Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c9d0440326a6712801c2ba8d314c8028a6edce1.cer
File:                     4c9d0440326a6712801c2ba8d314c8028a6edce1.cer (raw, json)
Hash identifier:          yQ3Du1O+JnpQ5qtrYQxdFs4MlfjFjGQxlfJysS//+f4=
Subject key identifier:   20:13:6D:A0:29:67:BF:7E:22:AE:CC:DA:D9:66:6C:4D:EB:76:4B:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102ED02
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0272c8ba-791a-47a4-8c3b-7b2ac7486fb8/4c9d0440326a6712801c2ba8d314c8028a6edce1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0272c8ba-791a-47a4-8c3b-7b2ac7486fb8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Dec 2023 01:24:23 +0000
Certificate not after:    Wed 20 Nov 2024 15:56:38 +0000
Subordinate resources:    AS: 265630
                          IP: 170.244.188.0/22
                          IP: 2803:aac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16968962 (0x102ed02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  5 01:24:23 2023 GMT
            Not After : Nov 20 15:56:38 2024 GMT
        Subject: CN=4c9d0440326a6712801c2ba8d314c8028a6edce1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:05:e6:f2:09:24:14:b5:8a:26:50:76:2e:
                    c3:d3:20:e6:e4:dc:2f:0f:d4:88:8a:42:33:64:ce:
                    44:82:a8:4f:7c:0e:cc:83:6d:ae:72:77:58:3e:3c:
                    0d:94:dd:67:d8:fb:4a:1a:c7:36:4d:9b:0a:e0:29:
                    94:45:b6:a8:c2:97:32:59:63:94:2d:ec:04:b2:a4:
                    7f:fa:aa:aa:2e:da:95:cd:25:f0:dc:af:89:21:e2:
                    0c:42:80:04:40:45:9a:8a:96:8c:3b:bf:69:42:f6:
                    b1:cb:7c:b7:99:1a:81:fa:91:ce:9f:de:95:aa:ae:
                    fb:ae:a2:f3:5f:17:9d:3f:e2:25:6b:d8:04:17:51:
                    e4:0e:55:89:6f:a0:21:a7:c6:c9:50:1f:f1:43:16:
                    59:28:2d:4e:6b:3a:f3:fc:3d:52:4a:12:6b:2c:cf:
                    74:95:14:cb:40:f4:90:7a:8e:f7:77:1f:d8:49:73:
                    4b:4e:5d:8c:e9:80:34:88:bc:8b:34:02:a5:25:27:
                    3b:ac:94:2a:7a:51:0f:a5:6d:2a:64:d5:9d:68:24:
                    61:5a:58:5f:4d:10:3a:02:da:06:38:5d:fb:ef:25:
                    0d:a4:fc:0b:7f:be:da:60:0e:bf:36:a3:18:41:d7:
                    29:80:f0:05:3d:47:5a:ed:26:0c:b6:38:87:de:d8:
                    89:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:13:6D:A0:29:67:BF:7E:22:AE:CC:DA:D9:66:6C:4D:EB:76:4B:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0272c8ba-791a-47a4-8c3b-7b2ac7486fb8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0272c8ba-791a-47a4-8c3b-7b2ac7486fb8/4c9d0440326a6712801c2ba8d314c8028a6edce1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.188.0/22
                IPv6:
                  2803:aac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265630

    Signature Algorithm: sha256WithRSAEncryption
         bb:b2:55:31:b9:b2:bc:bb:eb:e7:e9:ba:c2:62:aa:2e:d2:19:
         a7:bc:20:38:46:f6:8b:9c:81:26:de:5b:e1:8b:8c:18:72:c2:
         07:21:41:fe:5f:55:39:a7:af:18:af:13:d8:30:21:a3:41:49:
         b8:db:aa:a4:46:3f:ff:96:48:ad:d1:a1:fb:5e:ac:3c:dd:7f:
         82:ed:64:c5:de:cf:d3:0f:64:ce:f4:0a:30:6d:a8:c8:bc:24:
         4c:b0:9a:05:3f:b3:cd:77:91:28:b8:3a:0a:41:07:20:fc:19:
         bc:37:5f:db:66:6c:26:e8:73:da:e8:cf:3c:4c:6a:e4:73:46:
         d7:78:56:e5:06:55:d6:b2:18:b0:3e:49:90:d0:2a:d2:dd:36:
         9c:0d:1d:7b:f7:78:a3:51:1a:1f:69:3d:f8:1a:ed:fd:06:eb:
         c2:69:3a:15:0d:b4:9f:a7:c3:f2:4d:30:33:ef:d2:b8:62:c0:
         f2:31:41:78:8c:6a:d3:ee:71:75:59:ff:af:1e:fb:e3:a6:3a:
         8e:66:a3:78:0e:5e:8d:ef:53:d2:7e:18:ce:1c:b4:2d:6f:f4:
         d8:bf:f9:4a:83:55:4d:68:fb:3e:4d:e5:1b:c2:aa:dd:5a:09:
         13:67:58:c1:bb:ac:2e:37:78:85:19:89:7a:50:91:50:5d:d9:
         26:14:4e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----