Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4458fb21f95e1ab798d73a5ed251a7e89b44dd66.cer
File:                     4458fb21f95e1ab798d73a5ed251a7e89b44dd66.cer (raw, json)
Hash identifier:          +kZ4jPWm7BvcEbivw4dCvBu9vfA90bL3b5ZKRWLlx/Q=
Subject key identifier:   97:7F:87:7B:B1:3D:3F:6A:0C:74:CA:33:D9:E3:D7:6A:D2:58:DA:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCC5AC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/125e7de5-0b9a-41fa-82ba-2a75294dd5fd/4458fb21f95e1ab798d73a5ed251a7e89b44dd66.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/125e7de5-0b9a-41fa-82ba-2a75294dd5fd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 13 Oct 2023 13:15:07 +0000
Certificate not after:    Fri 18 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 27728

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16565676 (0xfcc5ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 13 13:15:07 2023 GMT
            Not After : Oct 18 05:00:00 2024 GMT
        Subject: CN=4458fb21f95e1ab798d73a5ed251a7e89b44dd66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:c9:2d:7d:18:1e:5e:2c:d7:52:00:d8:f8:6b:
                    e3:83:45:24:46:d5:80:27:7f:77:e3:c1:0e:17:6e:
                    65:34:9a:a0:29:8c:43:16:36:03:13:64:a1:0b:a3:
                    53:fb:c4:c3:25:c7:05:cf:61:40:3a:65:e0:ae:e5:
                    59:3d:de:de:30:80:ca:92:d6:eb:7b:f3:2a:85:de:
                    04:72:6a:e7:19:e3:cb:75:26:7e:1c:40:04:5c:87:
                    51:9f:4a:db:12:7f:35:06:62:05:1d:41:a3:1e:95:
                    d7:2c:fc:fd:18:23:d0:e8:bd:32:6c:63:b9:00:3e:
                    dc:06:f8:56:91:ce:d4:c1:d0:c0:25:ea:7f:06:26:
                    09:81:36:81:7d:5b:db:a6:3a:ec:5b:3b:64:11:99:
                    f6:1d:9b:87:2c:6f:70:7e:4e:29:0a:0b:a2:5f:4e:
                    81:51:28:69:3d:1a:18:01:03:fd:44:c3:18:41:c4:
                    4c:64:f7:6d:61:63:6b:02:62:50:54:28:9c:40:de:
                    65:3c:ce:dc:33:1d:b9:a6:37:1a:fd:52:6c:8d:58:
                    0f:c1:cb:06:ae:62:4f:08:42:e9:d9:93:0f:0e:00:
                    84:1d:01:fd:b3:56:f1:7d:02:47:3f:ef:0c:40:59:
                    7e:bd:f1:72:c9:4d:c0:8f:98:bf:df:f3:91:ad:bc:
                    a5:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:7F:87:7B:B1:3D:3F:6A:0C:74:CA:33:D9:E3:D7:6A:D2:58:DA:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/125e7de5-0b9a-41fa-82ba-2a75294dd5fd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/125e7de5-0b9a-41fa-82ba-2a75294dd5fd/4458fb21f95e1ab798d73a5ed251a7e89b44dd66.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27728

    Signature Algorithm: sha256WithRSAEncryption
         8d:ec:3a:a0:e9:3b:45:71:b4:ac:d1:08:e1:0a:d4:fa:b7:b6:
         50:13:32:a0:c5:1e:21:05:27:ea:5a:a8:55:d6:08:ac:7f:6e:
         20:6b:fc:b9:00:50:5f:95:c2:ea:e8:5f:c0:2f:ca:8b:b7:73:
         28:b6:46:b9:69:49:17:59:4a:37:4c:3c:b8:a0:57:15:3c:de:
         11:f0:3f:f5:45:e5:93:ca:98:d5:01:0f:25:d5:cd:03:d2:13:
         c0:86:8e:5b:68:26:ef:d5:db:03:ab:32:03:b7:bf:eb:e5:dc:
         28:43:f7:7d:19:9f:38:0d:c9:1d:51:53:8f:84:8b:f6:42:12:
         bc:c6:c4:9a:7f:91:02:d2:9d:ff:2b:56:1c:5f:23:ca:6e:32:
         d1:6f:6b:a6:cb:c9:a6:81:56:12:c3:a8:29:de:9d:28:4f:a9:
         aa:5f:6b:d4:1e:dc:5f:7a:b1:f2:fa:c2:68:bf:cf:e5:5a:4d:
         ab:18:d6:c5:84:4f:21:12:4c:f8:50:1b:25:3b:44:3c:e0:e4:
         6a:eb:b0:c2:2c:94:65:10:4b:09:b5:cc:00:b9:cc:75:3e:c0:
         e1:68:71:16:5f:e6:6a:f1:a2:fb:0e:6f:6a:9b:5b:59:a3:f7:
         e7:b0:c9:3c:05:d3:51:3b:fb:ce:b9:57:b2:4e:ce:f6:04:07:
         f3:bc:94:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----