Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04a4c38113b2c68302db5fa203d88f2eb4184c4b.cer
File:                     04a4c38113b2c68302db5fa203d88f2eb4184c4b.cer (raw, json)
Hash identifier:          wJTO91du+BBESYHNKAQrdsJP1AVwDwtq0YJ4o4ZLDik=
Subject key identifier:   79:0B:81:E7:BE:64:8F:CE:7D:6B:FA:2D:D1:11:3F:8D:1F:58:3E:D4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFD3EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0961e011-b581-46f1-8ec2-1b4bee4573ce/04a4c38113b2c68302db5fa203d88f2eb4184c4b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0961e011-b581-46f1-8ec2-1b4bee4573ce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 17 Mar 2022 01:52:30 +0000
Certificate not after:    Tue 16 Jan 2024 20:22:21 +0000
Subordinate resources:    AS: 272091
                          IP: 2803:7b10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14668780 (0xdfd3ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 17 01:52:30 2022 GMT
            Not After : Jan 16 20:22:21 2024 GMT
        Subject: CN=04a4c38113b2c68302db5fa203d88f2eb4184c4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:fe:35:f7:4d:b2:68:7b:46:18:ea:bb:47:b4:
                    6c:0d:81:8d:05:4e:72:59:32:2b:d3:37:bb:e9:4c:
                    46:f4:5d:49:1c:8e:3b:af:e8:aa:3e:6f:f9:19:38:
                    9d:8e:b7:dd:20:fa:67:d8:9b:6f:cd:cc:62:f4:21:
                    3c:45:0f:da:6a:41:e9:e3:20:1e:00:a2:72:07:6e:
                    32:d8:62:39:a7:3b:5d:f4:03:1b:8e:a2:70:2d:bd:
                    25:d5:37:8b:42:87:98:da:13:99:de:3c:39:4d:5c:
                    a3:58:04:e6:43:1d:c2:45:f4:99:d9:ff:d9:b1:3c:
                    22:06:1b:b3:8e:11:fc:91:06:a7:11:3f:33:4a:27:
                    cf:5b:8c:8f:4f:21:4d:6a:f7:50:aa:2f:09:7a:1a:
                    85:6e:c5:6d:35:4d:68:af:8c:4b:4c:83:39:62:c9:
                    94:ac:b8:d0:f2:92:0e:92:1c:25:98:00:a3:69:06:
                    65:ae:05:c0:a4:03:60:95:34:3e:51:9f:e0:c8:e5:
                    fb:c6:48:0d:8e:8a:a3:3b:a7:0b:f0:d0:c7:00:67:
                    cb:eb:47:38:09:91:7a:f1:ad:eb:bb:d0:e7:ac:ec:
                    72:4b:ad:b7:69:e1:d2:0e:75:98:ed:db:e8:ef:c0:
                    6e:b3:fe:f9:5e:38:11:0f:2c:73:74:33:4a:7f:98:
                    3a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:0B:81:E7:BE:64:8F:CE:7D:6B:FA:2D:D1:11:3F:8D:1F:58:3E:D4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0961e011-b581-46f1-8ec2-1b4bee4573ce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0961e011-b581-46f1-8ec2-1b4bee4573ce/04a4c38113b2c68302db5fa203d88f2eb4184c4b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272091

    Signature Algorithm: sha256WithRSAEncryption
         b0:2d:67:7d:79:67:6d:9b:f9:db:b2:c0:05:ad:60:32:48:43:
         b9:21:a0:3a:3a:ee:89:e0:45:08:28:03:39:f8:9a:c7:da:9f:
         ad:9b:de:c1:99:75:86:fb:c4:b2:00:b0:5d:01:5a:e3:dd:57:
         f3:ad:51:d7:55:05:d7:31:a6:62:7d:e1:44:71:47:8c:0e:f8:
         ab:69:f7:75:16:a7:a5:db:5b:7e:f1:a4:8b:d1:e0:e5:a2:6a:
         c0:dd:cf:9b:3e:59:58:a1:7c:39:86:44:0d:21:0b:a3:ee:d9:
         dc:32:83:98:19:59:aa:0e:61:c9:b3:2d:4c:b6:f8:df:af:ce:
         d3:34:4f:c4:0e:73:dc:63:04:6f:69:02:3d:13:91:dc:d8:ce:
         c8:be:87:f8:1b:67:9d:3a:b0:c1:b5:01:6d:22:d6:c6:6f:10:
         0d:30:81:93:3e:0f:08:62:98:8a:c7:5b:9b:6f:02:c3:15:17:
         b7:c3:51:ab:01:ed:84:ad:d9:6a:36:f6:15:6d:d2:29:41:c2:
         ae:89:fb:70:f5:ee:c0:b1:8c:9c:4a:ef:5b:48:4b:70:b7:56:
         71:7c:97:90:52:d6:0d:b4:68:05:bd:c0:30:fe:01:71:e0:6b:
         73:d9:4f:56:97:57:9e:a7:ed:14:ea:91:f9:9d:1d:73:84:aa:
         77:58:6c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----