Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/433675ffcaf42308bbe841e1e9f12727a5547c8c.cer
File:                     433675ffcaf42308bbe841e1e9f12727a5547c8c.cer (raw, json)
Hash identifier:          ybfRiXm8IGtCmeXNnmPJSr9cizvdlWRY7ctVo4JUxAk=
Subject key identifier:   B7:69:AA:A7:E4:45:9A:68:EB:90:D3:AA:79:F0:EC:29:99:B3:D3:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E43366
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2a74afeb-f074-4f62-9290-0f8070cb8696/433675ffcaf42308bbe841e1e9f12727a5547c8c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2a74afeb-f074-4f62-9290-0f8070cb8696/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Apr 2023 18:38:30 +0000
Certificate not after:    Sun 19 Jan 2025 16:21:55 +0000
Subordinate resources:    AS: 28438
                          IP: 189.201.128.0/18
                          IP: 2806:320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14955366 (0xe43366)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  7 18:38:30 2023 GMT
            Not After : Jan 19 16:21:55 2025 GMT
        Subject: CN=433675ffcaf42308bbe841e1e9f12727a5547c8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:24:ce:26:24:19:91:e5:d0:e2:14:9b:08:54:
                    c8:2b:dc:1e:0c:2b:c5:e6:b3:9d:d7:92:12:bd:bc:
                    48:4a:4e:43:dc:38:05:4e:dd:94:1d:23:4d:80:4c:
                    2b:f8:55:27:d2:c6:60:3e:9a:21:81:de:21:9e:fc:
                    a9:3a:4b:6a:fd:4b:78:a3:64:e3:e4:3f:a1:80:d2:
                    c5:93:ed:24:2f:bd:8e:0f:01:82:b4:20:6a:6f:d2:
                    20:c0:a0:82:cb:c0:03:61:4b:6a:44:17:b5:5d:a0:
                    32:cd:7c:2f:18:62:d4:15:fc:ce:59:64:24:e5:15:
                    4d:97:71:82:c7:5e:b9:42:f7:64:51:4c:91:3f:07:
                    04:8d:9e:c6:b4:f0:f5:e7:2f:22:66:1c:5e:06:43:
                    8a:0d:0b:96:7b:c8:bd:d6:4d:91:61:23:61:90:46:
                    8b:4c:1c:fd:c2:07:d7:69:d0:6f:7e:0a:4c:2e:72:
                    05:5d:63:85:a8:70:98:75:02:f9:a8:e2:e7:92:1b:
                    82:3f:f8:c8:97:81:43:3f:8d:dd:35:8f:ca:3f:70:
                    ce:d0:4a:61:e5:f5:b5:94:fc:8e:8c:35:7e:33:b7:
                    93:b5:43:cb:68:ea:25:38:77:e2:7c:d5:f2:d4:03:
                    47:73:b6:fc:2f:20:8a:62:9b:6f:f8:b8:11:4e:fb:
                    01:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:69:AA:A7:E4:45:9A:68:EB:90:D3:AA:79:F0:EC:29:99:B3:D3:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2a74afeb-f074-4f62-9290-0f8070cb8696/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2a74afeb-f074-4f62-9290-0f8070cb8696/433675ffcaf42308bbe841e1e9f12727a5547c8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.128.0/18
                IPv6:
                  2806:320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28438

    Signature Algorithm: sha256WithRSAEncryption
         1d:1d:a6:a1:39:8a:e7:61:c2:eb:9d:fc:17:25:d9:e2:cf:82:
         d6:3f:38:37:7a:94:2b:11:72:73:bc:a6:4e:a3:b3:06:3b:9e:
         ee:01:5d:64:62:00:8f:81:5a:96:cf:ed:f2:3a:fe:df:32:53:
         5a:71:56:92:a1:e0:fb:79:e3:1e:73:41:d3:5d:15:d8:26:19:
         fc:e0:73:22:67:61:0f:9e:87:3a:a8:6d:00:e1:02:1d:20:9f:
         96:8d:c1:59:2c:66:0b:60:19:6b:a6:3a:1b:d8:ae:0d:88:3a:
         1e:40:89:6e:e9:82:0a:81:08:e4:f0:78:f0:ca:59:f0:46:0c:
         9c:50:ed:c8:59:e4:2d:8c:d3:71:1f:f6:87:7a:bd:ef:96:22:
         9f:97:47:e7:f2:92:70:13:0f:9f:f2:22:57:cf:c5:f3:64:4c:
         7e:25:2a:b1:12:ad:3c:f9:f4:4d:67:8c:b3:3b:02:27:00:d7:
         f4:f3:6a:5b:35:08:3a:38:9d:00:d5:9c:d9:be:76:b0:dd:ec:
         41:82:9f:9a:16:3b:75:8d:6a:3a:18:68:ea:8e:f2:d0:c2:10:
         9b:a7:3d:bb:4c:c4:c3:ee:0a:e1:dd:db:22:1f:0c:0e:e0:8a:
         5c:a2:fa:9f:89:ff:57:41:a9:02:02:21:16:18:93:99:c3:49:
         99:cd:fc:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----