Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/041358da0b12ee28b9288c87d937e0f22e1b65f4.cer
File:                     041358da0b12ee28b9288c87d937e0f22e1b65f4.cer (raw, json)
Hash identifier:          A/NNUltIhDBwPPQQvv5M+lHLJLX3QKG5ykpiSy2Mqv8=
Subject key identifier:   B0:BC:E5:F8:0D:B5:B7:90:6E:48:7A:EF:49:04:84:E1:3C:2A:53:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA4198
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/041358da0b12ee28b9288c87d937e0f22e1b65f4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Nov 2021 19:12:05 +0000
Certificate not after:    Mon 17 Jun 2024 19:49:56 +0000
Subordinate resources:    AS: 265796
                          IP: 181.191.124.0/22
                          IP: 2803:5020::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15352216 (0xea4198)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 29 19:12:05 2021 GMT
            Not After : Jun 17 19:49:56 2024 GMT
        Subject: CN=041358da0b12ee28b9288c87d937e0f22e1b65f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:2f:cd:8f:21:eb:07:f9:62:c9:81:fd:5e:4d:
                    f9:cf:91:fa:da:b7:1a:ee:bd:69:c3:75:8e:fc:ea:
                    24:3b:bc:68:1e:72:08:c3:1a:fe:f7:ce:6e:78:7a:
                    08:bb:c6:ac:96:d4:2e:16:94:51:c7:77:1f:7c:7d:
                    a8:41:16:a7:b7:3d:71:12:5e:72:c6:56:14:d4:0a:
                    ed:85:ec:f4:f5:20:c2:fd:4b:95:cd:55:44:96:08:
                    b9:96:da:01:e1:29:09:5e:01:33:39:4f:0a:ba:77:
                    56:8d:b1:7d:a4:ad:29:e2:9c:87:9f:9a:72:28:cc:
                    7d:d4:06:c4:1c:87:ef:02:a9:f8:13:16:81:1a:d7:
                    26:67:59:2b:03:63:01:88:d8:a8:6d:b6:ef:fa:e5:
                    f4:3c:a5:9d:56:35:74:25:83:b8:ab:40:f6:dc:c8:
                    39:bd:fe:bd:1b:9a:fb:56:7c:4b:98:fc:d7:57:27:
                    68:44:a8:72:78:54:e8:0a:75:64:61:01:bb:18:d8:
                    db:bf:b0:af:86:d6:19:ae:6d:b1:d9:65:68:f3:f1:
                    80:fd:c6:e5:59:4a:5f:82:5a:41:03:11:0c:1c:56:
                    21:2a:b3:66:89:34:d8:91:8e:ec:8f:a9:77:b5:c5:
                    b1:e4:e0:a7:d8:cc:e4:bb:7e:8c:28:9f:30:91:27:
                    06:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:E5:F8:0D:B5:B7:90:6E:48:7A:EF:49:04:84:E1:3C:2A:53:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2d7329c0-3aaa-4a3f-ada1-9b802129856f/041358da0b12ee28b9288c87d937e0f22e1b65f4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.124.0/22
                IPv6:
                  2803:5020::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265796

    Signature Algorithm: sha256WithRSAEncryption
         3e:f3:99:3d:53:cd:d0:61:a0:61:8f:1a:d8:25:8b:54:b1:3f:
         37:39:84:99:ce:fe:35:9d:54:e9:93:da:71:ca:bb:15:19:7f:
         13:f5:93:d3:04:d8:5b:2d:42:6a:a5:92:30:80:a3:f3:d3:1a:
         10:a0:c4:96:d2:fe:3e:e6:81:1b:62:b0:bf:d6:eb:99:af:0b:
         91:c7:45:1d:62:d8:27:61:69:b1:7b:cb:d6:ea:6d:60:f0:3c:
         c6:e3:a6:fd:58:b9:54:6c:3b:5a:ce:e6:df:91:5d:ad:ca:12:
         71:49:a2:f2:29:eb:d3:5a:32:aa:37:c9:d4:8c:24:00:7b:7f:
         4d:d9:ef:bb:9f:e9:3b:d3:c4:0d:6e:da:fb:f2:8a:e6:9d:11:
         87:28:c4:83:e9:c8:f3:20:9f:02:ee:36:df:06:f2:00:03:72:
         30:37:5a:e1:a2:9f:0b:a2:77:19:8d:a4:13:60:53:7c:a5:84:
         be:c1:b1:f4:db:2d:c9:98:04:b2:de:f5:19:e2:f5:b4:d4:16:
         26:d7:a5:df:b7:0b:ff:f2:04:c6:28:32:01:96:01:e4:08:e0:
         65:b5:19:18:ba:f8:02:25:63:8f:29:88:f7:06:ae:8f:56:dd:
         e1:76:ab:bf:18:ae:f7:73:6a:e6:df:ed:35:d3:87:d6:3b:d2:
         f5:a9:c1:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----