Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06648e29e39a495ed1db237056c029aa5ab8ead6.cer
File:                     06648e29e39a495ed1db237056c029aa5ab8ead6.cer (raw, json)
Hash identifier:          4CU02/9IiU3v2ZGHV+9NJbY4uIWBCaHaCIGDMwgXN30=
Subject key identifier:   2C:9E:13:91:4F:94:D6:A8:60:6B:9C:4D:6C:72:98:DD:72:64:7C:EA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2CB0E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/06648e29e39a495ed1db237056c029aa5ab8ead6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Nov 2021 17:24:34 +0000
Certificate not after:    Sat 24 Aug 2024 22:39:08 +0000
Subordinate resources:    AS: 269866
                          IP: 45.186.152.0/22
                          IP: 2803:6760::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15911694 (0xf2cb0e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 26 17:24:34 2021 GMT
            Not After : Aug 24 22:39:08 2024 GMT
        Subject: CN=06648e29e39a495ed1db237056c029aa5ab8ead6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:e3:b5:39:31:21:7b:4d:c7:f9:18:20:b6:bc:
                    92:87:6c:8f:a8:44:6a:f9:b7:f9:cd:99:c1:c6:f1:
                    53:99:e5:6b:8e:70:69:88:4f:62:81:0d:e6:ff:5e:
                    b4:8f:4a:4c:d6:49:aa:cb:c9:f1:56:e7:99:cb:38:
                    3a:f9:c7:22:ce:5d:38:bd:c2:fa:d1:74:89:c4:81:
                    18:1e:c4:47:7c:81:00:72:74:47:4b:9e:3c:3a:0e:
                    03:84:17:3f:1c:8b:9f:a5:de:76:30:6e:13:a6:b8:
                    cd:05:56:ae:04:5c:2d:ec:b7:f8:2e:06:fb:a9:f5:
                    a2:77:42:75:67:d8:9b:a9:d9:96:97:8a:4e:8f:be:
                    f0:d4:b2:d6:8f:f2:fb:b6:99:cb:da:75:e3:2b:d0:
                    b4:43:d8:45:a5:fa:17:ee:5d:71:af:51:60:5a:1d:
                    67:b8:9d:18:a1:4c:f0:09:aa:e6:ed:05:a4:93:44:
                    c9:bc:27:6e:e6:aa:cc:af:e4:d9:ff:f2:a3:00:ab:
                    7d:2a:8b:de:3c:17:39:89:ca:ad:0a:66:b9:b3:71:
                    1c:58:ea:24:be:5f:4c:ac:4d:9e:51:eb:0b:d2:8b:
                    8c:6b:1c:4b:54:33:07:83:7a:8c:3b:a3:64:13:e8:
                    e5:97:f1:60:12:bf:25:64:7e:89:0e:2d:11:71:00:
                    2b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9E:13:91:4F:94:D6:A8:60:6B:9C:4D:6C:72:98:DD:72:64:7C:EA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0ff4e75a-b88a-4780-96da-1bce562287ae/06648e29e39a495ed1db237056c029aa5ab8ead6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.152.0/22
                IPv6:
                  2803:6760::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269866

    Signature Algorithm: sha256WithRSAEncryption
         6d:32:f7:fe:57:4c:e5:58:ec:e7:13:b7:36:f8:cf:d0:c9:58:
         27:27:bf:ba:7c:18:4c:50:77:3d:87:14:df:e0:ca:a6:98:14:
         72:6b:0e:b7:b5:9f:63:69:65:04:e6:68:fe:3a:6f:20:32:89:
         cf:66:43:8a:10:64:48:90:4a:03:95:1c:84:15:6a:52:44:79:
         fd:39:2d:d7:95:65:c3:4f:6c:ca:08:2f:ac:3a:89:6b:03:95:
         d6:08:7f:b6:dd:65:98:4a:f3:ae:3a:c1:11:16:4d:9b:f9:3a:
         38:f9:0b:54:71:6d:86:2a:6c:a0:4a:9f:43:53:3a:84:8f:3d:
         82:58:26:53:75:f2:f6:6c:91:e7:46:a9:51:a8:6f:a1:ce:44:
         4d:cd:d4:bc:5c:97:cd:d8:62:7a:17:3f:5c:ec:3a:f3:34:d7:
         76:ed:e2:60:44:ad:92:02:c0:d5:c4:a8:b5:e7:54:71:93:7b:
         2b:24:2d:0c:14:1b:9e:ac:df:11:33:6d:6e:0b:be:a8:e8:55:
         58:d4:17:0b:e5:7b:4c:01:02:c2:28:46:b5:e8:25:8c:ff:3b:
         05:37:e2:f3:f9:c7:19:81:34:c9:4f:89:f4:0b:de:11:ef:d8:
         bf:47:cb:3b:06:81:b5:40:2c:5e:c0:72:c3:0e:cd:3a:30:68:
         13:aa:f6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----