Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b58259a6b67eac1706b8790445826328ade73619.cer
File:                     b58259a6b67eac1706b8790445826328ade73619.cer (raw, json)
Hash identifier:          gDCFscCxoh7rYJmcLL5+YXy0S7cqXEhfGsXUkmxXa6c=
Subject key identifier:   CD:B9:E9:55:78:23:99:64:01:7E:DE:15:66:A0:08:E6:5E:68:97:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E45944
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9f0d139b-6c8b-46e8-9404-b319d9e61b47/b58259a6b67eac1706b8790445826328ade73619.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9f0d139b-6c8b-46e8-9404-b319d9e61b47/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 09 Apr 2023 01:32:43 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.188.44.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14965060 (0xe45944)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  9 01:32:43 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=b58259a6b67eac1706b8790445826328ade73619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:b0:bb:95:cf:65:68:ee:db:12:6a:e9:4c:03:
                    5e:bf:0a:e7:48:2f:54:32:92:09:8c:3d:bf:20:72:
                    ef:d6:4d:73:9a:79:32:a9:15:4f:4d:bb:70:55:da:
                    18:c1:34:51:90:08:01:6d:c5:b6:d9:7e:db:a3:c9:
                    d9:c1:60:fd:c4:0c:32:c7:a6:7c:75:ce:94:cd:a8:
                    ff:73:a1:6c:a2:56:22:2e:1c:42:fa:99:6a:6e:e4:
                    ed:57:9e:94:8c:8a:7c:8e:75:78:25:ee:30:c4:ff:
                    e1:e4:3f:ab:d5:16:78:f1:00:fc:3f:99:b6:a6:41:
                    16:6d:9f:b7:4d:0a:dd:7d:f2:86:48:1a:19:98:73:
                    dd:87:fb:c6:2a:82:71:87:3b:9a:32:c0:be:7b:c6:
                    04:00:e9:63:d0:28:ec:3f:70:49:3a:2f:23:2b:11:
                    0b:fd:fa:4b:5f:2f:cc:6c:e7:c8:fc:d9:ca:81:4d:
                    48:54:e7:71:5e:eb:c6:3f:84:f5:ad:8d:7b:78:17:
                    f8:04:7f:32:b2:54:a4:36:84:7f:5e:a3:e1:01:85:
                    d8:97:51:cd:07:6e:7d:cb:0a:3b:d8:13:ae:eb:e6:
                    7f:e6:37:04:c1:aa:b7:a4:80:d7:eb:22:b3:64:bd:
                    4f:09:c9:20:77:57:b7:3f:bf:ab:39:96:b2:b1:c0:
                    b1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B9:E9:55:78:23:99:64:01:7E:DE:15:66:A0:08:E6:5E:68:97:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9f0d139b-6c8b-46e8-9404-b319d9e61b47/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9f0d139b-6c8b-46e8-9404-b319d9e61b47/b58259a6b67eac1706b8790445826328ade73619.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:cb:32:7d:bf:27:63:82:ad:5e:98:12:5d:11:93:74:43:68:
         e9:b6:bc:c6:2e:c5:2a:03:fd:72:43:34:e6:8a:c1:da:e1:fb:
         8e:ed:b3:32:0d:2c:04:e1:04:da:a5:49:6f:5c:57:70:0a:af:
         d3:a2:41:8c:ec:35:bf:99:fb:18:57:d3:c1:82:de:cd:ea:6b:
         75:9b:bc:dc:f7:40:04:c5:55:e3:eb:a7:a5:d9:5f:26:b6:36:
         84:62:1c:70:03:6f:a8:91:b8:2b:ad:a7:82:32:7d:8b:10:4f:
         ef:0a:c6:d1:4b:d8:d1:09:1b:60:51:9e:69:f0:d7:10:56:1d:
         9c:d6:ee:6b:12:7e:1a:c3:e7:f8:7a:a1:24:f0:12:77:bd:34:
         e7:96:82:4f:ce:0f:0f:8b:c3:7d:f9:78:99:08:f5:02:d4:8b:
         b3:91:e2:16:a4:66:04:f7:d1:e9:ba:97:4d:21:52:f1:bd:17:
         fc:6a:3c:fc:a3:08:cf:b2:55:e2:f2:41:a1:23:55:c2:6c:fa:
         1f:14:06:1f:13:7c:9b:4d:c8:c0:3c:ff:52:72:0e:87:11:d2:
         6f:2a:ce:77:1d:d0:eb:2a:c3:c1:1d:d4:6c:02:23:60:e3:3c:
         07:17:94:dc:76:b1:37:d3:d4:6b:71:53:b9:a7:31:97:45:b4:
         b3:ee:d3:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----