Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d2704ac98cf42392e8fbe10b0f6cc14406d2201.cer
File:                     4d2704ac98cf42392e8fbe10b0f6cc14406d2201.cer (raw, json)
Hash identifier:          xBtFsUyRKiezjKrRVb05YNrO3oCdQ4wTcVypcVudS0Q=
Subject key identifier:   E8:D3:B1:8D:D5:8F:51:3C:44:19:39:22:C0:45:16:DA:49:18:ED:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F75326
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/4d2704ac98cf42392e8fbe10b0f6cc14406d2201.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16208678 (0xf75326)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=4d2704ac98cf42392e8fbe10b0f6cc14406d2201
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:d6:54:e6:6e:e3:77:8b:07:1c:36:a8:d2:c7:
                    fe:75:f1:45:bd:f1:19:99:64:54:c0:01:9b:6a:da:
                    dc:04:98:26:86:d2:34:ed:3e:e8:96:76:31:39:f3:
                    ca:c1:36:e0:2b:d1:25:c9:b2:92:53:46:a5:f5:f5:
                    27:19:05:fd:c9:bc:0c:42:fc:b0:55:59:1b:e2:bc:
                    5f:1e:65:85:37:f5:fa:c3:d6:ed:5b:bd:c0:e0:02:
                    2b:91:33:e4:48:15:26:ef:ed:15:7f:f7:1f:38:2d:
                    f3:40:67:8a:8a:df:f8:65:ca:18:90:8f:01:16:b5:
                    97:a8:88:36:d7:88:7f:1d:63:30:f0:49:0a:a3:0d:
                    52:87:ad:fb:7d:4a:8b:50:c6:e1:99:e1:a6:6c:a9:
                    51:9c:a7:c2:de:1c:c7:05:ff:a9:3d:01:ff:65:7d:
                    88:d3:7e:c2:c4:fd:70:a9:21:5e:ac:b5:16:f3:ee:
                    d3:98:15:3f:8a:ef:70:88:3a:54:cb:4d:2c:d6:24:
                    f1:76:cd:b2:ae:c5:25:11:fb:33:dc:4f:ec:25:a3:
                    6b:67:9f:a8:90:50:f0:98:2a:3e:a4:64:81:5c:98:
                    28:6d:dc:99:30:a5:8d:18:bc:9a:3a:a7:b5:47:39:
                    94:dd:0c:2b:66:95:80:37:c0:3d:31:55:41:56:44:
                    e3:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:D3:B1:8D:D5:8F:51:3C:44:19:39:22:C0:45:16:DA:49:18:ED:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/4d2704ac98cf42392e8fbe10b0f6cc14406d2201.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         9f:d6:e5:fc:9e:d5:62:c3:1e:2d:94:de:03:4d:c3:38:f6:dd:
         16:6d:a0:33:60:46:fa:f3:37:26:04:38:d9:a8:e6:ea:89:41:
         06:66:cc:4e:d2:fd:2f:d1:96:34:f0:14:a0:35:47:5b:7e:ed:
         3e:bf:dc:9f:40:e0:b0:41:54:3c:85:d0:50:f8:b0:55:98:f3:
         fa:09:6e:c3:3d:de:4a:e6:9e:61:9c:92:18:d9:00:9a:70:db:
         4c:9c:a8:8b:5e:74:1b:18:58:f5:2e:66:82:f7:47:36:72:0b:
         75:88:65:50:57:28:f6:d8:32:47:c7:a4:29:a2:56:9b:cc:b1:
         46:aa:f2:63:0c:d8:d4:04:4f:3a:0c:f5:ad:02:c3:65:1c:dd:
         21:5d:fa:02:ca:71:9c:83:8b:7e:6f:c8:44:8a:51:8d:03:d3:
         d3:0d:6d:a4:9c:ec:23:e0:c2:78:cc:f2:b9:08:b2:17:76:e1:
         37:8f:36:31:a1:4f:1f:1d:1a:07:03:75:6f:ee:d7:f0:9f:3c:
         21:94:3e:37:1f:8d:3c:c3:af:3d:d4:19:7f:60:1d:89:d0:3b:
         07:61:a9:c7:f6:2d:d0:17:4e:2e:4a:c9:a3:83:4c:51:68:21:
         cf:ad:4c:0c:05:fb:e9:b8:46:24:00:df:1d:44:49:8e:b3:9f:
         70:90:c3:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----