Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f45ac0f41c5480bbce9eb7a273f87103e8219cea.cer
File:                     f45ac0f41c5480bbce9eb7a273f87103e8219cea.cer (raw, json)
Hash identifier:          syezXrzAqX4f+1vx/22kjyxuqFdgsAAxpodkA7ZNKfQ=
Subject key identifier:   44:98:DE:A5:DE:FF:81:8B:34:20:0C:5E:2E:F9:C8:F0:36:9F:DD:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EACDE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/da0aa921-f0d4-4fe1-806c-ea54baca6b80/f45ac0f41c5480bbce9eb7a273f87103e8219cea.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/da0aa921-f0d4-4fe1-806c-ea54baca6b80/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 18:01:42 +0000
Certificate not after:    Fri 03 May 2024 22:15:18 +0000
Subordinate resources:    AS: 61458
                          IP: 131.0.0.0/22
                          IP: 2801:18:a000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15388132 (0xeacde4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 22 18:01:42 2023 GMT
            Not After : May  3 22:15:18 2024 GMT
        Subject: CN=f45ac0f41c5480bbce9eb7a273f87103e8219cea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:39:e9:4a:d7:68:d8:13:c5:97:d1:cb:55:35:
                    8c:f0:3f:31:c0:e9:cc:7c:df:6a:9a:91:25:2d:67:
                    8b:da:79:52:de:4d:2e:b6:c7:19:95:fe:75:4b:56:
                    e3:5d:10:b0:9b:7a:8d:de:9c:fe:c0:98:33:68:5b:
                    82:7e:73:b8:40:a5:30:40:ef:ad:ef:43:c7:5a:45:
                    f6:bc:f1:37:3d:f4:e5:5d:a7:7a:3c:f0:17:44:2c:
                    7d:c7:b5:1a:6b:aa:82:4d:52:c4:70:73:aa:a8:96:
                    35:a2:74:0f:4a:14:71:3b:cd:4a:73:fc:7b:f5:0a:
                    2c:0e:b4:68:14:af:eb:15:ef:98:9e:e1:a9:e5:fe:
                    83:3a:98:52:44:51:eb:e5:7a:60:f7:71:20:9e:c6:
                    9b:80:4d:00:a4:4f:61:15:1a:1f:48:b4:57:6e:6b:
                    fd:66:d8:4a:ed:08:07:9e:39:f4:5f:cf:32:ed:e7:
                    91:0c:ab:4b:02:7f:83:25:1d:d4:59:83:71:16:c4:
                    73:00:fc:a0:71:17:fb:49:35:d2:8a:05:b5:23:7f:
                    13:ff:86:ee:5f:cb:1e:43:82:ba:21:9a:50:ce:7b:
                    3f:a5:11:05:e7:68:77:9b:cc:cb:14:89:b9:99:5f:
                    d7:d6:db:6f:1b:ea:56:9a:1b:25:ea:cf:38:ec:e2:
                    1d:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:98:DE:A5:DE:FF:81:8B:34:20:0C:5E:2E:F9:C8:F0:36:9F:DD:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/da0aa921-f0d4-4fe1-806c-ea54baca6b80/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/da0aa921-f0d4-4fe1-806c-ea54baca6b80/f45ac0f41c5480bbce9eb7a273f87103e8219cea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.0.0/22
                IPv6:
                  2801:18:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61458

    Signature Algorithm: sha256WithRSAEncryption
         ad:04:00:de:95:f4:af:d6:81:7f:88:42:56:15:d4:50:aa:5f:
         60:3b:b0:96:23:37:d9:17:99:cd:9e:9c:dc:4c:b8:3a:99:e0:
         bc:31:23:75:cc:31:96:cd:98:5d:b9:1e:32:c0:5d:9b:d0:c2:
         06:7d:1f:53:a7:59:cb:13:d5:1d:26:e5:ef:12:aa:b6:0e:c7:
         93:5b:3e:91:21:7c:53:f9:0f:55:f3:de:e0:de:34:09:ce:8b:
         07:ce:33:90:1d:af:0e:97:4f:53:c9:35:32:91:9d:0d:ae:31:
         8a:54:80:4a:df:9b:ea:9c:72:90:95:d2:7e:47:ca:f0:9c:7d:
         0a:d8:e0:89:a5:bd:bc:a1:ac:fb:87:8d:be:f8:a1:51:72:58:
         de:c9:a0:de:6b:40:1e:82:89:46:79:93:69:54:7c:6e:b3:01:
         b1:1c:af:33:cc:df:8e:ce:59:07:e3:ee:b1:f0:60:48:cd:13:
         d5:00:ef:88:fe:30:af:a6:c4:62:a5:8b:97:ac:4f:8b:c1:23:
         8e:dd:94:56:23:0d:8a:61:f1:68:ef:57:ec:70:1c:77:2e:71:
         b4:36:4e:17:d3:9d:cc:89:38:3a:e9:92:d3:48:e5:d7:da:59:
         e7:ae:65:f2:76:ba:61:17:c3:ab:fa:34:cd:a5:5a:8a:78:33:
         c1:95:99:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----