Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f867b7fdbec6d52170fbdc56cc18e1317860d7c0.cer
File:                     f867b7fdbec6d52170fbdc56cc18e1317860d7c0.cer (raw, json)
Hash identifier:          qO7fvRme6sls5t3oDlEefpX2EcezzO/lLwuMFsnALKA=
Subject key identifier:   59:4C:CC:15:B6:3F:C3:94:D0:7B:DA:C4:EE:6E:92:8F:CB:02:D0:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EBF8D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/79befb11-78d8-4404-83d3-e48c361db896/f867b7fdbec6d52170fbdc56cc18e1317860d7c0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/79befb11-78d8-4404-83d3-e48c361db896/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 15:39:07 +0000
Certificate not after:    Wed 29 Jan 2025 18:57:28 +0000
Subordinate resources:    IP: 2801:15:3800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15464662 (0xebf8d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 31 15:39:07 2023 GMT
            Not After : Jan 29 18:57:28 2025 GMT
        Subject: CN=f867b7fdbec6d52170fbdc56cc18e1317860d7c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0f:7b:f0:9f:ea:3a:01:a4:9f:c8:9f:6d:fd:
                    2d:ba:89:6d:87:e5:6b:76:dd:43:76:e7:5d:f2:fd:
                    96:49:2a:73:14:e6:6b:4f:52:ce:50:05:82:cf:9f:
                    9d:0b:27:bb:fa:b7:70:72:17:1c:b2:a1:96:da:9b:
                    e1:2d:12:30:c6:db:9f:2a:d5:22:d7:c9:0e:3e:76:
                    0d:a3:cd:6d:34:b4:c1:21:2c:cf:43:e7:ba:cc:ec:
                    4e:ab:7c:a8:3f:1b:ec:4b:2c:c1:7f:be:6c:64:bb:
                    99:3d:77:0d:67:16:3d:a5:20:da:a7:1b:31:43:b0:
                    20:f2:02:15:27:0a:62:08:e8:94:56:ee:0e:c0:10:
                    04:d4:d0:33:5a:f0:74:85:53:5a:ac:8b:4e:23:d4:
                    9d:b8:d5:c6:52:92:1b:af:a2:13:40:9e:c5:34:c0:
                    ca:09:35:b5:94:d0:a7:85:11:10:ff:b2:66:36:77:
                    d0:53:ec:e0:45:25:d3:0f:d6:8f:f5:b1:0e:4b:51:
                    83:dc:3b:52:7e:ea:6d:fa:ed:c1:77:8e:b2:11:6d:
                    f7:4d:df:27:82:5b:e1:36:b2:f3:6d:55:b5:23:12:
                    b8:c5:00:cf:c9:e8:94:91:97:84:27:28:d5:2c:0d:
                    24:64:c5:88:6c:78:ce:6a:03:86:74:e2:dd:88:b2:
                    4c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4C:CC:15:B6:3F:C3:94:D0:7B:DA:C4:EE:6E:92:8F:CB:02:D0:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/79befb11-78d8-4404-83d3-e48c361db896/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/79befb11-78d8-4404-83d3-e48c361db896/f867b7fdbec6d52170fbdc56cc18e1317860d7c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         2b:6c:67:2a:b3:7b:35:f7:b4:2e:1d:ee:9c:e4:cf:e0:1b:c4:
         76:ae:d9:00:c4:7c:77:a6:7f:22:e9:81:b8:b0:a4:e8:b7:1f:
         fb:aa:65:7d:c2:e4:67:9c:26:f9:71:67:67:a6:17:43:08:02:
         2c:d3:77:96:3b:2c:db:39:30:14:f0:e8:7b:bc:2a:79:37:d6:
         ee:36:f1:51:dd:fa:fd:07:46:73:f8:33:78:ac:8b:f5:42:2f:
         f4:9c:7f:55:b7:33:33:80:2f:b8:8f:9d:66:d5:34:57:e3:2d:
         dc:54:4f:b2:55:e3:d7:df:a8:ed:3a:93:b1:64:e6:24:28:e8:
         b6:d8:91:fb:56:36:4d:b9:59:3d:0e:78:76:46:de:77:0b:dc:
         77:03:1a:c0:6b:d4:8e:04:0b:c7:c7:2c:1c:18:ac:41:13:68:
         30:d3:91:5f:36:dd:70:3c:e3:ff:8c:92:0d:45:18:43:77:d6:
         66:0b:07:39:e9:52:b8:1f:4a:6a:97:0b:69:50:51:c5:3c:47:
         81:8b:4e:b6:6f:f4:22:5d:87:de:df:3d:ca:13:ed:7b:7b:60:
         2a:3f:7b:2a:96:8a:95:b1:b5:89:13:c1:91:f1:a9:5f:f4:fb:
         99:55:2b:53:63:45:58:16:de:4c:5e:9c:c6:f7:f1:d7:9f:60:
         ef:ec:f2:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----