Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/44c0c42f2a746ed7ed4e4598104fe194814c0771.cer
File:                     44c0c42f2a746ed7ed4e4598104fe194814c0771.cer (raw, json)
Hash identifier:          fZtQhCS+Q5VGxpV8qkjctVxRQytrM03q5ML0NR6MvOw=
Subject key identifier:   3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E0948A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/44c0c42f2a746ed7ed4e4598104fe194814c0771.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Apr 2022 20:56:10 +0000
Certificate not after:    Fri 05 Apr 2024 22:19:10 +0000
Subordinate resources:    AS: 270027
                          IP: 200.233.40.0/22
                          IP: 2803:5e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14718090 (0xe0948a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 18 20:56:10 2022 GMT
            Not After : Apr  5 22:19:10 2024 GMT
        Subject: CN=44c0c42f2a746ed7ed4e4598104fe194814c0771
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:56:23:9e:5a:71:30:07:cb:39:e2:4c:74:99:
                    c5:73:cc:38:43:39:34:c0:4b:04:03:93:56:54:e4:
                    17:33:d8:4a:e4:6a:54:90:8b:92:d9:e4:53:da:2f:
                    8c:d1:6d:85:3d:a9:3a:c5:56:ed:61:9e:b1:bf:7c:
                    ec:34:e5:f9:1e:33:17:01:87:b3:31:30:02:a7:e0:
                    e3:ff:60:fb:b4:7a:19:eb:d5:7e:df:f4:2e:83:e3:
                    37:f9:6d:f0:40:57:3f:f3:a9:10:36:a4:7b:40:b1:
                    be:40:de:22:8f:e7:c1:b7:c4:78:9b:67:67:19:48:
                    c7:f0:dc:4d:0b:d6:a6:0e:cd:b4:20:9a:f0:cb:05:
                    bc:50:29:89:c9:ab:cc:07:dd:a5:67:cd:20:71:8a:
                    c8:24:e1:7f:c3:8a:d3:b8:3a:49:68:98:56:c3:c3:
                    3a:29:07:5c:5a:5d:8d:91:52:18:c7:e4:ab:76:55:
                    dd:4c:85:7b:de:d2:51:fc:73:59:0a:c1:7e:f6:e1:
                    5b:06:40:6f:5e:9c:b9:4e:c8:f9:14:8f:ad:ca:39:
                    53:18:61:9c:c7:c7:0f:13:97:8c:4e:40:8d:f2:cf:
                    1e:2d:43:f6:b2:be:a6:fa:c1:63:a6:0b:a8:2f:6c:
                    b1:d3:92:81:55:46:01:e6:92:01:35:73:43:57:f1:
                    e0:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:79:35:E7:19:90:82:85:A6:E3:77:90:02:EB:0D:E1:81:C4:DC:80
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b172d44f-869f-48e6-bf88-6338470dc22e/44c0c42f2a746ed7ed4e4598104fe194814c0771.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.233.40.0/22
                IPv6:
                  2803:5e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270027

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:27:8b:56:3a:87:1d:29:f6:8d:45:dc:ea:be:f1:ae:21:
         9a:dd:1f:0f:3d:e8:76:e6:fc:38:30:42:97:ca:fa:be:d2:9c:
         6b:b8:86:2e:80:11:3a:83:2e:51:21:89:a0:9e:d6:23:52:bb:
         f6:31:98:18:73:26:40:cf:c1:07:1c:48:90:22:f6:6c:78:cd:
         30:9f:de:ed:cd:86:c3:9d:6e:4d:72:27:85:51:f3:8f:a1:b0:
         a5:ba:3f:24:eb:ea:be:4c:17:eb:c5:34:df:fa:fa:08:b9:8d:
         33:05:5b:ce:ad:8e:09:d6:42:f3:5d:f6:f8:36:cf:36:0c:1e:
         10:52:87:d7:7b:56:a5:de:aa:c7:0f:1e:e4:0f:eb:7d:1d:57:
         dc:71:f9:5c:b4:eb:b7:65:64:42:e2:2f:56:3b:d7:15:02:ae:
         3d:af:87:e8:07:69:91:26:9f:71:8a:97:71:83:11:a8:07:3d:
         bb:c6:a8:3e:97:c6:c4:ef:e6:68:94:6e:00:87:4a:6a:7d:e3:
         d3:67:75:f8:b9:38:65:b1:7e:e3:0f:2d:65:2e:bd:09:be:c8:
         36:2a:7b:14:f6:e8:b4:ec:87:3d:3c:7e:a8:7d:c3:03:18:97:
         e5:b9:8a:3b:67:80:b2:ca:19:27:b7:53:92:87:f2:66:8e:b1:
         2f:5d:5c:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----