Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41b12c488b776c52c9f45538cb8e212d315c27af.cer
File:                     41b12c488b776c52c9f45538cb8e212d315c27af.cer (raw, json)
Hash identifier:          gAqV4xhF7On53xNi+wQkwI9bh8q553eA7zehQdPzBTk=
Subject key identifier:   20:C4:BB:FD:9C:D0:90:36:F9:70:D3:72:82:81:24:69:70:80:E9:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D23027
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ace40ca5-fa3c-492d-97c6-53ade6e150f6/41b12c488b776c52c9f45538cb8e212d315c27af.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ace40ca5-fa3c-492d-97c6-53ade6e150f6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Sep 2022 17:58:13 +0000
Certificate not after:    Mon 11 Mar 2024 20:36:28 +0000
Subordinate resources:    AS: 264704
                          IP: 170.0.92.0/22
                          IP: 2803:4b40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13774887 (0xd23027)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 14 17:58:13 2022 GMT
            Not After : Mar 11 20:36:28 2024 GMT
        Subject: CN=41b12c488b776c52c9f45538cb8e212d315c27af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:a0:41:d6:26:02:94:86:c0:7f:6f:ab:11:
                    b0:bc:9e:27:3a:7f:11:b0:4f:75:e1:e2:d3:55:41:
                    98:29:cb:ff:6e:19:e8:29:22:ad:5f:23:78:19:ae:
                    48:a3:df:e3:7d:56:2d:09:48:1c:ca:cb:8c:66:88:
                    c7:08:45:32:de:4b:f9:5f:d5:c3:59:0d:9e:f5:b1:
                    07:19:69:cf:63:91:2d:ac:9e:0f:33:72:d8:f8:8c:
                    d8:56:0a:ce:39:c4:59:57:1e:31:01:6e:4b:f2:bd:
                    83:b6:12:79:9d:c3:3d:af:55:ea:3c:90:57:02:7c:
                    38:f2:ee:74:1f:f8:1d:83:4c:d8:65:9d:7b:7b:3e:
                    10:6b:70:1c:f3:0a:84:13:7e:e5:a6:08:b5:dd:0a:
                    0b:bc:a0:09:fc:b2:42:8c:39:ba:1a:4f:4c:bb:9a:
                    74:49:9e:a3:ef:2c:af:92:a2:d8:04:e4:54:b5:49:
                    6c:f2:cb:87:45:39:f3:6b:14:6b:0e:19:27:38:24:
                    fc:c1:a2:5e:af:c8:76:73:09:fa:9a:8b:13:b6:1d:
                    87:a5:97:ad:ea:99:33:5b:87:4d:7b:5c:11:6d:a7:
                    e2:70:41:dd:3b:2c:2d:48:63:fb:9d:c3:1f:d2:22:
                    41:50:76:ad:e7:ec:db:a3:72:d5:1e:72:41:f1:8e:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:C4:BB:FD:9C:D0:90:36:F9:70:D3:72:82:81:24:69:70:80:E9:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ace40ca5-fa3c-492d-97c6-53ade6e150f6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ace40ca5-fa3c-492d-97c6-53ade6e150f6/41b12c488b776c52c9f45538cb8e212d315c27af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.0.92.0/22
                IPv6:
                  2803:4b40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264704

    Signature Algorithm: sha256WithRSAEncryption
         5c:91:6e:79:54:b7:74:03:ee:aa:e9:8b:83:48:cd:4a:ae:28:
         a5:2c:44:ea:15:28:22:2a:7a:1d:5c:21:87:5c:8c:27:d6:cf:
         a7:39:88:15:31:94:7f:df:53:df:ef:a8:ec:01:0e:c9:98:e4:
         ab:bb:f3:a1:93:8e:9f:4c:fd:ab:83:d4:5d:1b:b8:b6:d7:17:
         c8:72:51:5b:61:9b:cd:06:d3:91:fc:a7:c2:1f:6e:47:71:c5:
         db:17:06:be:20:32:08:da:1a:f6:f7:e4:55:14:a4:06:81:c8:
         a9:f6:4c:24:0e:9f:63:b4:e4:d7:01:07:90:81:27:8d:ed:94:
         4f:37:91:67:4b:a3:51:80:ff:87:0e:15:9a:d1:00:76:a5:07:
         c1:22:ee:86:b7:b6:cf:67:a2:e9:b0:df:77:4e:8d:8c:16:8e:
         ef:f0:9d:db:67:99:a6:58:85:44:7b:fb:f5:14:f8:18:28:47:
         44:2e:89:9f:f8:5b:68:21:b8:9b:99:45:90:48:5b:22:e2:d0:
         7d:be:77:19:59:98:26:75:b0:e6:f9:67:8a:8e:1e:cb:6f:e9:
         a6:b4:bb:11:e4:27:33:5e:8d:94:2e:12:f6:f1:d3:00:7e:34:
         a1:5a:3d:4f:e4:a4:2b:b2:50:9f:5b:c1:28:34:3d:8d:48:d1:
         68:6a:fc:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----