Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/044cb91e8cb36583f8327f09fdd64ecc69140b69.cer
File:                     044cb91e8cb36583f8327f09fdd64ecc69140b69.cer (raw, json)
Hash identifier:          5lKeXwp6Oe5mmwteUTC/yvlhSRaxirsrU1BDmRR/MVg=
Subject key identifier:   2B:A2:9A:16:72:47:17:67:EA:BC:39:49:67:4C:CA:AE:92:5D:7C:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E30C3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/51b5e7df-f256-45f8-8577-5cb63a4147c3/044cb91e8cb36583f8327f09fdd64ecc69140b69.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/51b5e7df-f256-45f8-8577-5cb63a4147c3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 31 Mar 2023 18:52:41 +0000
Certificate not after:    Wed 29 Jan 2025 15:18:14 +0000
Subordinate resources:    AS: 272969
                          IP: 2803:2590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14879802 (0xe30c3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 31 18:52:41 2023 GMT
            Not After : Jan 29 15:18:14 2025 GMT
        Subject: CN=044cb91e8cb36583f8327f09fdd64ecc69140b69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:6a:03:a5:51:ec:b4:02:c2:e8:d5:c7:98:bf:
                    0b:dc:0c:a6:c3:66:4b:17:18:fc:03:0b:b2:70:17:
                    bb:22:02:77:a0:e2:9e:d1:46:15:06:6a:75:d9:bb:
                    44:c1:14:57:d1:20:59:22:bd:7a:fa:89:9d:97:ec:
                    73:57:1f:ad:34:4e:6c:84:73:1d:34:9e:8d:f9:b6:
                    f1:39:09:2b:25:1a:fc:8a:c4:b3:b5:70:10:43:2a:
                    e6:06:d2:93:36:4a:af:10:7a:3e:3f:a5:a2:5e:96:
                    55:0e:d0:38:2e:cc:6f:dd:7d:b8:79:28:5f:a7:e7:
                    fa:23:05:ae:89:78:4c:7a:ee:2f:de:92:9c:e5:9b:
                    74:d3:27:ac:10:35:01:53:84:14:bd:24:3a:fe:dd:
                    6d:73:67:d4:66:6d:9d:9b:fe:f2:2c:b6:b1:8d:91:
                    07:a1:19:7f:eb:af:32:4e:c1:ed:a1:22:5a:a1:ed:
                    48:87:ab:67:2d:86:7b:80:5e:da:d4:33:e9:c1:07:
                    69:c6:4b:bd:c5:63:b5:aa:ab:42:8a:9a:58:87:89:
                    0f:43:92:33:34:f7:df:1d:00:e1:17:b8:ae:d2:27:
                    0e:44:51:5a:fd:ce:7b:00:f8:0c:c5:2c:d0:2d:fb:
                    04:cc:4b:12:3f:12:76:0f:40:b9:3b:d6:c0:aa:6d:
                    0a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:A2:9A:16:72:47:17:67:EA:BC:39:49:67:4C:CA:AE:92:5D:7C:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/51b5e7df-f256-45f8-8577-5cb63a4147c3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/51b5e7df-f256-45f8-8577-5cb63a4147c3/044cb91e8cb36583f8327f09fdd64ecc69140b69.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272969

    Signature Algorithm: sha256WithRSAEncryption
         9e:be:79:e9:c2:36:dd:f3:63:61:ea:9e:89:0c:aa:c3:24:86:
         04:75:b1:69:77:e6:ce:3c:90:1f:79:17:ce:cf:eb:d7:a8:b4:
         69:2c:81:0f:09:1c:79:51:d8:f9:9b:38:63:db:d3:01:c0:a6:
         a7:c0:63:cd:f9:75:d1:59:54:08:b3:49:85:30:de:5d:95:7f:
         bb:ae:a9:7f:37:9f:59:1c:d4:1e:b5:57:79:f8:ee:18:a8:db:
         82:a2:e4:c6:81:8b:b4:2e:90:ab:3e:af:87:ba:d0:84:a8:3b:
         c5:dd:a9:9d:5f:e8:d1:54:8c:bd:0c:4f:ab:ea:de:fb:0c:2a:
         b6:48:bf:70:90:e1:88:c4:2d:ec:70:e6:0d:8c:6b:cc:03:23:
         fa:a3:5b:5b:77:6a:54:c7:df:dc:b0:09:88:37:de:2c:bc:4c:
         59:db:e9:73:da:ce:33:c1:13:e6:4c:6a:d5:3a:46:cc:2c:56:
         81:f3:5f:9c:8c:e1:5f:2d:f8:8e:29:4b:0e:d6:91:5b:d7:00:
         e9:02:20:7e:75:c0:1c:8e:05:0a:cb:63:4c:5e:46:f4:74:00:
         c1:d2:39:e4:7f:1a:d9:5b:78:02:59:13:f7:ae:8b:60:b1:d2:
         45:12:83:56:3f:ff:f5:6b:e8:2e:a0:81:e9:ca:f7:db:6d:95:
         b4:44:1c:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----