Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4405b868ae0abee684f20aa453c36e4e907aaa3e.cer
File:                     4405b868ae0abee684f20aa453c36e4e907aaa3e.cer (raw, json)
Hash identifier:          RM5zfOCi9J/JntazhsVA2Edhby4oQpuDOmuU6Sq53Oo=
Subject key identifier:   30:01:32:1C:94:67:39:CA:F4:72:53:04:0B:9B:20:5D:F6:32:81:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E81075
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/51bf5fcc-2074-4954-9237-58bed34cdae2/4405b868ae0abee684f20aa453c36e4e907aaa3e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/51bf5fcc-2074-4954-9237-58bed34cdae2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 May 2023 13:34:09 +0000
Certificate not after:    Fri 10 Jan 2025 13:52:07 +0000
Subordinate resources:    AS: 272088
                          IP: 2801:1d:9800::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15208565 (0xe81075)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 13:34:09 2023 GMT
            Not After : Jan 10 13:52:07 2025 GMT
        Subject: CN=4405b868ae0abee684f20aa453c36e4e907aaa3e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:70:d2:48:7f:93:6f:c1:d6:1c:8b:b3:f6:e3:
                    fe:d5:b5:49:0e:3f:1f:2d:6b:b8:62:05:23:05:cf:
                    98:c0:7b:72:89:7a:c1:f9:fe:c8:86:d8:ed:bb:d6:
                    ec:ed:a9:de:a0:a2:07:38:ba:46:2e:5e:4f:34:19:
                    76:e4:27:9f:f3:8f:5b:05:7c:a0:a6:15:10:da:0e:
                    24:29:7b:56:23:d5:13:ad:ab:42:93:32:23:b9:f3:
                    08:57:8d:17:9a:58:f5:a9:c7:df:82:71:69:1d:0c:
                    e3:33:f0:33:2a:eb:77:46:77:f5:4a:74:ee:35:c5:
                    50:b0:93:08:42:ce:09:dd:7b:0d:3c:88:44:13:89:
                    7b:f2:5c:ad:e1:e8:52:9c:dd:93:32:76:13:03:53:
                    59:30:69:42:b1:1a:db:dd:ff:48:d9:99:c8:d9:ca:
                    21:27:f5:11:ca:ae:0a:96:64:97:44:56:42:54:9e:
                    1c:23:a9:9e:aa:a8:2e:f9:e9:d6:72:27:0a:88:98:
                    74:de:22:7c:e2:ce:c3:01:1e:a1:26:52:e5:68:fd:
                    d4:e5:23:7f:2f:a0:6c:00:87:70:ea:e0:af:db:66:
                    80:e9:3b:64:a9:93:e5:2b:6c:0f:db:4a:fb:0c:da:
                    d9:c8:d3:f3:fb:3b:9d:e4:62:63:ca:0c:1b:83:5c:
                    dc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:01:32:1C:94:67:39:CA:F4:72:53:04:0B:9B:20:5D:F6:32:81:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/51bf5fcc-2074-4954-9237-58bed34cdae2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/51bf5fcc-2074-4954-9237-58bed34cdae2/4405b868ae0abee684f20aa453c36e4e907aaa3e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:9800::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272088

    Signature Algorithm: sha256WithRSAEncryption
         13:ac:9a:00:c5:c9:39:20:98:35:4e:18:f6:91:18:45:82:00:
         c8:0b:93:8c:06:af:e0:9c:57:4b:33:1c:fa:ed:21:df:f4:6a:
         7d:32:d2:36:2a:43:30:15:cc:c9:87:b9:22:a5:a4:f1:a1:b8:
         2d:06:55:09:60:f1:44:6b:59:47:ae:bb:8e:83:46:7a:ad:31:
         30:4d:0c:c0:83:c6:b9:75:80:5a:e0:26:2a:eb:eb:77:21:68:
         8a:ad:6a:06:c6:74:f0:d8:fe:db:06:49:0b:86:03:15:64:fe:
         f2:67:fe:6d:1f:1d:34:ec:26:2a:bf:f4:34:dc:ae:f5:93:6a:
         23:59:71:39:96:7a:50:72:37:50:3a:72:cd:81:02:bf:bd:9a:
         b5:4c:57:6d:cf:e7:07:79:f0:1e:27:c5:44:0d:90:63:04:39:
         2d:9e:82:29:48:3a:9f:94:36:14:28:7a:65:9b:49:7b:a3:31:
         4b:12:49:09:e1:ff:ee:1a:0d:bd:19:1b:e8:11:62:5f:da:79:
         37:21:13:b4:46:d0:43:44:e9:95:cb:51:c5:c4:87:61:7f:f7:
         f9:fe:1d:77:74:40:e1:82:7d:19:f1:7b:dc:b4:92:e9:b6:0d:
         90:3d:58:cd:1c:97:83:57:48:37:fa:c3:62:9b:5e:22:e4:2f:
         7f:5f:12:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----