Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48601251b0ea3b955f4437e7a7e207d8ec473a6d.cer
File:                     48601251b0ea3b955f4437e7a7e207d8ec473a6d.cer (raw, json)
Hash identifier:          Bavlh1r0tVdAH5niKSCKERLSpdfmEEDNw0SUr1PLyxs=
Subject key identifier:   33:71:2E:3F:93:E3:92:F2:75:13:84:B9:EE:94:62:42:C8:FC:68:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E906C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/48601251b0ea3b955f4437e7a7e207d8ec473a6d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 19:41:56 +0000
Certificate not after:    Sat 03 Aug 2024 17:05:44 +0000
Subordinate resources:    IP: 45.186.28.0/22
                          IP: 2803:4b60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15271619 (0xe906c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  8 19:41:56 2023 GMT
            Not After : Aug  3 17:05:44 2024 GMT
        Subject: CN=48601251b0ea3b955f4437e7a7e207d8ec473a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:49:68:77:4d:bf:a8:dc:88:40:4a:31:01:f5:
                    a0:2e:b6:8f:a3:6c:59:bb:53:43:eb:b4:89:55:c0:
                    a4:72:0d:d5:ac:16:04:b3:a4:9c:03:4f:4d:d5:99:
                    e3:08:7a:d4:5b:43:10:7d:fa:34:1b:84:be:2d:5b:
                    41:4b:89:79:ca:2f:b4:c3:86:51:59:b0:15:d3:bb:
                    09:87:f3:a0:5b:23:b4:2b:8f:f1:a5:02:cc:36:f5:
                    18:90:b9:32:b0:3a:fd:11:ef:70:7f:15:25:2c:34:
                    7f:92:f5:de:2b:65:9b:3d:ab:df:e9:79:cf:75:f9:
                    e5:71:b9:d8:3b:cc:13:80:cc:54:63:37:95:ed:07:
                    24:de:b8:e0:fe:29:10:af:d8:3a:15:15:6b:9c:18:
                    34:0e:4c:90:57:24:d2:e0:11:75:00:66:93:fa:01:
                    66:fd:ef:9c:2b:1d:2b:23:2d:46:7a:2f:3a:16:33:
                    07:df:91:3b:92:e2:a4:8b:96:4c:cd:0f:a0:4b:12:
                    40:18:26:33:47:76:28:71:68:f2:48:52:ef:47:b0:
                    30:c5:5c:5a:7b:e9:f3:d2:82:b7:96:1f:10:81:fd:
                    46:f2:0c:20:ad:b2:03:d1:80:dc:c1:f7:eb:c2:2c:
                    9f:8f:93:6f:de:47:23:aa:1f:3f:c2:d8:46:9b:c0:
                    45:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:71:2E:3F:93:E3:92:F2:75:13:84:B9:EE:94:62:42:C8:FC:68:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6b7f4f8e-67ba-49c9-892c-a5a31c283cd1/48601251b0ea3b955f4437e7a7e207d8ec473a6d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.28.0/22
                IPv6:
                  2803:4b60::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:fc:0b:99:74:42:a9:44:95:5b:b4:1b:b8:cb:0e:4a:f7:c3:
         9e:3f:3c:96:6d:7e:c0:fb:13:44:8f:79:9a:36:74:be:31:c7:
         20:3b:f7:ad:b6:ac:8c:00:36:15:90:ff:42:7b:00:d8:75:6a:
         76:de:40:2e:f6:e1:c4:27:b9:b5:1d:de:f2:94:02:1a:24:8a:
         8f:e7:20:b2:ac:8d:85:05:f9:13:1e:8a:c5:e7:b2:51:71:d7:
         6b:62:be:1c:ff:c7:9a:dd:63:f9:5e:07:25:05:9d:19:90:d7:
         8f:36:72:6f:27:85:87:4d:06:3f:46:e0:df:cd:21:8a:fd:a7:
         36:c8:f5:f1:78:ef:4c:94:7f:9e:8f:8c:65:51:0a:13:9b:87:
         db:58:f2:30:d7:87:f1:47:f2:ff:12:f8:13:1c:ac:2a:e5:28:
         a6:ba:c3:ee:83:d6:27:4c:13:04:a4:83:a4:b5:66:5e:8b:38:
         f0:4c:90:c0:b7:67:4f:88:f9:43:0d:58:f2:f1:8e:ad:4d:ac:
         7e:76:93:2c:fe:f5:07:c8:43:0d:da:0e:f7:c7:70:82:7a:eb:
         e9:0b:9e:d0:ff:a1:a5:17:b0:8e:d7:bc:c5:cd:76:b1:6c:2d:
         d5:0f:3e:9c:a3:9e:a8:c4:ca:2b:1f:0d:75:df:af:e9:54:e4:
         6f:f3:ca:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----