Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea2658a3bec81f90e16fd8fe782f6c078f005585.cer
File:                     ea2658a3bec81f90e16fd8fe782f6c078f005585.cer (raw, json)
Hash identifier:          AgFxkGXdHinKfN0e/xkpnpexFiXsRRHGk5rCFjLn5ME=
Subject key identifier:   6A:62:21:6A:56:E5:40:6D:8E:DC:1A:D5:9F:6A:4C:90:8B:9E:FD:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F87152
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/ea2658a3bec81f90e16fd8fe782f6c078f005585.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16281938 (0xf87152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=ea2658a3bec81f90e16fd8fe782f6c078f005585
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:22:7a:ae:67:5c:14:d8:37:ee:0a:eb:1e:18:
                    23:36:98:83:ab:07:03:0f:e4:ca:bd:84:83:f4:a2:
                    2a:21:ab:83:ef:53:0b:1d:88:1f:21:42:04:8c:2d:
                    18:e0:1b:47:14:83:a7:d2:6b:e4:9b:43:28:11:a2:
                    9e:f6:38:28:4b:96:80:b6:fc:69:91:c1:4b:21:f4:
                    ec:ec:60:7c:5e:c9:5f:b1:31:50:47:5c:a0:4f:32:
                    64:95:0f:d7:14:99:ae:18:d6:84:cd:40:b9:77:c5:
                    1c:f1:82:0b:ef:53:35:1e:80:07:98:87:87:1b:4e:
                    c1:20:67:77:da:6c:d8:2c:e8:c0:db:f6:5e:be:1e:
                    a3:c6:9f:bc:2b:65:33:a1:44:55:90:3d:66:f5:17:
                    99:6a:0a:f1:b8:0c:73:2c:2b:71:5d:b7:d3:61:50:
                    38:e7:b0:4b:17:34:45:5a:f9:2c:ba:18:61:2c:59:
                    e1:1f:ec:a0:50:55:d1:f5:17:3c:af:d2:38:2a:88:
                    ab:2b:f6:2f:12:4a:10:c2:ae:1d:7c:47:8f:61:75:
                    0f:a1:70:54:19:a8:c4:3e:e5:58:e9:97:35:c5:4e:
                    39:8e:2a:de:24:03:ae:00:90:fc:ee:ba:d6:48:fe:
                    cc:ba:d0:4d:7b:e1:fb:d4:8e:18:08:95:67:e4:fd:
                    4b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:62:21:6A:56:E5:40:6D:8E:DC:1A:D5:9F:6A:4C:90:8B:9E:FD:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/ea2658a3bec81f90e16fd8fe782f6c078f005585.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         81:d0:5c:2d:01:e9:0e:4e:71:77:5d:33:ae:43:e9:42:0b:db:
         78:fb:e3:6d:87:60:79:4e:d9:75:73:a3:0d:a9:e2:e3:dd:a7:
         f0:91:fc:39:d3:6a:62:78:aa:b3:71:fc:e0:ea:74:7c:55:f8:
         f5:6c:70:7f:7b:8f:8b:80:3a:09:c2:3f:0e:50:bf:a9:6c:99:
         eb:7f:1e:f7:23:a9:70:02:31:39:88:1d:40:b3:e0:aa:ea:e0:
         d3:74:82:16:b2:e4:6d:ae:0f:b0:f8:28:f9:80:3f:6a:32:d6:
         fd:81:08:72:7e:8d:35:2b:c4:b1:08:b0:6f:d7:2d:81:5d:c8:
         ca:32:cb:3a:22:f4:76:47:b6:f2:c8:14:d4:7c:46:0f:f4:91:
         33:5e:cd:05:1c:89:ee:8f:bd:00:b4:c5:ae:7f:b6:74:18:2c:
         49:d1:b4:e5:50:09:c8:9a:d1:c9:fa:5d:8d:fb:93:6d:19:08:
         44:15:e7:1f:0c:64:e8:a2:70:1b:1e:b0:97:40:6f:c9:3e:8a:
         ea:95:80:60:f6:f0:6f:60:3f:d7:3c:b9:ec:07:dd:f3:83:c7:
         a0:aa:39:85:e3:a9:15:6a:b4:a6:a7:9b:8c:30:9f:84:71:f7:
         8c:25:ad:f1:fa:ce:b0:0f:36:10:3c:9f:e3:47:ff:f1:92:97:
         fd:9a:7b:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----