Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41ecccbe7e4a661da433906d48e7f564fc8690e5.cer
File:                     41ecccbe7e4a661da433906d48e7f564fc8690e5.cer (raw, json)
Hash identifier:          6sC9FUH6IQ/9+iGmLRSuiFA2LmH4qBgCDvCPAWrAFcw=
Subject key identifier:   E8:6F:F0:F9:5C:24:45:E3:73:DE:CD:4D:34:47:1D:4F:63:1D:90:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2E1B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/41ecccbe7e4a661da433906d48e7f564fc8690e5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Mar 2023 20:19:51 +0000
Certificate not after:    Mon 16 Dec 2024 15:36:39 +0000
Subordinate resources:    AS: 272952
                          IP: 2801:1b9::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14868913 (0xe2e1b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 20:19:51 2023 GMT
            Not After : Dec 16 15:36:39 2024 GMT
        Subject: CN=41ecccbe7e4a661da433906d48e7f564fc8690e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:e7:20:65:23:e2:9c:9e:11:60:41:ab:30:
                    7e:4d:9e:e1:d8:42:ad:f0:bd:f4:0d:4c:1f:89:7d:
                    28:5f:85:62:c2:89:f1:e1:79:d5:ad:7e:ad:be:0d:
                    ae:a2:8a:91:1c:aa:9f:d2:c9:0a:3b:d5:6b:50:8d:
                    a8:bc:49:4a:3e:8f:7e:1a:b7:3b:d4:48:67:1b:1e:
                    cd:5b:65:6e:60:17:7e:8d:a9:47:2d:41:14:9f:a5:
                    24:a7:ae:2d:14:b8:03:60:ca:c1:e6:c2:91:74:93:
                    0e:35:49:2f:18:1f:ae:d3:21:6a:45:07:b5:e6:e0:
                    73:fd:21:58:e5:2b:39:ce:da:02:bb:c9:34:72:66:
                    c9:92:c7:c8:f1:f5:a6:90:26:51:ce:59:ac:4d:2f:
                    e3:f7:51:cd:ff:48:38:7d:06:35:15:01:2c:de:0e:
                    66:7e:0f:a6:53:d8:64:55:a3:61:12:46:20:80:61:
                    cc:3f:fa:c1:60:1b:91:44:17:a0:9e:bf:6c:55:85:
                    7e:a0:09:80:7a:44:01:93:73:9e:a6:93:87:af:1d:
                    1a:fa:0e:ce:77:c3:2a:80:75:3b:c1:62:3a:2e:d1:
                    4d:72:b1:ff:a5:9d:74:8b:6f:4f:5d:9e:6d:bb:e5:
                    c5:1c:72:61:b2:cb:6b:d1:74:45:67:89:75:1b:a5:
                    8f:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:6F:F0:F9:5C:24:45:E3:73:DE:CD:4D:34:47:1D:4F:63:1D:90:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/be2f55b8-72c4-4578-8085-35c9bbfd9026/41ecccbe7e4a661da433906d48e7f564fc8690e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b9::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272952

    Signature Algorithm: sha256WithRSAEncryption
         18:68:b5:fb:9f:05:23:2e:1a:35:8d:14:93:4f:28:e0:6e:fe:
         b1:75:51:42:35:22:e8:ef:11:ad:67:67:67:d3:cb:28:2d:92:
         73:ef:d3:e2:12:fb:05:a1:a7:f5:54:e6:40:5f:6b:9d:1c:68:
         c1:36:12:b9:cc:2b:79:30:83:6a:30:d7:b2:41:ca:c7:7d:7e:
         b3:e9:61:27:bb:6b:4b:a9:e4:a5:48:5e:7b:c8:af:1b:82:55:
         55:2e:c4:25:8f:90:49:21:e6:60:bc:98:98:d9:79:46:e1:fa:
         84:ed:7c:96:fc:cc:b2:5f:a4:2f:ba:df:88:5a:ca:22:d9:0e:
         41:f7:84:ad:7f:95:ad:45:0e:60:60:78:2a:54:90:a9:f8:d6:
         70:66:e6:1f:05:4d:7f:de:74:9a:a5:3a:08:af:14:43:8c:a1:
         f1:23:c6:76:d2:b9:0c:0a:aa:da:f5:35:be:65:22:03:21:d9:
         51:44:44:df:b6:52:0d:0c:fd:f3:82:4a:52:ff:5b:c6:f1:7d:
         36:53:91:4a:16:7c:cb:11:75:54:a7:90:c6:56:8b:07:d6:e1:
         8c:8f:dc:5e:b2:d7:16:85:18:f8:11:1e:42:a2:9a:0b:2e:70:
         9f:1a:09:0c:30:48:c7:64:fc:4c:78:fe:b1:f4:6c:2c:b6:73:
         7e:84:8d:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----