Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00f895a901e0aed32bfbbc27ec311633b2051670.cer
File:                     00f895a901e0aed32bfbbc27ec311633b2051670.cer (raw, json)
Hash identifier:          G5US/LZb+gkEZYTbU+fXgb2ksvPnWvv3Y+lIvFumQ5E=
Subject key identifier:   37:7B:B5:9D:EF:14:62:E3:C5:35:D7:B2:0A:05:E2:E1:E9:A3:4F:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CBB597
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/00f895a901e0aed32bfbbc27ec311633b2051670.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Jun 2022 23:00:16 +0000
Certificate not after:    Sat 09 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 262218
                          IP: 170.79.108.0/22
                          IP: 186.159.116.0/22
                          IP: 2803:3000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13350295 (0xcbb597)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 29 23:00:16 2022 GMT
            Not After : Dec  9 04:00:00 2023 GMT
        Subject: CN=00f895a901e0aed32bfbbc27ec311633b2051670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cd:0d:b2:ae:58:03:44:b2:bd:97:99:ea:ec:
                    b1:d5:3e:19:39:e1:83:99:ec:22:d2:2c:bb:56:4c:
                    b4:5e:b5:25:4a:29:75:fb:df:0e:fc:94:9d:a6:b1:
                    d7:a6:52:3c:44:55:1e:dc:10:7d:2f:ee:10:20:d8:
                    df:1e:21:58:29:00:c2:c4:ab:57:d1:db:f2:d1:44:
                    e0:9e:b9:8e:67:1e:a1:52:f3:96:59:f2:df:2b:47:
                    87:ce:ec:80:8a:ca:06:f8:a2:a6:b0:6d:1d:c3:7b:
                    40:3e:f5:45:9a:fb:56:9b:c8:d6:34:77:24:10:46:
                    40:3a:75:76:ef:3e:7c:34:1f:1f:2a:01:98:ed:0e:
                    2e:16:0b:da:53:64:9c:be:68:19:34:79:d8:a5:ce:
                    37:34:d1:32:e1:c9:33:d6:1e:3a:fd:45:f7:b0:92:
                    15:91:a7:47:ea:3c:6f:54:d5:a8:c3:8a:59:3f:e4:
                    17:7f:cf:fd:0b:8c:0f:53:56:d3:e1:9e:b5:6f:df:
                    a0:e5:da:b0:c0:da:06:64:15:63:5b:f4:02:94:1e:
                    dc:c0:13:84:4c:17:69:16:4c:8e:7d:2e:1d:f6:41:
                    d8:b3:ec:4f:48:f1:f9:2a:cb:e8:21:d4:53:24:21:
                    4e:a8:4e:cc:62:9e:2f:ea:30:cf:36:1b:62:d2:77:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7B:B5:9D:EF:14:62:E3:C5:35:D7:B2:0A:05:E2:E1:E9:A3:4F:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/00f895a901e0aed32bfbbc27ec311633b2051670.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.108.0/22
                  186.159.116.0/22
                IPv6:
                  2803:3000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262218

    Signature Algorithm: sha256WithRSAEncryption
         a4:e4:cb:57:de:7a:38:62:23:f4:c0:0d:94:8e:79:aa:19:c3:
         c9:05:42:a6:5c:17:5b:0d:96:3e:77:08:38:17:fa:81:bb:4e:
         29:78:52:89:bc:56:3d:c8:74:11:05:9d:c4:fb:09:cf:2d:e1:
         ff:a5:d1:08:88:b3:02:2f:0b:d8:78:4d:ee:81:92:b7:14:2d:
         40:43:48:cf:b5:e5:17:20:ef:bb:85:27:83:15:89:37:68:96:
         5d:6f:86:fd:1d:78:23:ab:8b:65:f6:45:23:cd:40:a3:32:71:
         87:83:0e:da:4d:8a:68:02:81:43:2a:cf:92:d2:f6:52:31:b7:
         b4:00:a4:23:28:d4:cb:62:18:4b:5e:d8:19:ac:a7:14:a0:0a:
         5a:0a:76:0e:b3:ec:d9:1d:8f:5e:25:59:40:17:81:c1:20:b3:
         91:cc:12:d1:ff:08:50:f1:4f:98:52:43:0f:c4:88:ef:88:13:
         cd:12:8c:d4:38:9f:10:cc:c2:25:11:40:d9:c5:ba:44:79:58:
         0c:5d:c2:38:85:c5:5c:12:43:0a:79:86:6c:fa:d9:52:04:f9:
         e9:e5:09:7e:80:bf:63:bc:d1:2a:09:72:c9:c9:af:cc:dc:36:
         e3:b9:c8:61:6c:71:61:d3:e7:54:41:d0:b4:1f:1b:f4:d1:d9:
         b2:f2:85:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----