Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/41f1630c8ec0977773f9b27e202b448b14862658.cer
File:                     41f1630c8ec0977773f9b27e202b448b14862658.cer (raw, json)
Hash identifier:          b4O3/eM1JZO3NRo7qwXDYtP+gXGKK+4XeqDjfzPO2GY=
Subject key identifier:   22:5E:CF:89:A1:B8:E3:E7:52:90:9A:A2:8D:BA:5A:66:F3:0C:1A:31
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3E14D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/127f0cd1-cfd5-4e14-a177-116c9f156eb0/41f1630c8ec0977773f9b27e202b448b14862658.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/127f0cd1-cfd5-4e14-a177-116c9f156eb0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 17:44:07 +0000
Certificate not after:    Sun 12 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 52450
                          IP: 201.220.26.0/24
                          IP: 2801:1b::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14934349 (0xe3e14d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 17:44:07 2023 GMT
            Not After : Jan 12 05:00:00 2025 GMT
        Subject: CN=41f1630c8ec0977773f9b27e202b448b14862658
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:e4:07:e1:d7:5d:11:2c:a2:3d:5d:6a:6b:e5:
                    97:1c:9c:81:30:d4:94:d8:27:57:28:18:2b:d2:aa:
                    96:f2:af:a5:2d:6d:4f:6c:d4:76:dd:1c:ed:5c:09:
                    93:f4:fe:fd:97:f0:85:41:f1:a6:cf:c0:be:3a:83:
                    7f:13:c9:a6:43:98:92:68:d0:f6:44:4c:cd:e3:14:
                    d1:34:88:42:c1:65:9c:f2:14:2d:9a:c3:1a:60:27:
                    00:a6:e5:25:1b:51:34:47:69:77:9a:a2:52:37:0d:
                    55:f6:02:7c:94:cf:9a:c7:28:31:9d:69:f2:ba:f4:
                    46:d9:e5:20:33:a7:66:75:de:12:f5:b0:fa:dd:70:
                    2c:f9:dc:52:3f:67:d2:73:1b:e4:48:70:8d:3b:1f:
                    f8:07:c7:39:da:28:8d:e3:89:02:27:4a:08:dd:9e:
                    69:c6:c0:48:b0:5b:3f:cf:2a:ca:5d:2d:c4:e3:29:
                    10:31:ae:a2:ed:ff:52:32:f2:17:7f:0a:53:64:89:
                    10:77:b6:a3:46:69:14:4f:63:b9:0c:5e:27:40:55:
                    dc:c8:ff:c7:d6:2a:7b:a7:4b:01:03:ce:f5:a4:6a:
                    73:17:bb:db:c5:84:d6:d1:1b:1b:1b:0b:f1:76:d5:
                    5a:39:fc:ab:69:0b:2e:a1:5f:ef:94:42:ef:95:2b:
                    6a:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:5E:CF:89:A1:B8:E3:E7:52:90:9A:A2:8D:BA:5A:66:F3:0C:1A:31
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/127f0cd1-cfd5-4e14-a177-116c9f156eb0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/127f0cd1-cfd5-4e14-a177-116c9f156eb0/41f1630c8ec0977773f9b27e202b448b14862658.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.220.26.0/24
                IPv6:
                  2801:1b::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52450

    Signature Algorithm: sha256WithRSAEncryption
         43:33:1b:02:a1:9b:88:60:7f:51:ce:9c:88:0d:7d:6c:3c:72:
         f0:af:8c:44:fd:a0:c8:1c:96:fb:a8:8b:c7:ac:31:36:be:28:
         de:91:ee:ea:f3:2a:6a:9f:40:78:60:9f:db:2c:c6:89:3e:88:
         24:7c:b0:60:97:95:73:ec:06:ca:a4:5d:2b:47:f3:38:2f:3e:
         7d:f9:c6:1d:a0:63:24:be:80:8c:c5:77:69:5c:b3:60:46:e6:
         b8:6f:ea:cf:91:ca:f5:c8:a4:b1:2a:c5:1d:1f:e6:18:09:48:
         78:29:f8:31:5b:b2:83:42:c4:1b:09:c5:a1:62:fc:aa:b7:a2:
         e5:21:31:52:52:97:26:d9:39:eb:fa:40:f9:b5:16:82:f1:d6:
         cd:d1:de:e9:33:9a:8f:0c:57:5c:c2:8a:cf:91:21:ec:ea:7a:
         46:1e:c6:f1:33:4f:55:ae:de:48:af:5f:4f:0c:fe:d6:7a:6a:
         b3:a2:36:0e:53:ee:94:3f:d2:52:c6:37:bf:e3:47:ec:c2:5d:
         29:a7:20:62:e8:7d:bd:a9:48:d7:50:a0:03:ae:16:3b:a4:8b:
         55:7a:cb:12:46:3e:37:f9:38:1f:d4:4a:c5:fa:26:13:b1:06:
         df:9b:b8:63:dc:62:9e:69:ae:bc:df:1c:31:f6:12:a8:65:3a:
         87:fe:8b:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----