Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e486bb439ce56e99ede5cf3e73d7c94f7a24897f.cer
File:                     e486bb439ce56e99ede5cf3e73d7c94f7a24897f.cer (raw, json)
Hash identifier:          cGSO842YXsHn9khiYVySvCeIqS4IN7TB8q63bvtWXuY=
Subject key identifier:   84:5D:ED:88:E9:2A:D8:26:0B:0D:6F:F0:03:1D:23:C7:A6:CD:79:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E68933
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/e486bb439ce56e99ede5cf3e73d7c94f7a24897f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 13:35:33 +0000
Certificate not after:    Mon 29 Jul 2024 06:00:00 +0000
Subordinate resources:    IP: 2801:1d:e000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15108403 (0xe68933)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 13:35:33 2023 GMT
            Not After : Jul 29 06:00:00 2024 GMT
        Subject: CN=e486bb439ce56e99ede5cf3e73d7c94f7a24897f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:bd:fa:4b:f8:b8:4e:0d:69:bd:3b:1d:ca:fe:
                    b2:07:60:9c:74:d1:11:7f:55:84:8e:fa:9e:22:6d:
                    0b:07:0d:29:44:74:53:81:6e:79:70:85:cd:e0:9e:
                    02:cb:e4:92:b9:69:c7:d1:64:6d:98:ad:a6:42:61:
                    79:c5:f6:66:c3:cd:53:70:60:95:71:b7:c4:fe:c9:
                    ac:d6:69:35:82:c6:57:fd:9c:1a:97:67:79:95:2e:
                    87:a2:2a:d8:94:18:7d:5d:ec:c6:b2:6c:9e:58:0c:
                    e7:13:0f:aa:9e:61:ec:f1:f4:ac:22:c2:9e:6b:09:
                    35:ba:d9:55:98:dd:a4:d8:62:8e:06:be:a9:f7:59:
                    23:74:64:b4:d3:60:88:16:cb:e7:12:15:e4:dc:07:
                    77:8b:7d:92:2f:75:82:44:d1:de:0f:a3:03:ef:37:
                    92:e6:12:23:7d:3d:15:03:e6:b9:fc:42:40:c3:d1:
                    92:63:8e:62:6f:10:28:c3:2b:80:38:b0:bb:76:d2:
                    99:7c:38:56:84:0a:02:a2:97:19:da:7d:f7:4d:a3:
                    24:e3:63:da:7a:43:5e:de:95:44:be:c4:d9:0e:b9:
                    f2:9a:28:e5:9b:e4:78:fa:5d:05:c4:1f:62:0c:8c:
                    8d:c8:9f:40:67:32:96:ba:1a:0c:6b:46:e4:eb:82:
                    8c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5D:ED:88:E9:2A:D8:26:0B:0D:6F:F0:03:1D:23:C7:A6:CD:79:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d44d342f-534a-42c0-862b-7cbb1d59ed9f/e486bb439ce56e99ede5cf3e73d7c94f7a24897f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         22:c3:6d:09:45:25:70:fb:af:9e:c7:6c:c5:23:67:a9:4a:0a:
         94:e4:61:9d:ff:af:70:33:50:c5:1d:69:2e:05:2f:fa:e1:eb:
         98:61:27:d2:20:90:8c:b5:54:cc:71:f1:34:a6:9d:36:af:56:
         d8:4b:4f:4b:f7:3e:a0:14:50:f0:a1:2d:52:36:fa:ce:43:b5:
         97:b3:2f:f3:7b:de:2f:d1:0f:22:09:d9:87:57:4e:8c:c0:c1:
         32:65:87:34:e4:a4:f8:08:2c:ca:2a:3f:4b:03:f5:14:6a:47:
         f7:01:d0:e7:26:21:e2:06:21:79:ad:b5:ce:fa:1d:ff:8d:69:
         83:2b:55:2d:1c:c5:41:50:37:d3:97:a3:85:0c:12:90:77:fe:
         50:64:6c:aa:3c:f4:a5:e1:bc:5e:be:f2:e9:04:14:1d:f8:bd:
         dc:26:c5:6d:e9:01:cf:1f:65:53:51:41:14:45:94:cd:31:be:
         e6:23:c1:e5:c5:9e:7e:d9:55:58:2c:5d:2d:2e:e0:c3:30:49:
         c0:45:a5:bf:3a:f5:d5:9f:5e:24:3a:ef:ee:08:8e:2a:67:e6:
         18:fd:64:f3:6d:cf:03:de:e1:1c:47:8e:1c:a0:34:7d:26:44:
         9b:df:cd:07:54:91:6d:f8:05:5a:ed:e9:77:44:b8:b3:1b:87:
         62:62:ff:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----