Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/609fbf5da49c19e4b5337833cf90e403384f2529.cer
File:                     609fbf5da49c19e4b5337833cf90e403384f2529.cer (raw, json)
Hash identifier:          LV2faTZMbpdc/vEA99o9nrdZqCbuYk8dkEEhOCw33TU=
Subject key identifier:   07:50:04:8D:27:EC:44:D8:38:4A:48:6A:25:DC:93:1B:0E:B6:FC:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4F48E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a3666d1c-5a03-46b6-9ae3-20737b130c71/609fbf5da49c19e4b5337833cf90e403384f2529.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a3666d1c-5a03-46b6-9ae3-20737b130c71/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 20:49:56 +0000
Certificate not after:    Sun 04 Aug 2024 19:31:59 +0000
Subordinate resources:    AS: 28385
                          AS: 28444
                          AS: 28464
                          IP: 201.131.204.0/22
                          IP: 2806:239::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15004814 (0xe4f48e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 20:49:56 2023 GMT
            Not After : Aug  4 19:31:59 2024 GMT
        Subject: CN=609fbf5da49c19e4b5337833cf90e403384f2529
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:54:46:b1:e3:69:c2:87:02:1d:b9:24:52:5c:
                    bf:1b:09:80:f2:4a:cf:6d:be:0e:e1:37:72:f3:69:
                    36:8b:e4:5d:f1:0c:e3:11:ab:62:f4:cf:29:07:51:
                    2f:71:90:7d:15:2e:8a:15:7e:ad:52:40:62:c8:48:
                    94:c7:02:05:00:82:03:f1:30:46:de:0e:d6:a1:f5:
                    c8:25:43:65:0e:d2:df:2a:1b:e8:5b:af:f6:21:af:
                    58:aa:3e:0c:06:f6:62:4d:d1:ca:fc:8c:8f:27:ed:
                    d5:0e:0b:0d:84:9f:59:53:3f:41:42:54:de:5a:0c:
                    3e:1f:81:d1:67:27:b5:84:58:97:48:f4:79:5e:3f:
                    24:71:f0:2a:71:0b:95:15:b4:62:e9:64:1c:39:41:
                    1d:df:fb:00:6a:20:e0:85:41:8e:e0:5e:87:b9:8d:
                    4f:7e:2a:5e:c6:3c:c6:60:e5:df:98:09:b4:ff:ea:
                    88:24:f9:e0:a2:c8:00:e1:ae:e8:9a:ee:45:3a:f6:
                    52:0f:60:b1:0c:a0:a1:42:42:df:79:d8:bf:15:bf:
                    95:61:a0:de:82:81:cc:ea:57:c3:8d:db:7b:11:e3:
                    56:61:2f:d5:6c:64:25:bc:e2:8c:11:8c:cb:d1:45:
                    79:6a:2a:47:2d:da:86:63:ea:5b:0e:6c:f7:83:b2:
                    48:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:50:04:8D:27:EC:44:D8:38:4A:48:6A:25:DC:93:1B:0E:B6:FC:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a3666d1c-5a03-46b6-9ae3-20737b130c71/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a3666d1c-5a03-46b6-9ae3-20737b130c71/609fbf5da49c19e4b5337833cf90e403384f2529.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.204.0/22
                IPv6:
                  2806:239::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28385
                  28444
                  28464

    Signature Algorithm: sha256WithRSAEncryption
         26:08:c2:67:80:1b:3e:94:81:36:14:34:29:19:c3:f9:f8:2a:
         ea:b7:eb:1e:5b:95:db:94:f1:30:cd:16:b7:d7:0b:61:ea:d4:
         24:0d:0c:04:58:24:57:bd:cb:7f:a9:30:f2:ea:86:c9:84:e3:
         4b:a2:42:f2:36:38:dc:7e:27:87:db:42:c2:26:b0:f1:ba:60:
         b9:3e:f2:a4:de:85:05:54:15:db:e1:62:0c:b4:50:6c:e8:c0:
         70:45:a2:6a:ab:07:30:28:87:ae:2f:4a:d8:7f:d2:89:0a:63:
         1b:98:a7:fc:63:6b:16:b6:a2:7f:c0:fc:2f:a9:8a:73:8d:9e:
         85:58:45:b9:7b:a7:99:02:a7:4f:cb:48:9b:3d:35:59:68:69:
         72:05:83:72:b0:a5:0f:71:d6:61:0e:df:2b:cc:ad:fb:1e:f3:
         b8:b9:cd:29:05:e1:99:40:85:cd:e9:4a:8a:44:26:b5:f9:70:
         99:6f:ea:ae:3f:d2:f3:cb:7e:7a:7c:1b:4a:47:b0:95:52:44:
         9c:50:9d:a3:46:9c:b0:b7:7a:ea:cd:50:54:3c:c9:e7:c8:4a:
         79:a3:71:ad:14:c1:17:0f:b9:f9:7b:0b:f4:0c:8b:d6:92:f5:
         0a:b6:af:cb:81:17:99:6e:5f:72:8e:d6:dd:f3:92:c9:75:6b:
         fb:45:dc:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----