Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03aaadb7546060b6b539ba158e64a006f10378b7.cer
File:                     03aaadb7546060b6b539ba158e64a006f10378b7.cer (raw, json)
Hash identifier:          GcPax32oUcSJzVv3UCdBdsX3/XPtIBhID4d8i7b7+CA=
Subject key identifier:   46:A7:DA:36:33:5B:6F:4B:1C:4F:AB:B8:B3:29:F0:B9:90:6F:80:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010FC3FB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/03aaadb7546060b6b539ba158e64a006f10378b7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 20 Jul 2022 18:49:23 +0000
Certificate not after:    Mon 10 Mar 2025 22:47:14 +0000
Subordinate resources:    AS: 272141
                          IP: 45.171.164.0/22
                          IP: 2803:1090::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17810427 (0x10fc3fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 20 18:49:23 2022 GMT
            Not After : Mar 10 22:47:14 2025 GMT
        Subject: CN=03aaadb7546060b6b539ba158e64a006f10378b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e4:12:82:2a:db:40:2a:f3:18:b4:c4:ce:b3:
                    43:8d:01:39:82:82:46:6c:37:2b:28:6b:27:61:53:
                    c5:8f:72:31:f3:b0:c4:88:eb:45:0a:ac:8e:80:94:
                    7d:3d:cd:dd:2e:53:d1:e6:43:6c:d9:d3:de:27:62:
                    e2:c0:ac:b4:07:27:ad:c0:1e:cc:2f:e9:8c:76:a9:
                    7b:2b:b1:0e:5b:ad:f5:ed:60:7e:06:64:b2:86:79:
                    46:ad:59:a6:ca:5c:46:9e:c3:56:91:f8:fb:9d:aa:
                    05:dc:54:f6:08:2c:b8:c2:40:63:ec:50:ea:e2:f8:
                    d5:42:20:23:fe:18:fe:e5:df:f8:b3:b2:84:89:d8:
                    ac:6c:e2:4a:61:6e:ef:e2:da:ca:cb:ae:66:c1:72:
                    b3:8e:a4:bd:93:82:85:67:e4:f5:64:42:ae:26:fc:
                    a7:45:43:c3:15:bf:31:26:c8:5b:65:ab:4c:0a:ab:
                    fb:64:d8:71:26:d9:e8:55:35:d6:0c:d0:75:18:c4:
                    e3:f4:eb:4e:bc:4a:f3:ef:08:14:7e:2e:c2:a3:51:
                    77:d6:8e:2a:87:5e:f9:af:91:47:77:bc:d7:72:ee:
                    9c:82:54:70:31:5c:9a:fc:c0:95:54:71:47:6e:b6:
                    a7:81:0f:df:f6:7d:c5:7e:09:70:e2:30:68:0f:f4:
                    48:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A7:DA:36:33:5B:6F:4B:1C:4F:AB:B8:B3:29:F0:B9:90:6F:80:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e0ed41fd-45ac-4020-bbdf-85d4e0064999/03aaadb7546060b6b539ba158e64a006f10378b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.164.0/22
                IPv6:
                  2803:1090::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272141

    Signature Algorithm: sha256WithRSAEncryption
         7c:2d:6c:73:f4:7e:e3:f6:9f:a2:c3:af:03:cd:b7:37:58:90:
         ee:ee:e9:db:b5:87:31:27:08:73:f7:a4:8e:55:85:05:15:16:
         ba:6f:37:44:20:62:f7:8f:4d:8d:3b:fe:bb:d0:4e:87:18:6b:
         ce:b3:d9:2e:ea:6a:45:26:42:18:df:80:f5:28:37:b2:41:df:
         74:fc:15:72:84:a7:8e:9a:72:27:30:47:7e:5d:03:d5:fe:76:
         30:f6:fe:1d:a2:1d:f5:64:77:55:1d:9a:a5:8c:4d:98:05:99:
         04:79:ac:21:65:f1:8e:24:60:c9:36:e4:70:85:89:1c:f3:23:
         8f:65:9d:af:a6:a0:2f:63:9c:2a:9d:15:be:9c:27:bf:21:5f:
         05:95:d1:95:1f:ad:a6:6d:54:89:31:40:c9:f8:54:bf:00:d4:
         a9:7b:de:86:64:2a:75:90:6c:41:bf:ce:8c:ed:f6:8f:dc:08:
         21:39:5e:f7:cf:8b:55:1a:cf:d2:97:34:12:17:d5:68:20:91:
         4c:b5:f8:2d:b2:79:df:4e:70:5c:3a:57:8f:11:a4:9f:64:82:
         d6:12:87:45:b7:bb:f0:ed:f4:35:b0:95:b8:0d:3a:af:ec:63:
         b9:e6:44:ad:db:53:55:a9:dc:93:ad:b0:57:74:b6:8e:fe:8b:
         bc:c1:59:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----