Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/be189596dc7147a9e250cbf632fd473eb11cdd42.cer
File:                     be189596dc7147a9e250cbf632fd473eb11cdd42.cer (raw, json)
Hash identifier:          jwn7591MVfossPOI+x9/OPfXJ5k8esQ4d06JmXJQmtc=
Subject key identifier:   B9:4A:A7:17:A9:56:C4:9E:3E:18:12:7A:68:23:9E:C8:9A:D0:95:82
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EED0B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7733548b-e023-4dac-86ad-16ab8b019a4a/be189596dc7147a9e250cbf632fd473eb11cdd42.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7733548b-e023-4dac-86ad-16ab8b019a4a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 13:46:48 +0000
Certificate not after:    Wed 01 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 52316

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15650994 (0xeed0b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 13:46:48 2023 GMT
            Not After : Jan  1 05:00:00 2025 GMT
        Subject: CN=be189596dc7147a9e250cbf632fd473eb11cdd42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e8:8d:ca:65:dc:df:ec:05:69:94:fe:2c:b1:
                    05:21:c8:51:8c:22:8f:d5:1f:86:0a:4f:11:7a:37:
                    dc:d3:7b:3c:e7:65:83:38:bc:2b:c3:e7:d8:4b:e3:
                    29:a2:8f:c9:7d:71:30:3e:f0:9b:0e:4c:8f:b9:14:
                    e3:fa:4d:23:e7:76:54:d1:27:c7:9b:db:b1:0c:a0:
                    cd:a5:e9:9a:91:eb:6e:40:ab:87:e4:66:54:8e:55:
                    6b:ea:94:66:46:04:16:a6:9f:29:90:cf:ed:9c:9c:
                    c3:19:93:3c:fe:d0:a8:cb:b3:d7:31:65:5f:df:81:
                    df:cb:ec:fe:4c:47:d0:6a:8c:62:17:19:8b:64:b1:
                    16:db:a5:1f:34:99:39:ff:0e:32:dc:36:0d:db:29:
                    4a:6d:cb:c9:40:3b:82:68:30:30:d5:8c:74:0f:d2:
                    9e:f3:b8:2f:ff:08:07:a6:e2:d6:f1:a8:a6:8d:09:
                    60:da:ba:97:ac:b2:32:10:0b:26:eb:03:aa:a5:69:
                    04:69:42:87:d0:ca:58:0c:cf:20:b1:b7:0e:52:91:
                    5e:ea:c5:5b:a4:4f:bb:18:aa:78:34:90:e6:e9:01:
                    ca:8a:e1:c8:af:f6:f8:97:25:df:fd:80:74:11:09:
                    6c:c6:f6:fe:d8:94:b9:00:74:07:7b:20:a9:c3:99:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:4A:A7:17:A9:56:C4:9E:3E:18:12:7A:68:23:9E:C8:9A:D0:95:82
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7733548b-e023-4dac-86ad-16ab8b019a4a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7733548b-e023-4dac-86ad-16ab8b019a4a/be189596dc7147a9e250cbf632fd473eb11cdd42.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52316

    Signature Algorithm: sha256WithRSAEncryption
         aa:73:d0:27:f8:fa:33:9f:6b:15:c6:d5:b3:c6:b0:5a:30:43:
         95:21:d0:20:f8:75:c7:41:7e:62:60:3f:fd:f4:97:66:a6:96:
         8e:4d:3e:21:a2:34:01:bf:b0:78:76:37:be:7a:ad:e4:35:c3:
         6f:06:e0:d2:b6:f7:b3:b7:be:3a:dc:29:b6:b8:a6:e2:46:6f:
         39:83:d3:06:da:1c:55:66:0a:6d:d8:76:07:fc:ae:78:54:a5:
         c3:91:da:db:9a:41:f7:02:3e:6e:51:b1:b8:36:6f:74:14:74:
         b9:cd:82:30:fe:d5:bf:df:d0:fc:bd:da:07:fc:aa:40:1a:74:
         da:dc:84:a5:a1:43:cb:c7:90:f5:20:23:8c:71:56:64:16:5f:
         4b:18:06:45:0f:2f:f2:7e:c6:6e:ec:f0:07:18:58:dd:a9:54:
         a4:cc:c9:84:86:9c:60:94:04:4f:3a:c9:46:78:4f:23:a9:c0:
         e3:7b:bb:4f:c6:68:3d:f6:e3:84:94:83:fe:76:89:63:7e:05:
         18:43:60:bb:be:6e:31:d8:3e:24:3b:be:ec:ce:a0:2a:e5:7f:
         54:13:9d:69:57:77:0c:c5:8f:de:c6:94:e3:95:77:a1:2d:9d:
         8f:57:6a:a8:a9:6a:3e:21:e8:ff:14:88:95:e7:3a:59:7b:6e:
         43:56:82:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----