Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/245d05b930db49c5c18cb3b70e2f0c7da3220031.cer
File:                     245d05b930db49c5c18cb3b70e2f0c7da3220031.cer (raw, json)
Hash identifier:          J2Oo75JpbrrtmRyO/UcJQOujpxOs97oJAZ8YdcRGQso=
Subject key identifier:   A4:19:2D:E3:73:51:2F:52:C9:06:70:7C:56:A9:0D:9B:CE:D3:72:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E35099
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1f9b3d4-adb9-4a10-93a8-d54e05f6bbbf/245d05b930db49c5c18cb3b70e2f0c7da3220031.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1f9b3d4-adb9-4a10-93a8-d54e05f6bbbf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 17:01:34 +0000
Certificate not after:    Fri 29 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 28035

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14897305 (0xe35099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 17:01:34 2023 GMT
            Not After : Nov 29 04:00:00 2024 GMT
        Subject: CN=245d05b930db49c5c18cb3b70e2f0c7da3220031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f7:1c:b8:d2:6e:a5:c5:0e:cb:4d:2a:69:b2:
                    35:24:3f:88:04:b5:a7:9b:52:34:b2:4b:39:cb:5a:
                    df:df:24:de:35:47:70:24:11:3e:c4:58:db:ca:53:
                    41:a2:1c:10:0c:56:cb:f9:ba:0a:d0:47:1b:9b:5b:
                    ac:76:13:8a:f5:c9:af:99:66:a6:3f:65:df:d8:05:
                    1c:63:3e:7a:11:4a:02:95:bb:79:c8:ef:c7:ed:ff:
                    35:86:56:61:ef:ab:10:ae:15:0c:25:49:a3:19:dd:
                    f9:ba:df:d7:ee:19:ea:ca:b0:49:64:b8:3b:a2:5c:
                    ba:80:6a:e5:3f:7b:d7:52:09:5f:fc:0e:f8:84:3f:
                    4c:dd:31:35:9e:c4:ef:19:48:a2:05:73:ef:fd:0a:
                    2b:fa:4f:17:49:b5:7b:db:c4:a2:47:21:ef:3e:bd:
                    2b:75:47:0e:67:dd:04:c6:40:1d:87:b2:55:72:ce:
                    4d:86:ff:06:df:59:c7:4b:18:7d:cd:c6:2b:e6:56:
                    59:df:89:e4:60:d6:8f:7f:76:c2:4b:fe:d3:64:61:
                    43:71:e6:72:7c:aa:81:73:4d:2e:67:b6:a9:0b:17:
                    25:b0:0e:fa:af:43:1e:30:86:b1:3b:9d:1f:47:bc:
                    54:4a:21:8a:89:c1:cf:db:32:a2:4b:34:5a:30:c7:
                    e5:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:19:2D:E3:73:51:2F:52:C9:06:70:7C:56:A9:0D:9B:CE:D3:72:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1f9b3d4-adb9-4a10-93a8-d54e05f6bbbf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1f9b3d4-adb9-4a10-93a8-d54e05f6bbbf/245d05b930db49c5c18cb3b70e2f0c7da3220031.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28035

    Signature Algorithm: sha256WithRSAEncryption
         6d:64:d9:98:84:c0:7c:45:55:66:eb:04:92:da:d7:fb:9a:d1:
         b2:a7:a3:c9:12:5e:d5:ba:1f:7e:de:fa:cf:d7:2b:17:67:c3:
         70:c5:2f:35:7e:1a:3d:58:ae:15:f7:ea:32:fb:5e:8b:29:72:
         73:36:69:bb:9d:4b:9e:84:01:af:eb:28:9b:5b:47:1e:ee:f4:
         93:20:8c:6a:09:b8:e9:0f:c5:a6:fb:46:52:16:6c:4a:14:be:
         9f:f0:38:f6:fc:72:a6:dd:b8:e2:df:90:bd:8f:63:85:57:38:
         51:56:df:51:32:d9:37:07:e1:27:31:c7:81:fb:22:11:88:dc:
         e1:af:59:fc:c3:c2:8b:c2:23:bd:d2:75:d4:2f:78:b9:2d:08:
         dc:e2:35:5a:30:81:d6:48:7e:44:64:f3:94:38:7f:e7:9e:72:
         40:48:d0:9c:03:f1:75:25:b1:58:1d:45:15:14:e1:64:d3:8e:
         75:d1:60:d6:92:1a:c4:13:2b:33:92:48:be:71:8b:bf:e5:3c:
         43:ba:71:c8:49:04:76:09:74:75:66:47:ef:81:2b:cc:7e:9c:
         e8:f9:17:00:91:f2:83:3b:7e:b3:19:83:28:94:c2:1a:83:c3:
         b8:92:a2:7b:16:05:4b:5f:8a:6c:96:ed:b8:10:a9:9a:27:72:
         f1:2e:d8:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----