Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e1a3674bfc33a83b619c890d9c0faa05c43f059.cer
File:                     4e1a3674bfc33a83b619c890d9c0faa05c43f059.cer (raw, json)
Hash identifier:          V6ODtJd/3Yy5OGiieIEl0ZUPpiP6PjvToawlH+U8OOU=
Subject key identifier:   3D:DA:B6:92:23:06:AF:C2:AF:50:CA:B1:29:07:EB:05:16:1B:4D:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F23B0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/228d6ef4-ca29-4273-a016-94b1d27d7a9a/4e1a3674bfc33a83b619c890d9c0faa05c43f059.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/228d6ef4-ca29-4273-a016-94b1d27d7a9a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 23:12:47 +0000
Certificate not after:    Sat 18 Jan 2025 21:28:40 +0000
Subordinate resources:    AS: 263743
                          IP: 201.131.114.0/24
                          IP: 2801:14:8000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15874828 (0xf23b0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 18 23:12:47 2023 GMT
            Not After : Jan 18 21:28:40 2025 GMT
        Subject: CN=4e1a3674bfc33a83b619c890d9c0faa05c43f059
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ac:53:ac:eb:49:9b:84:bf:c1:cc:6a:66:0e:
                    58:48:42:a3:bd:c2:e3:a4:23:95:86:fc:73:11:37:
                    34:3c:14:e3:e4:45:70:97:fa:1e:63:5c:a1:3e:45:
                    8a:39:21:de:13:6e:f6:b7:9f:6f:82:81:34:c2:e4:
                    ed:01:d9:4c:86:97:af:3f:f8:26:02:35:9b:16:16:
                    99:15:00:8a:0d:39:e9:88:f5:01:8c:12:5c:96:03:
                    82:c7:64:90:cb:b7:29:29:0f:b2:cd:14:6e:6b:65:
                    61:38:da:6b:44:41:12:9d:3f:8a:4d:99:c5:f0:bf:
                    fa:c1:76:0b:20:50:b8:8c:36:25:f6:39:19:b4:ab:
                    29:bb:ef:7b:e7:d6:2f:b8:8e:ef:a5:17:4a:6c:f8:
                    a2:df:ac:b6:cd:11:b8:f1:bc:9c:d9:41:1c:e3:cc:
                    d5:a8:33:04:14:76:30:54:f7:bd:e6:8e:60:a7:9b:
                    32:ca:2f:f9:7f:ec:ee:8a:bd:e2:b1:46:9f:db:50:
                    21:64:90:1b:9c:91:f0:ab:ae:d5:5d:ab:3a:86:2d:
                    a2:bf:81:ff:f8:78:37:55:1a:ae:c7:2e:34:b3:ab:
                    ac:6f:02:da:89:55:98:97:1e:0d:f7:d3:da:01:4a:
                    e3:31:94:ed:5a:65:84:9e:9a:fd:b7:5f:dd:a4:db:
                    79:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DA:B6:92:23:06:AF:C2:AF:50:CA:B1:29:07:EB:05:16:1B:4D:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/228d6ef4-ca29-4273-a016-94b1d27d7a9a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/228d6ef4-ca29-4273-a016-94b1d27d7a9a/4e1a3674bfc33a83b619c890d9c0faa05c43f059.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.114.0/24
                IPv6:
                  2801:14:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263743

    Signature Algorithm: sha256WithRSAEncryption
         32:ad:0d:cc:8c:c9:d0:44:77:29:64:9d:a2:87:c3:36:ae:a6:
         c7:4f:30:9a:d8:0d:3c:a4:4b:11:6f:8b:f8:aa:f1:83:a5:ee:
         16:7f:af:c9:cf:e9:2d:15:8c:18:81:7d:15:19:b5:22:11:b4:
         3a:b1:f7:d2:9c:0e:22:40:e9:bb:da:78:87:79:02:72:f8:7a:
         38:5a:5c:8b:c9:23:45:ce:2c:2f:4b:ac:f9:38:fe:b4:fd:01:
         9d:0a:e8:44:c3:4f:19:d9:1d:57:c2:91:b4:04:ce:c8:4c:bf:
         39:34:1d:a3:1c:f7:60:8e:37:e0:58:17:b4:97:0b:8d:7f:29:
         83:16:87:2b:2a:c1:96:ab:0d:3f:a7:5a:2b:01:12:98:77:3a:
         91:09:28:2c:e7:3e:8b:b8:3e:b3:e3:44:9c:31:38:10:fd:88:
         b9:59:0a:43:47:40:16:27:f4:e5:24:e9:48:39:37:0b:a2:3a:
         0b:ce:a2:75:87:b7:02:f2:58:ff:8a:39:62:dd:ee:c6:cb:a4:
         0b:f6:4e:3b:d6:8c:a2:b6:da:60:0f:5b:0b:d0:f4:e3:94:38:
         f3:e0:f7:cf:d8:56:f8:f2:21:c1:66:b2:bd:67:ae:fc:24:fc:
         ef:9a:db:94:cf:80:4b:53:d3:45:55:ba:28:c9:e4:38:30:23:
         3a:cc:f2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----