Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/441590a7d1a13d679fe55c4f6a0e812dfd2d368c.cer
File:                     441590a7d1a13d679fe55c4f6a0e812dfd2d368c.cer (raw, json)
Hash identifier:          3h6YXG6YLw7JWT7KoVodqj8C2W02p591exrHHzNN0DY=
Subject key identifier:   4D:33:2C:0F:59:C1:DF:A8:EC:D7:2F:22:32:97:DE:9D:BC:0C:71:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0D1D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/362674a1-fecf-456e-bf83-4a2c61ed9d7f/441590a7d1a13d679fe55c4f6a0e812dfd2d368c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/362674a1-fecf-456e-bf83-4a2c61ed9d7f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Jul 2023 20:26:20 +0000
Certificate not after:    Thu 19 Dec 2024 02:23:07 +0000
Subordinate resources:    AS: 269945
                          IP: 201.131.64.0/24
                          IP: 2801:13:c800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15782360 (0xf0d1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  5 20:26:20 2023 GMT
            Not After : Dec 19 02:23:07 2024 GMT
        Subject: CN=441590a7d1a13d679fe55c4f6a0e812dfd2d368c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:43:b2:27:b3:22:99:90:b9:68:83:2a:7f:8c:
                    c1:95:a8:2e:c7:c2:77:b6:b5:15:a5:c7:45:f2:49:
                    ba:fa:cb:40:0c:13:55:3e:f8:46:b0:36:ae:c0:f9:
                    67:12:49:69:14:70:bf:0c:df:57:63:8d:42:c5:cc:
                    d5:c3:c4:22:dc:22:7f:50:fa:60:4f:5d:8b:9e:33:
                    dd:ab:2f:af:dc:d0:1e:4d:02:84:91:89:f9:d8:2a:
                    23:59:2d:25:96:21:c6:e4:b8:5b:87:65:04:9b:76:
                    7a:8d:9e:56:a3:f5:f5:b7:45:57:8b:a3:b4:db:32:
                    1b:05:2a:a0:d5:8f:18:11:57:43:04:c1:c6:3e:d5:
                    0d:c9:d1:ce:73:16:c9:2c:29:d3:7f:26:b3:ac:32:
                    3c:e8:58:9f:e8:bb:23:2d:62:fb:7c:d5:25:a8:36:
                    f2:8d:01:8b:e6:36:6b:82:f8:a4:22:cc:29:10:ac:
                    87:79:a1:fb:1c:05:61:f0:61:1a:7e:ae:7e:75:50:
                    67:d7:98:4c:e0:fd:94:0d:0c:33:d6:41:b9:68:b8:
                    de:2b:8e:95:7e:15:e7:4b:07:48:a5:0b:2b:a8:ac:
                    3e:15:bd:3f:c6:75:b4:65:a6:08:c1:8e:40:63:1f:
                    b8:a0:bb:f7:98:a3:b8:57:7a:f2:5e:a0:e9:3f:b7:
                    f0:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:33:2C:0F:59:C1:DF:A8:EC:D7:2F:22:32:97:DE:9D:BC:0C:71:66
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/362674a1-fecf-456e-bf83-4a2c61ed9d7f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/362674a1-fecf-456e-bf83-4a2c61ed9d7f/441590a7d1a13d679fe55c4f6a0e812dfd2d368c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.64.0/24
                IPv6:
                  2801:13:c800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269945

    Signature Algorithm: sha256WithRSAEncryption
         32:07:17:c5:40:1c:31:98:53:b2:24:80:5b:fa:29:d8:75:e7:
         b0:ee:c6:8b:71:5a:8b:f1:e8:d0:c3:11:63:ca:9a:4d:3a:04:
         79:b7:88:c0:96:7c:58:76:b6:c6:47:41:37:7b:75:dd:cf:fc:
         e9:5b:2f:84:11:b8:e7:72:17:c6:89:28:b3:dd:8a:56:fc:ad:
         7f:8f:9d:43:ef:1f:d3:d9:6f:0d:81:43:cd:c9:5f:0e:a2:c1:
         e2:1b:ef:f2:1b:9c:de:5b:7b:23:ec:a3:ad:43:d7:f0:16:46:
         5e:8b:0f:98:2c:0f:6f:9a:f5:9f:ce:64:e2:4d:2d:7d:0e:01:
         92:98:f0:d2:5e:e8:50:45:63:55:52:cb:b4:69:5a:0e:15:e2:
         54:10:ff:a0:2c:f4:be:d3:f5:7d:34:f5:1d:89:62:43:18:91:
         cd:0e:00:85:71:a7:25:00:a6:11:68:e1:f0:a3:83:3c:5c:92:
         39:1e:61:4f:dc:21:2f:03:92:71:6a:22:e1:a5:dc:6c:c6:fa:
         fd:3f:18:61:74:ad:86:ff:1f:c7:06:49:b1:12:ba:0b:2d:11:
         a3:7f:a9:7b:2c:4a:43:81:33:7d:de:2d:a2:c0:ad:28:e6:75:
         8a:f5:03:ce:b5:54:c4:8e:74:66:d0:f6:51:a2:b3:d8:0a:e2:
         4d:7f:22:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----