Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca6604f4190edf6e41f19c87dc12971ee963efaa.cer
File:                     ca6604f4190edf6e41f19c87dc12971ee963efaa.cer (raw, json)
Hash identifier:          JaX6x3BcJ5Z0m+pdXcojeB3Maj+JUVzcDg6sqViahxA=
Subject key identifier:   B3:BF:44:86:37:97:15:C2:C8:CF:34:ED:0F:41:F0:58:1C:BC:EF:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED1EF2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fa0ed8f4-b668-4ed5-92e2-5781837a0d86/ca6604f4190edf6e41f19c87dc12971ee963efaa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fa0ed8f4-b668-4ed5-92e2-5781837a0d86/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Jun 2023 21:12:14 +0000
Certificate not after:    Mon 14 Oct 2024 23:54:17 +0000
Subordinate resources:    AS: 52437
                          IP: 200.115.19.0/24
                          IP: 2801:0:490::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15539954 (0xed1ef2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  7 21:12:14 2023 GMT
            Not After : Oct 14 23:54:17 2024 GMT
        Subject: CN=ca6604f4190edf6e41f19c87dc12971ee963efaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:08:16:52:42:a2:7c:92:de:09:20:ce:80:53:
                    e3:f9:b0:69:d4:28:c7:56:6e:cb:5d:b4:b5:5f:68:
                    0f:80:7c:0e:ce:38:1b:28:f3:2d:f9:90:f7:83:46:
                    77:95:27:1c:72:2b:0d:b6:1f:78:ad:e3:25:b2:ec:
                    5d:72:1d:a3:b0:5c:e2:63:84:61:5d:4a:b5:05:c4:
                    f4:cf:5a:26:b2:97:94:10:06:e2:5c:06:07:c1:6c:
                    b9:69:be:16:eb:b0:72:01:22:48:36:8a:0c:fb:2a:
                    b0:0b:81:9c:c3:30:eb:04:45:b0:1a:5d:b6:df:02:
                    81:31:00:96:7a:2e:cc:24:a3:28:52:e0:2a:30:6e:
                    b6:16:9b:53:1e:66:12:34:61:2d:eb:fb:34:3a:10:
                    18:51:c6:4d:74:b4:8c:47:cc:1b:9a:ab:58:95:12:
                    49:39:6d:2b:e3:01:ac:19:5e:f9:d0:93:6b:fd:b3:
                    ea:bd:e2:91:7d:ce:bd:9f:45:70:53:27:a1:d1:0a:
                    cd:9d:29:3a:63:70:51:a3:60:1e:06:b9:76:53:dc:
                    6d:b3:06:ee:98:70:6f:c9:46:cd:39:a6:b4:ae:c9:
                    21:95:95:38:98:27:21:9f:23:60:b8:32:e9:45:8e:
                    2b:3c:5e:63:22:3a:c2:d5:a4:c7:a7:1f:c6:a3:1c:
                    ef:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BF:44:86:37:97:15:C2:C8:CF:34:ED:0F:41:F0:58:1C:BC:EF:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fa0ed8f4-b668-4ed5-92e2-5781837a0d86/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fa0ed8f4-b668-4ed5-92e2-5781837a0d86/ca6604f4190edf6e41f19c87dc12971ee963efaa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.115.19.0/24
                IPv6:
                  2801:0:490::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52437

    Signature Algorithm: sha256WithRSAEncryption
         bd:be:b5:9e:62:b9:f8:df:a6:28:35:18:bc:9d:cc:49:2f:eb:
         a3:3a:8f:41:f8:df:9f:9e:83:7f:51:89:f5:a0:16:c2:f0:31:
         e0:f7:12:54:a3:64:24:2e:ae:9d:9a:0c:91:3d:d8:20:88:e1:
         8f:fc:db:6f:eb:65:69:86:bd:04:64:e1:64:83:a6:c0:a9:f0:
         d5:6a:32:4f:4f:cc:90:4d:2a:0d:e7:e0:cd:5f:94:22:30:7a:
         38:df:98:87:71:4a:b8:2b:9c:40:b3:e2:d5:fd:27:43:2d:1a:
         ac:7c:bb:18:ba:81:0b:7b:7d:07:a5:11:fa:f8:13:1f:db:37:
         d2:66:00:00:6a:68:59:98:15:eb:6e:e3:e5:a5:7a:88:f1:50:
         98:28:e3:38:9d:bc:ea:3f:54:b6:87:d4:37:57:f1:ec:c3:f5:
         d4:82:95:fd:10:9e:09:34:d4:2e:65:fc:12:49:e3:e7:d7:91:
         ac:8c:9e:99:58:d2:0c:f7:b1:2f:65:9a:7e:71:d7:bb:04:9f:
         41:88:1e:85:5d:e8:2d:fe:a9:f4:71:0f:e6:e2:41:85:bd:d6:
         9b:f6:ab:69:4b:da:ee:08:4d:38:fa:76:73:4e:ab:61:e1:b3:
         b1:58:2f:0c:c7:2a:70:02:51:fe:6f:85:5f:5a:37:8e:cf:2e:
         e8:a7:44:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----