Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/408fd1b8dcea85c394541839b1f1d4cc2c5e9ddb.cer
File:                     408fd1b8dcea85c394541839b1f1d4cc2c5e9ddb.cer (raw, json)
Hash identifier:          OMOS2uOn3K+Yf7iOEwWiEYuOfYQA6UcDJrOeMwJ8aoM=
Subject key identifier:   C4:0B:D4:1B:2D:5E:95:AB:4E:60:49:78:25:96:54:B6:58:DE:36:E9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       011067A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1c19d7fd-69a8-47d6-b5ee-d9d78c510edb/408fd1b8dcea85c394541839b1f1d4cc2c5e9ddb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1c19d7fd-69a8-47d6-b5ee-d9d78c510edb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Apr 2024 19:49:04 +0000
Certificate not after:    Sat 01 Nov 2025 14:00:00 +0000
Subordinate resources:    AS: 3449
                          IP: 157.92.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17852323 (0x11067a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 19:49:04 2024 GMT
            Not After : Nov  1 14:00:00 2025 GMT
        Subject: CN=408fd1b8dcea85c394541839b1f1d4cc2c5e9ddb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:b1:74:a6:11:6b:63:47:f6:24:2e:b9:3c:d1:
                    e4:13:1d:a2:66:55:33:bc:6c:bc:45:0f:db:87:56:
                    42:94:bd:a8:d5:63:89:a9:28:5f:f6:ea:1a:ae:1d:
                    60:ee:9c:c4:fb:84:38:5f:4a:93:81:c1:fd:d9:81:
                    ef:cc:8a:39:c4:67:f8:0c:b5:ae:66:62:d9:9a:ed:
                    17:50:cc:02:da:32:ac:d1:08:bb:da:fc:bd:85:46:
                    e0:31:7b:07:9d:a9:38:50:7b:53:7f:05:58:1e:69:
                    ff:6e:cf:69:63:08:69:1a:27:32:cd:31:fe:ba:1d:
                    59:4b:76:a3:d6:cb:d0:39:1c:d0:17:98:ff:8c:00:
                    74:81:13:ba:a9:bf:5d:58:cb:31:5e:f0:28:64:e6:
                    e2:ac:b6:5c:3d:cb:dd:69:37:3f:78:0d:e6:5e:75:
                    ed:40:de:43:09:50:fb:ce:d9:34:88:e2:c8:07:c7:
                    70:8b:5e:0c:d2:75:03:8e:e0:58:24:9b:3d:62:65:
                    d7:8c:e2:05:2c:47:a1:18:01:62:ae:4b:c0:67:5e:
                    df:64:2b:71:7c:96:f9:c2:3f:c8:99:3f:5f:7a:6e:
                    25:2b:de:c4:ea:2e:47:a3:bb:15:96:c0:ba:b8:4d:
                    60:85:1d:2a:93:32:4b:ea:ec:73:33:68:a4:40:57:
                    3e:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:0B:D4:1B:2D:5E:95:AB:4E:60:49:78:25:96:54:B6:58:DE:36:E9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1c19d7fd-69a8-47d6-b5ee-d9d78c510edb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1c19d7fd-69a8-47d6-b5ee-d9d78c510edb/408fd1b8dcea85c394541839b1f1d4cc2c5e9ddb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.92.0.0/16

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3449

    Signature Algorithm: sha256WithRSAEncryption
         02:37:e2:eb:3e:3c:36:ee:b2:66:ae:c4:ee:e6:c2:28:a6:c9:
         68:7d:25:c7:97:53:5a:44:09:e2:d4:98:d8:85:8e:f9:79:fa:
         f7:f2:34:a9:ed:44:7a:7c:fb:eb:33:29:12:67:c8:97:f5:da:
         4f:68:5f:64:d0:72:1a:a1:a6:45:e7:02:48:34:f1:95:de:0c:
         52:1b:02:94:6d:25:2b:0b:87:74:b6:dd:1f:d1:89:f9:bb:e1:
         fd:68:65:6d:1f:e5:4a:41:42:88:fa:50:e0:13:97:a7:71:ff:
         ec:30:06:d5:76:9f:95:b3:b8:da:ff:a5:07:fb:d0:12:cd:52:
         93:de:87:13:3a:56:0d:0a:b7:53:bf:5c:63:d8:8d:7f:ca:a3:
         44:b8:ea:60:d0:20:dd:ee:66:9f:6b:c4:e4:05:37:ed:ce:1f:
         cc:4b:46:db:f5:d8:53:bb:8e:16:f9:01:ea:7f:0a:73:b9:c3:
         8f:15:b5:44:1c:58:f1:b8:68:15:32:a7:dd:42:43:8b:b7:dc:
         2f:4a:45:92:78:a0:a4:28:8a:19:47:30:6f:5f:80:ce:a1:3c:
         d7:90:86:82:e3:85:81:c9:1a:b0:6b:5b:ed:af:f0:9c:ec:49:
         de:25:7d:18:a3:b2:6c:d3:7c:99:6b:79:1e:1d:9d:3a:40:04:
         23:e1:7c:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----