Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e809ace4ec8ef49cabb291874f43185b233f0da0.cer
File:                     e809ace4ec8ef49cabb291874f43185b233f0da0.cer (raw, json)
Hash identifier:          8wF80vATHC0oBHMg8haL2tc9AW5CutVLIVjKGrpEHkM=
Subject key identifier:   2A:B5:3C:90:36:E7:D8:BB:61:92:BB:30:87:7E:02:8A:37:9B:B7:DC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8CB12
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df51b42c-a814-4205-a2ea-9cbe4e41f2dc/e809ace4ec8ef49cabb291874f43185b233f0da0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df51b42c-a814-4205-a2ea-9cbe4e41f2dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Sep 2023 13:04:07 +0000
Certificate not after:    Wed 06 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 2801:11:4000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16304914 (0xf8cb12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  8 13:04:07 2023 GMT
            Not After : Nov  6 04:00:00 2024 GMT
        Subject: CN=e809ace4ec8ef49cabb291874f43185b233f0da0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:f8:3c:45:d2:c3:99:10:1a:fa:ce:09:4c:f6:
                    1a:d3:63:47:15:b5:c1:13:e0:0d:8d:3e:53:c7:cd:
                    7c:e1:e8:68:36:11:61:fb:95:ce:c3:ca:3a:9d:39:
                    9c:f9:03:08:0d:28:15:8e:12:46:82:25:5b:f2:ac:
                    c7:b0:eb:c5:9c:bd:cc:29:19:51:08:d2:51:c2:7a:
                    71:33:d1:58:4c:80:2f:d0:25:34:8d:27:34:b3:8b:
                    c9:26:91:ef:b2:c9:28:c1:4d:a9:dc:dd:cf:9e:f7:
                    03:3f:40:40:0a:4f:db:88:ee:61:c4:7f:44:db:e2:
                    55:4d:7b:97:46:fd:28:72:2c:55:67:d8:72:51:f0:
                    1c:6a:bf:17:21:4e:9f:f4:a6:fe:44:ca:6e:17:02:
                    e2:ec:20:84:02:48:ab:18:20:99:86:ea:4e:d0:75:
                    72:c1:30:e1:7d:8a:59:be:ed:42:56:03:bc:3d:80:
                    da:c3:aa:fc:24:66:a6:4c:53:cd:d5:41:59:1d:9a:
                    ca:59:0b:80:92:9b:6b:2d:bb:51:5c:a2:59:ad:c2:
                    ba:30:54:43:91:b2:f8:c2:2a:8f:c9:03:0f:a9:eb:
                    c8:66:de:4a:77:a5:ba:b3:05:63:11:73:38:5a:be:
                    c6:ea:b5:9c:0a:ec:fb:7f:23:b7:c2:3c:7b:1f:5e:
                    2a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:B5:3C:90:36:E7:D8:BB:61:92:BB:30:87:7E:02:8A:37:9B:B7:DC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df51b42c-a814-4205-a2ea-9cbe4e41f2dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df51b42c-a814-4205-a2ea-9cbe4e41f2dc/e809ace4ec8ef49cabb291874f43185b233f0da0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:4e:1a:7a:41:96:da:b2:ca:f2:53:c6:97:10:0b:2d:de:ec:
         88:6c:06:36:3a:80:b8:6b:78:f1:72:e5:08:da:7b:d0:63:ef:
         7f:60:bc:58:c0:74:64:92:36:10:9f:30:d5:90:be:36:c6:d4:
         b9:6d:62:32:5a:59:81:c3:61:57:fd:d3:c4:b1:e3:ca:fe:7e:
         c8:3d:e0:58:c2:84:ab:f5:37:0f:4c:ba:5f:16:02:56:49:92:
         63:ee:97:05:19:9d:6e:ec:5e:e4:eb:b4:4d:46:89:70:de:b9:
         f8:15:0f:83:bc:63:c3:56:5b:7f:5f:38:b0:4c:1f:9b:45:67:
         f8:1d:83:e0:6e:df:2d:0a:e7:38:94:03:dc:97:94:16:e4:28:
         7d:b2:ac:79:83:61:6e:f6:4e:de:2a:70:99:9e:11:ff:6a:bd:
         19:f5:0c:c4:c7:18:3e:ff:13:84:2d:ce:79:61:c1:11:65:fd:
         07:9c:4c:e5:ac:03:0c:5c:bd:99:18:d2:ef:cf:8d:6e:85:55:
         2b:ab:df:50:88:7f:d4:9d:49:3f:b9:60:f4:d8:18:33:65:b8:
         a0:80:11:0d:c0:0b:3c:1b:48:1a:5f:38:2f:80:d3:77:36:4e:
         ec:bf:d0:c6:85:fc:57:55:3b:08:9c:99:bc:d1:51:64:2b:1d:
         e9:2c:2e:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----