Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4358464441e9d4d59b11d9f7116feb4008767b40.cer
File:                     4358464441e9d4d59b11d9f7116feb4008767b40.cer (raw, json)
Hash identifier:          tWivW3Ecz8faOYBQObFvVG0KJs0CTNjasKx/fe/rP5Q=
Subject key identifier:   48:AD:0F:A4:E7:3D:1D:31:ED:EB:E3:38:69:C2:9F:8C:EB:5B:F4:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3A515
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/4358464441e9d4d59b11d9f7116feb4008767b40.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 15:30:19 +0000
Certificate not after:    Sat 21 Sep 2024 18:54:27 +0000
Subordinate resources:    AS: 267728
                          IP: 45.167.24.0/22
                          IP: 2803:a5a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15967509 (0xf3a515)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  1 15:30:19 2023 GMT
            Not After : Sep 21 18:54:27 2024 GMT
        Subject: CN=4358464441e9d4d59b11d9f7116feb4008767b40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c2:be:07:e8:5f:f4:11:6c:10:07:b8:24:72:
                    e3:a3:34:3e:b4:8f:e9:5c:c0:40:2b:84:2a:31:8c:
                    d4:30:12:39:91:3b:ec:28:95:c3:a4:53:f3:fa:43:
                    4d:83:e7:ad:1e:94:57:93:eb:62:b4:b0:0f:47:eb:
                    30:fc:55:2e:a7:a2:58:df:b8:61:74:d9:98:ad:99:
                    03:7b:49:4f:d5:b6:b4:41:f0:9b:06:7b:87:3b:07:
                    ea:c5:7d:20:d1:d0:a9:63:41:89:bb:84:11:48:06:
                    83:c3:1d:67:8f:d1:b6:af:bf:79:1a:0e:db:69:1b:
                    fb:f1:3b:f6:6d:1e:b8:13:da:eb:77:bb:3a:77:0d:
                    c3:30:68:a3:2a:d5:ea:8f:28:54:e6:ee:8c:58:5f:
                    30:73:1c:8d:9b:70:c0:aa:4b:4c:b8:51:f0:79:34:
                    0c:bc:e0:30:01:1d:22:d9:ae:b4:36:45:26:59:b0:
                    53:24:38:11:20:6d:da:a9:1d:02:85:0b:47:4d:73:
                    f7:d5:8a:8f:3e:3b:72:a7:f1:c6:97:d7:55:51:5f:
                    ef:1a:70:d1:d9:ab:a9:6d:04:29:20:e8:c9:90:7a:
                    d9:ae:36:4d:26:cb:47:fb:e6:dd:67:16:ea:97:ea:
                    c1:a5:db:ef:32:45:16:1b:46:7e:07:0d:49:d1:38:
                    89:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:AD:0F:A4:E7:3D:1D:31:ED:EB:E3:38:69:C2:9F:8C:EB:5B:F4:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/db6e413e-b037-45a5-836f-796a816ac480/4358464441e9d4d59b11d9f7116feb4008767b40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.24.0/22
                IPv6:
                  2803:a5a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267728

    Signature Algorithm: sha256WithRSAEncryption
         51:2f:a5:19:de:b8:9d:2a:08:9b:a9:79:dd:d1:37:d9:df:e8:
         d5:16:1a:c8:37:dd:1b:89:79:cd:1a:8d:3a:00:30:02:f0:ea:
         87:86:d9:8f:0d:47:41:81:a5:0a:2b:e0:0a:2e:60:57:cb:f3:
         7c:a8:58:0e:05:fb:73:d0:c2:d5:03:04:49:c2:60:c7:d1:92:
         4a:0d:c8:e3:e6:1b:40:7b:ad:5b:10:8b:53:60:a6:c5:3f:ca:
         40:99:55:f3:d2:2f:44:25:d2:00:2e:c7:92:0e:4f:ba:fb:39:
         30:87:a9:fa:f4:ee:35:57:12:80:ea:39:f2:12:14:83:f9:f1:
         27:23:03:63:a6:2b:96:c7:c0:81:4c:7f:e8:72:f8:7f:2d:e5:
         ad:96:37:7b:db:c0:95:73:2b:54:38:50:c0:73:ff:4b:fb:ad:
         be:b1:79:86:6e:ec:1c:f9:bc:15:d4:4e:35:23:f6:ae:b5:d7:
         7c:c8:e9:6b:26:71:4a:41:19:6e:1b:fd:e9:28:a2:d9:ba:f8:
         b8:63:4b:df:69:7b:12:d2:a9:51:8b:b5:4c:ba:b1:31:dd:43:
         e0:7c:19:a5:d7:95:23:db:d2:1b:5c:36:69:c8:96:12:ac:67:
         ab:3e:15:40:90:73:e5:70:37:f2:1a:92:7f:f8:f5:59:0b:6f:
         90:ed:9b:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----