Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d5f590146527e257a98c2881b3c621c90bde66.cer
File:                     43d5f590146527e257a98c2881b3c621c90bde66.cer (raw, json)
Hash identifier:          4CnWO62sQxFsCzQLUM9HybK0nVsUCvGmXOatgM1wwSQ=
Subject key identifier:   A1:1B:40:D8:BD:8F:68:0C:D4:20:72:9A:9B:A1:B3:1E:B0:5B:62:73
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA1B72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6bdc7141-17a9-46ff-a1f2-5a70c65599aa/43d5f590146527e257a98c2881b3c621c90bde66.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6bdc7141-17a9-46ff-a1f2-5a70c65599aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 14:48:05 +0000
Certificate not after:    Fri 11 Oct 2024 07:26:19 +0000
Subordinate resources:    AS: 269873
                          IP: 45.189.192.0/22
                          IP: 2803:a8e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16391026 (0xfa1b72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 19 14:48:05 2023 GMT
            Not After : Oct 11 07:26:19 2024 GMT
        Subject: CN=43d5f590146527e257a98c2881b3c621c90bde66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5e:89:f0:50:05:59:e5:da:0f:d9:a3:20:ab:
                    66:97:fa:0f:42:cc:8f:1f:4a:c2:d0:b0:41:25:b3:
                    4a:54:7b:0e:4c:d1:3f:c1:f3:6a:fd:10:b4:57:ff:
                    e8:b9:a8:9a:82:d4:6b:2a:0e:b4:84:9c:fb:86:04:
                    8d:15:1c:2f:60:89:fe:ec:3d:27:d6:80:32:a2:f2:
                    46:90:0b:2f:12:0e:56:5f:4e:ce:fc:12:9b:31:33:
                    17:65:68:e6:9f:04:58:8a:ee:9e:e8:58:d0:27:0f:
                    8e:39:cc:f2:2f:31:72:54:dc:f2:d5:41:d1:98:b2:
                    ad:15:60:bc:84:83:36:74:f9:90:58:ed:ee:da:4f:
                    03:03:a9:92:ba:78:67:e6:b6:04:b4:cf:a7:65:f1:
                    9b:89:06:9b:f8:e5:99:f1:81:9c:b9:a6:85:c9:26:
                    e0:0b:12:2a:f3:a6:db:4c:66:af:e2:a0:ff:4c:29:
                    ac:62:8f:91:14:b7:78:36:b0:39:f4:2d:20:9d:23:
                    fa:51:bb:4f:55:fb:98:b0:c5:9d:4b:06:bc:2c:05:
                    88:3b:57:19:c0:4c:6d:0c:dd:d9:9f:98:ea:e7:aa:
                    33:24:7b:3b:ad:ec:30:ec:01:26:30:3a:f1:53:ee:
                    bf:95:48:c1:8c:90:09:5f:a0:47:2a:44:e4:d8:af:
                    46:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1B:40:D8:BD:8F:68:0C:D4:20:72:9A:9B:A1:B3:1E:B0:5B:62:73
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6bdc7141-17a9-46ff-a1f2-5a70c65599aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6bdc7141-17a9-46ff-a1f2-5a70c65599aa/43d5f590146527e257a98c2881b3c621c90bde66.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.189.192.0/22
                IPv6:
                  2803:a8e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269873

    Signature Algorithm: sha256WithRSAEncryption
         86:e5:9c:98:3e:4d:9c:71:63:20:49:c7:b8:03:a9:08:83:b0:
         89:73:04:d7:4c:b1:89:d7:f6:34:55:2b:fe:12:05:24:a5:c8:
         01:3f:75:49:ac:ca:a9:d3:22:81:92:b1:e5:3e:00:f4:45:f3:
         bb:a1:ab:d5:c1:7d:e0:af:b2:fe:44:b9:d7:8a:ae:fe:81:2a:
         a1:00:e2:a8:26:58:3a:55:6c:03:80:fd:4d:f1:9e:71:07:76:
         8c:73:0a:63:2d:b4:25:96:09:5d:aa:15:c1:b1:b9:fd:f5:6d:
         67:c7:28:28:7e:25:60:33:31:7a:bf:f3:99:af:e2:3e:f3:17:
         59:b9:c6:60:c3:8a:fb:6d:68:6f:57:5a:8e:4b:d4:47:28:00:
         fd:71:f4:c6:63:25:74:2d:8d:8b:ce:c4:d4:d0:31:25:30:8d:
         ad:a6:16:a1:00:7b:35:42:1d:48:94:49:d5:90:c2:9d:0b:c5:
         28:de:86:85:5f:52:6e:fc:15:b3:bb:af:4f:fd:e6:cd:dc:2c:
         42:75:3b:22:89:59:9b:42:1b:4c:3b:65:bd:e9:79:9d:2d:09:
         46:0a:54:bb:33:a8:ac:82:30:8a:0a:cc:de:4c:ea:28:6e:39:
         98:f4:cc:a4:af:8d:fd:53:d3:a0:28:30:d6:ae:53:47:24:bc:
         6d:85:37:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----