39 2023 GMT
            Not After : Dec 20 17:43:04 2024 GMT
        Subject: CN=e47a8e6e94002bc64c0b98eb9119b85eed0a3054
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:82:35:2a:93:81:16:d6:8d:97:94:b9:30:c1:
                    ca:75:e9:76:8e:33:60:73:8e:72:76:be:5a:7d:64:
                    de:54:42:d7:e8:2c:eb:2f:a4:6c:9a:36:c4:ea:c5:
                    ee:7a:da:8c:78:38:67:99:58:81:7e:75:b6:2c:82:
                    bb:b4:9b:f7:2f:a0:ba:d7:08:59:e5:e2:26:8d:9e:
                    76:07:bf:9f:ba:13:3e:cf:1e:55:46:c6:49:cf:de:
                    8f:f5:c1:b7:07:1d:86:6d:b5:ee:29:47:b6:a4:9e:
                    61:3f:70:39:42:44:46:e5:42:0e:4e:15:e4:f9:24:
                    12:aa:cf:5d:75:43:56:a1:27:75:df:bc:a9:63:8f:
                    9f:68:0c:a7:63:98:59:35:0d:60:14:08:bf:c9:59:
                    c4:32:d9:97:f0:84:8a:4e:41:56:89:10:20:9d:e1:
                    f9:e5:e7:b0:63:8c:a5:bc:08:30:d1:b4:96:3c:4f:
                    02:19:1b:2a:11:7e:fe:ac:05:67:17:c6:0c:79:0f:
                    ee:9c:c1:f0:2e:8d:32:0b:2d:ef:76:6d:28:44:d1:
                    40:3d:32:f2:ad:e3:2a:2d:e2:41:44:78:95:5e:e3:
                    a8:34:23:5e:cc:09:e0:8d:16:7b:45:7a:06:5d:06:
                    3d:2e:b7:7a:2f:61:cb:be:3b:4f:06:b2:82:0a:a9:
                    c7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:4D:4B:68:1D:33:63:AE:01:19:04:00:30:1F:54:70:C9:16:03:10
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3e696052-40d6-4d23-ab2c-a74b252b5e5e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3e696052-40d6-4d23-ab2c-a74b252b5e5e/e47a8e6e94002bc64c0b98eb9119b85eed0a3054.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:09:ec:f5:91:52:33:2d:2a:93:07:aa:8b:19:15:ed:0f:9d:
         63:cd:3e:f1:1e:6a:b9:22:0f:9f:9f:fb:a8:74:c3:40:d0:27:
         83:83:2c:a2:7b:7d:99:36:ff:e8:04:69:b4:0e:e8:90:73:38:
         1f:0e:9d:ec:c6:0b:92:b6:92:59:2e:62:f5:32:42:f2:aa:cf:
         44:4c:93:d0:91:44:ab:85:32:89:4f:ef:22:ce:e0:83:f3:c2:
         64:dd:81:5a:e0:65:53:58:4e:4d:c8:d7:8a:09:af:09:bb:86:
         ce:54:30:b2:63:bd:98:ba:c9:ec:26:e0:59:45:59:e9:92:69:
         66:cd:99:2b:63:d4:a4:9c:a1:24:f4:94:ad:54:47:b2:6f:cf:
         f6:36:24:87:90:88:39:ba:60:d2:3e:93:9e:75:84:e7:df:f4:
         2d:d8:e2:2d:c0:85:77:c3:6a:32:91:f5:a4:d2:8a:56:24:cf:
         af:72:cf:49:ff:60:f3:dd:d8:28:8a:8f:db:22:4c:92:75:3a:
         0f:6c:3e:fb:07:93:3f:f2:03:a9:33:16:f0:48:09:21:c9:da:
         e7:ef:c1:12:2b:a9:7c:ae:4a:fb:47:c1:f2:8e:83:dc:43:7c:
         8c:01:24:43:bc:d0:72:b1:b9:7d:6b:46:a9:dd:d8:29:78:49:
         49:ab:7a:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----