Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1db316b25f81d06683c4cc57369f49debf35314.cer
File:                     f1db316b25f81d06683c4cc57369f49debf35314.cer (raw, json)
Hash identifier:          bXs2Tsto3EyIK817qoaU1MpcMjlhQCUK9KDIkb5g3ps=
Subject key identifier:   0A:E8:A4:14:F9:83:EF:03:61:FA:DB:2F:40:8A:EC:A5:C7:17:7A:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E96D52
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d3ec050d-49ef-462c-a5ca-30b8b52a0f40/f1db316b25f81d06683c4cc57369f49debf35314.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d3ec050d-49ef-462c-a5ca-30b8b52a0f40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 11 May 2023 00:46:18 +0000
Certificate not after:    Sat 05 Oct 2024 16:54:01 +0000
Subordinate resources:    IP: 2801:199::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15297874 (0xe96d52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 11 00:46:18 2023 GMT
            Not After : Oct  5 16:54:01 2024 GMT
        Subject: CN=f1db316b25f81d06683c4cc57369f49debf35314
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:80:eb:7d:07:1c:5b:16:1b:e5:8e:ff:8a:da:
                    b4:4e:38:ed:45:c2:57:11:8d:e9:22:5e:07:e9:dd:
                    5b:5b:4e:21:9c:ed:2d:07:74:37:60:f0:eb:9e:e2:
                    bc:50:1b:50:2a:6f:90:97:1d:07:6b:8f:eb:04:d6:
                    ed:34:8b:6b:b9:b2:03:5f:fa:e5:5f:e1:68:dd:13:
                    d6:6f:31:a7:84:9a:ed:0e:09:aa:5b:ed:f2:6e:04:
                    0b:da:c5:15:c0:f8:1c:03:fb:c6:3b:64:a8:3b:15:
                    66:76:8f:7e:c0:1a:58:b4:e1:d7:b7:14:a2:53:e1:
                    1f:6f:ff:a4:74:e7:18:5b:3f:3f:e6:f9:92:ee:01:
                    79:d4:17:ba:82:b8:f7:78:45:95:7a:55:4d:4a:41:
                    00:b7:9a:45:30:c9:e9:e3:65:a1:ff:1e:84:48:17:
                    8e:90:d0:b7:63:fe:59:db:9f:6a:26:fb:9a:2f:05:
                    79:1e:06:e4:f1:08:34:c3:a4:34:a4:d9:eb:c6:fe:
                    20:6a:bb:18:cd:31:65:d7:99:19:7f:be:8d:25:e8:
                    9c:3e:20:4d:fb:09:3f:ea:45:f0:f9:b9:6e:86:76:
                    47:8b:a5:03:13:2b:30:bb:26:bf:ce:3f:0a:24:5a:
                    3a:0b:4d:56:b3:9a:16:77:97:ba:f9:85:47:33:33:
                    33:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:E8:A4:14:F9:83:EF:03:61:FA:DB:2F:40:8A:EC:A5:C7:17:7A:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d3ec050d-49ef-462c-a5ca-30b8b52a0f40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d3ec050d-49ef-462c-a5ca-30b8b52a0f40/f1db316b25f81d06683c4cc57369f49debf35314.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:199::/44

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:e3:66:29:cb:04:53:d2:82:32:c7:b7:3b:6b:4c:5b:69:
         36:e3:e7:fc:7d:cd:b2:70:85:de:b5:7b:4c:27:b8:fe:f9:ca:
         72:cf:7f:dd:07:42:6f:79:7b:fd:3c:b6:79:72:6b:39:76:2e:
         a3:d7:e0:eb:3a:f7:e1:cd:72:be:dc:b5:55:cf:25:75:63:0f:
         c2:9a:78:9e:9a:e9:df:f6:e3:29:2c:1e:49:83:95:9a:2b:9d:
         7f:ed:5b:5b:a8:2f:00:70:af:f9:54:09:3c:3e:17:81:1d:1f:
         07:aa:64:df:56:d0:76:26:9c:aa:f1:09:63:6d:6a:dc:cc:e6:
         30:a6:bb:c5:58:7b:13:0b:d3:b1:5a:8b:50:3b:47:97:1f:1c:
         65:05:4d:60:e9:f1:e9:86:a4:f3:eb:4a:ed:2f:7e:b2:0b:93:
         51:97:b0:b7:20:b9:82:20:4c:1d:c6:ea:37:9c:ea:32:29:5e:
         cf:80:b9:2b:a1:98:77:7f:25:f5:85:05:51:91:86:c5:aa:30:
         07:47:3b:8c:13:2c:c9:73:63:cf:ae:79:68:13:4e:1c:9b:f4:
         af:f2:66:08:e6:14:4c:a4:ac:25:84:84:de:48:4d:18:03:34:
         fc:23:3e:58:d4:09:00:d8:2f:f8:75:22:e7:79:bb:65:7f:de:
         b6:61:45:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----