Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04dfd21e79c2ea5ef8cf310f4f091d59f24f7473.cer
File:                     04dfd21e79c2ea5ef8cf310f4f091d59f24f7473.cer (raw, json)
Hash identifier:          eYD0+VYJ3Jcv2KnQZm3xqqImpEFBuvY/6M5/3jN6PKU=
Subject key identifier:   E3:C7:0E:45:25:CB:B0:09:B8:62:9B:50:F0:A9:B9:3E:EE:BB:C5:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA93BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/28024558-5fa1-4b83-aafd-361ce0612622/04dfd21e79c2ea5ef8cf310f4f091d59f24f7473.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/28024558-5fa1-4b83-aafd-361ce0612622/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Dec 2022 22:59:58 +0000
Certificate not after:    Fri 12 Apr 2024 21:49:47 +0000
Subordinate resources:    IP: 45.237.176.0/22
                          IP: 2803:94a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14324669 (0xda93bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 26 22:59:58 2022 GMT
            Not After : Apr 12 21:49:47 2024 GMT
        Subject: CN=04dfd21e79c2ea5ef8cf310f4f091d59f24f7473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:94:24:ea:b3:8b:de:64:f6:aa:9a:83:9b:0a:
                    06:5b:10:95:67:77:6f:d6:cf:d8:28:4c:fc:82:16:
                    bf:0f:13:81:6c:85:e4:6e:b9:b9:e8:5d:c9:6f:63:
                    43:8e:30:a7:0b:03:ab:bc:ce:a4:00:6e:91:30:b5:
                    ce:d8:7d:6b:46:ee:de:0b:e7:b1:e5:4e:c5:24:bc:
                    ec:7c:1d:83:fc:4d:cc:da:21:10:03:e8:3e:3a:83:
                    7d:bf:87:22:85:7c:23:b6:3a:d0:03:3d:0a:cd:df:
                    84:06:18:c5:f0:b2:46:2e:50:88:a8:c1:cb:4f:d3:
                    40:a1:ae:5b:23:ae:4f:21:3c:1d:24:ce:9e:74:88:
                    22:ab:49:73:31:ef:a9:ef:36:f8:11:11:5f:e7:5d:
                    d6:f2:bf:27:93:f4:ec:0f:81:dc:94:f2:d0:2e:1d:
                    94:e4:48:05:ee:5c:ae:85:32:10:2a:e4:bc:b0:aa:
                    3b:87:99:93:e2:59:60:d0:7b:62:92:73:9d:3a:7d:
                    cb:ac:3a:77:88:54:9c:12:ea:e7:ff:3d:75:96:79:
                    bd:66:a8:a4:c7:54:47:58:f7:9d:82:32:b0:25:61:
                    e9:43:10:81:ab:28:f1:3f:fa:be:9a:e2:16:b2:1e:
                    61:4f:e9:79:a1:64:af:aa:67:69:6f:f8:52:a8:22:
                    e5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:C7:0E:45:25:CB:B0:09:B8:62:9B:50:F0:A9:B9:3E:EE:BB:C5:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/28024558-5fa1-4b83-aafd-361ce0612622/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/28024558-5fa1-4b83-aafd-361ce0612622/04dfd21e79c2ea5ef8cf310f4f091d59f24f7473.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.176.0/22
                IPv6:
                  2803:94a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         34:5f:7e:ef:ad:1d:4d:5c:db:56:07:f0:1b:b8:cf:88:82:10:
         45:0a:ca:a8:19:2e:53:62:ff:8d:11:ac:42:e7:dd:54:b9:05:
         60:b5:21:e4:dd:2f:f5:c3:d5:e1:40:84:f9:0f:5c:8e:31:82:
         ad:6d:a2:ea:94:7b:70:6f:a5:75:e2:a2:0a:cc:96:37:b0:c4:
         05:0c:7b:22:ca:85:e1:38:94:57:e4:4c:eb:86:28:51:11:7b:
         d6:7d:b8:c8:30:d8:3f:86:1c:f7:a8:3b:ed:b1:a5:86:b8:41:
         8e:7f:95:ef:eb:7d:5d:d7:e6:19:67:6a:e0:7a:81:a7:e1:50:
         2a:3b:92:03:0d:a2:07:78:18:ff:ca:ee:1c:03:63:66:97:23:
         b3:2b:ed:f2:0d:57:63:1a:38:96:36:4f:26:95:35:bd:46:cf:
         ec:5b:c2:da:e5:a3:ae:c5:2b:c9:76:62:fe:e0:ad:fc:35:d8:
         c6:6d:64:25:9c:e4:07:53:e2:38:a1:97:d6:a5:a5:8a:7f:82:
         18:e6:e6:bd:99:92:94:e3:d9:b5:24:c0:4a:f1:b5:86:18:1a:
         74:d7:2f:a2:7b:56:be:c9:8b:1b:72:ba:3e:02:55:28:c3:5f:
         f0:63:3f:d4:94:a8:ca:68:46:ea:e3:b9:a6:0b:76:9a:9e:e9:
         7a:cc:ad:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----