Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0048caf7ce87bff466e17f38ea984e0608802348.cer
File:                     0048caf7ce87bff466e17f38ea984e0608802348.cer (raw, json)
Hash identifier:          ZhVbgXMzaTvVYsifqagNFa+C2PkMK4JGW8Wa+JaxDh0=
Subject key identifier:   97:26:67:2C:2D:05:0E:B6:44:61:1B:81:E9:A7:E9:98:1C:40:3F:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF4039
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/0048caf7ce87bff466e17f38ea984e0608802348.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Jan 2022 16:48:58 +0000
Certificate not after:    Thu 14 Nov 2024 11:13:01 +0000
Subordinate resources:    IP: 181.233.96.0/22
                          IP: 2806:3e2::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15679545 (0xef4039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 14 16:48:58 2022 GMT
            Not After : Nov 14 11:13:01 2024 GMT
        Subject: CN=0048caf7ce87bff466e17f38ea984e0608802348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:d7:49:d4:06:d0:41:f9:79:a7:9f:f4:30:86:
                    d5:bc:b8:b2:00:45:5d:04:87:22:86:d4:8a:ef:ee:
                    30:10:53:71:65:70:1f:de:24:fa:29:e9:41:01:d8:
                    af:b1:04:b6:02:11:03:82:60:3c:b4:50:1a:25:42:
                    fd:d1:55:99:c9:1c:a6:d4:4f:f3:a3:08:fa:af:d8:
                    8d:36:d4:46:ee:16:41:c0:04:d0:0f:df:36:b4:70:
                    55:8f:08:0f:6f:7a:6f:ea:88:e5:26:d6:cc:28:5f:
                    4f:9a:e4:e7:a2:d1:73:ca:46:b7:b3:f7:a7:7a:5b:
                    ac:e6:6d:ef:5f:bd:a2:f5:4b:d6:7c:ed:6c:67:d2:
                    73:ba:48:c9:91:9d:7d:d0:c3:df:b3:52:fa:f3:b6:
                    dc:61:f9:3e:7f:e7:29:7d:d5:b3:61:c8:7d:70:16:
                    b1:a0:d8:d5:3c:2d:64:dd:5c:e8:0a:0f:e2:92:c1:
                    2f:e6:5c:8d:49:05:88:5b:24:d5:6c:74:51:d6:49:
                    bf:81:8a:79:42:f4:91:95:84:17:09:18:ac:d3:2b:
                    52:44:1f:56:22:27:05:aa:99:59:09:c5:66:4b:59:
                    79:06:83:48:a8:c8:7b:0a:c2:ad:ca:35:ca:ae:ee:
                    90:03:8d:4e:53:ae:b1:47:8a:fd:33:78:92:f3:28:
                    78:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:26:67:2C:2D:05:0E:B6:44:61:1B:81:E9:A7:E9:98:1C:40:3F:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3d8b528a-ef31-4eb7-af74-c2e0680bc699/0048caf7ce87bff466e17f38ea984e0608802348.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.96.0/22
                IPv6:
                  2806:3e2::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:48:49:b8:0b:13:d6:15:e4:35:a5:c0:ee:13:d0:8b:65:e0:
         d9:56:61:c0:f0:65:e8:da:6d:d2:2b:03:a2:27:ff:83:91:ba:
         35:78:40:ce:33:4b:f2:19:4d:6d:85:c8:2c:1d:03:6a:26:e1:
         5b:c5:03:cc:ba:68:54:a0:3b:df:fa:ba:7e:14:6c:db:55:17:
         ef:77:38:c3:97:6b:66:3e:f3:80:fa:34:14:5c:37:63:23:cf:
         a4:5b:a8:5e:fb:ec:33:ee:43:0f:23:0c:bd:4d:bb:69:23:3a:
         b8:a5:72:73:d6:9d:4b:5e:41:d4:35:30:a0:b2:4f:09:f9:d0:
         b1:f6:c5:51:73:90:d1:84:44:18:a6:96:72:1e:e2:ad:5a:72:
         b5:81:e5:b6:29:4d:53:3e:76:29:ee:a2:77:e7:72:4a:83:a2:
         56:98:5b:ff:be:ae:f1:ff:87:17:4f:2e:9b:0d:69:26:d3:cf:
         37:69:72:4a:73:aa:62:d6:36:5f:46:64:6b:c7:5a:c6:aa:d0:
         29:d8:a5:d3:e3:5e:f4:61:03:ff:14:77:ba:58:f7:16:6e:59:
         c7:ea:3e:22:d6:f2:09:77:10:59:91:57:05:23:ff:0a:a0:f6:
         c2:33:84:2e:2a:a0:3d:bf:83:99:16:ea:99:cb:79:b6:61:30:
         1e:fb:58:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----