Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7c1141766e82a1bd2e60c3560069565f6e4aece.cer
File:                     f7c1141766e82a1bd2e60c3560069565f6e4aece.cer (raw, json)
Hash identifier:          A2UNRimXHC7/KWDLC92KBZlsMHaokI7PyLeIAUjOdbs=
Subject key identifier:   FC:F2:63:A6:03:89:04:20:68:04:1D:D9:E6:02:F6:4F:0C:21:59:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE9D5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8c470978-76fa-43e2-9c7e-83a926e67688/f7c1141766e82a1bd2e60c3560069565f6e4aece.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8c470978-76fa-43e2-9c7e-83a926e67688/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 19:36:55 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 148.224.0.0/16
                          IP: 2801:d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15637854 (0xee9d5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 19:36:55 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=f7c1141766e82a1bd2e60c3560069565f6e4aece
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:72:3f:c8:40:d8:0f:1e:fc:a0:fa:74:3f:
                    e6:4f:5e:dd:c0:46:37:1d:9e:2f:7e:63:16:58:d0:
                    ce:37:d3:8d:c5:7b:b7:2c:af:56:51:12:53:d7:94:
                    22:52:0c:aa:e0:18:27:38:a2:87:97:0e:80:3a:b1:
                    1e:08:07:04:e3:af:48:c3:09:4e:4c:36:02:4b:f2:
                    46:f6:22:3b:8e:a8:6f:c7:ca:57:a2:60:03:94:04:
                    33:5e:5a:29:a7:5a:c0:83:f7:06:7a:92:9e:58:b2:
                    03:61:3e:2b:2b:5b:c8:ee:30:b7:ce:54:c8:c1:ec:
                    7a:ed:9e:8e:0f:88:fb:f2:fd:f7:f9:6d:60:20:0c:
                    3b:94:18:2b:6e:3c:a9:5c:36:aa:ed:80:d5:5f:4e:
                    9a:c6:b8:bd:10:39:2c:d3:22:54:81:57:e6:8c:69:
                    97:40:e2:20:c8:aa:d0:7f:cf:62:7f:a0:0c:18:e3:
                    c8:12:ea:17:07:33:13:5a:0a:4a:2a:02:7c:0b:01:
                    96:68:8a:81:cd:b1:bb:78:24:5d:05:e3:65:fa:4c:
                    fd:81:14:d0:8f:b7:92:ec:3f:b6:28:e7:aa:a6:bd:
                    a4:22:d8:28:32:a6:98:65:05:5c:69:45:f2:c9:f9:
                    2b:65:d1:7f:77:0e:9e:38:f3:b9:b8:46:9b:88:50:
                    de:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:F2:63:A6:03:89:04:20:68:04:1D:D9:E6:02:F6:4F:0C:21:59:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8c470978-76fa-43e2-9c7e-83a926e67688/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8c470978-76fa-43e2-9c7e-83a926e67688/f7c1141766e82a1bd2e60c3560069565f6e4aece.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.224.0.0/16
                IPv6:
                  2801:d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:fc:2f:3b:de:e5:da:11:e2:a0:4f:3d:0a:19:59:95:5b:6b:
         57:af:4f:74:9c:2e:4e:15:c2:2e:30:8b:81:92:35:0a:fe:48:
         0b:f6:a0:38:ce:a8:e4:7c:86:d6:62:b6:98:d1:c7:2d:3c:90:
         12:bb:d0:e0:8b:8f:df:55:fc:7b:32:38:6a:58:9b:1d:8f:4d:
         cd:00:5e:9f:f3:ae:d9:ef:8e:f4:8e:4c:50:99:44:73:3e:11:
         a6:c8:29:5c:4b:cb:a4:28:6b:4b:39:90:85:16:87:60:d2:2f:
         99:75:f0:fe:ce:ce:12:cc:48:08:cb:57:d4:11:6a:ef:27:f9:
         fe:44:ac:76:cc:9b:89:bb:52:92:74:9c:98:20:4e:ff:90:bd:
         27:5b:7b:0a:a7:08:7a:81:18:cc:18:20:82:59:69:58:ca:e3:
         d0:05:3c:e4:9a:a7:5d:ec:d6:09:e9:ef:eb:64:77:fb:f8:94:
         39:92:a4:84:44:84:45:b9:a5:63:12:6b:38:a8:8e:5b:b2:e2:
         2e:a6:5d:7c:35:3d:28:b4:7e:cb:44:9d:ee:0f:d7:93:e7:8f:
         66:6d:26:2a:7a:34:e5:20:d8:37:66:9c:c0:42:1f:13:0f:86:
         4e:95:d8:ca:a4:2b:92:39:dd:ff:82:67:12:f1:d1:66:ce:73:
         37:7b:3c:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----