Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/49b56bbc90e2451ea7a4a2d1f43f6f34af6de114.cer
File:                     49b56bbc90e2451ea7a4a2d1f43f6f34af6de114.cer (raw, json)
Hash identifier:          4ZrSTCOWIKNG43wY096bhVcZ1IZOWlyVCgio6a4Z5Qc=
Subject key identifier:   71:D0:2C:A1:EC:2E:AC:16:B7:B3:A7:B5:4E:32:4D:1B:56:EB:93:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01018C4F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/49b56bbc90e2451ea7a4a2d1f43f6f34af6de114.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16878671 (0x1018c4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=49b56bbc90e2451ea7a4a2d1f43f6f34af6de114
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:ec:3d:00:c6:c6:35:c0:15:59:57:68:e1:51:
                    7f:1d:37:99:e3:fa:ea:62:84:5a:7d:93:69:10:86:
                    14:f2:87:42:7d:c2:a4:da:a8:14:99:bd:b4:45:aa:
                    b8:49:16:b2:7d:b3:e7:80:b8:bf:f0:a9:54:9f:a2:
                    87:31:30:34:11:62:6a:49:b3:42:e6:26:da:88:37:
                    30:a6:d2:01:ed:62:cf:d6:bb:82:ea:92:9d:a0:79:
                    fd:80:e7:93:6f:8a:40:bf:2b:1d:74:9b:bb:11:00:
                    7e:03:fa:85:e1:81:a7:6c:77:b3:cf:e5:56:3b:7e:
                    0d:91:1a:2e:1a:08:e9:db:2e:f2:8f:1a:bd:22:75:
                    14:fd:12:15:3a:21:ba:02:3f:92:0b:ec:4f:68:9b:
                    25:58:8f:cd:a5:1f:5b:b2:da:ec:f1:d0:9a:ae:d8:
                    69:3c:f4:aa:11:76:3e:55:1c:e2:7d:04:2e:58:3f:
                    0a:f3:2b:b4:93:b1:44:cd:f6:61:1c:7f:8f:62:48:
                    01:73:3e:d2:dd:e9:67:df:e4:29:0d:0c:fb:4d:3b:
                    3b:72:6d:bf:a2:8a:e5:fa:2c:29:b5:76:ac:c5:7e:
                    b0:ba:14:46:52:00:24:da:c0:b9:fd:c7:d8:22:1e:
                    8d:36:5c:6e:94:3e:f7:9f:c5:c4:e2:c7:82:21:3a:
                    ab:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:D0:2C:A1:EC:2E:AC:16:B7:B3:A7:B5:4E:32:4D:1B:56:EB:93:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/49b56bbc90e2451ea7a4a2d1f43f6f34af6de114.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         bd:29:48:fb:cb:a4:0f:a4:44:14:0f:19:2f:95:b1:c0:8d:da:
         07:2c:39:5f:81:17:7f:83:7a:47:30:47:8e:0f:32:50:97:2d:
         1e:28:1a:de:b4:6c:ef:33:fc:c5:3b:9c:f2:38:36:56:9b:d5:
         f0:5e:61:84:02:4c:aa:be:9c:2b:72:d7:fe:93:ba:06:c1:1f:
         e4:3d:ae:a7:b1:62:7d:e2:e7:c7:67:83:5f:f8:90:92:cc:1d:
         32:52:19:a3:14:48:c6:69:54:e2:3c:34:2e:43:90:7a:22:99:
         fc:c6:a7:2c:67:af:1e:76:99:45:22:4f:ca:af:48:a0:4e:5e:
         d2:1d:9d:6b:57:6c:81:05:5d:0f:8a:4b:4b:3a:f1:11:54:45:
         1d:74:b7:d1:d3:fa:37:4c:64:9a:d6:78:e2:35:f1:85:7e:d1:
         7d:5e:cf:14:83:c8:c5:3c:27:48:0b:a9:45:5b:ce:85:5a:f6:
         e3:8c:93:ce:c1:87:75:61:9f:d6:4a:78:d9:1c:86:6a:4c:ae:
         32:41:a3:f8:67:c4:2c:87:23:5a:ad:9a:ec:d1:f3:24:8b:31:
         49:46:b3:67:51:a6:39:df:63:f7:73:8b:fe:74:ad:1e:30:70:
         7c:fc:f0:65:fb:50:00:47:8a:d9:ff:1e:3a:64:99:17:78:ed:
         00:29:de:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----