Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05820a897e090cc17411129464e856f3f8c8966d.cer
File:                     05820a897e090cc17411129464e856f3f8c8966d.cer (raw, json)
Hash identifier:          DZLEt0tzUcDNS5XT5ztFwVhsk8SLecUUoPWU29oOjsk=
Subject key identifier:   57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBC8FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 31 Mar 2022 23:54:36 +0000
Certificate not after:    Sun 11 Feb 2024 01:21:45 +0000
Subordinate resources:    AS: 265572
                          IP: 45.174.56.0/22
                          IP: 2806:326::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14403834 (0xdbc8fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 31 23:54:36 2022 GMT
            Not After : Feb 11 01:21:45 2024 GMT
        Subject: CN=05820a897e090cc17411129464e856f3f8c8966d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:02:ce:74:a0:77:9e:dc:94:9c:ed:4a:b6:72:
                    db:b9:f1:09:72:6b:c6:3f:da:b0:f2:29:86:26:3e:
                    8b:f4:12:a4:07:1f:4b:75:94:a1:28:ff:c1:ed:11:
                    63:7a:3f:37:c0:df:82:26:b9:c2:4a:a4:f2:93:e2:
                    58:26:39:40:81:23:d1:42:4c:a7:58:19:a7:be:fd:
                    a9:4a:87:84:ca:a0:d8:c3:fa:8c:96:f5:5b:d4:dc:
                    00:83:6a:58:b3:a5:54:4d:db:d8:6b:a5:3b:e5:55:
                    b6:78:f5:a8:bf:d6:c9:54:59:25:a5:08:3f:4a:39:
                    24:16:bb:3b:ee:bc:0c:5b:a8:e5:d5:51:dd:8a:75:
                    4a:d0:a8:83:1b:1f:f0:a6:b4:04:4b:f4:cd:fd:72:
                    e8:ec:c5:22:9d:57:a5:21:dc:38:0b:d0:71:d8:64:
                    f0:c3:21:25:ff:bf:58:e9:94:ac:c4:53:da:15:06:
                    48:c1:9f:9e:ec:b0:1d:32:e1:8d:2c:8c:03:26:79:
                    46:ec:13:4a:b6:61:05:90:d3:1b:74:8d:a6:d8:53:
                    02:4f:97:14:2d:44:49:52:2c:96:e2:48:94:ed:88:
                    7b:b8:85:64:6d:6f:18:91:2a:e1:59:fd:73:4e:8b:
                    11:0f:2c:f2:4e:90:2f:0a:41:dc:ec:96:92:c4:4b:
                    9b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:56:0F:F3:61:EC:70:AA:A6:73:92:E9:1A:7E:5F:A0:92:19:FD:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/25a407c6-1121-4bc6-a256-7cb41d988530/05820a897e090cc17411129464e856f3f8c8966d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.56.0/22
                IPv6:
                  2806:326::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265572

    Signature Algorithm: sha256WithRSAEncryption
         4a:48:3b:ce:cb:d1:7b:92:2c:be:e3:68:af:b1:b6:2d:d9:85:
         d8:fa:b5:56:28:5c:7d:33:85:cc:2d:d2:7f:0d:1a:c4:3f:a8:
         50:27:42:b0:bd:8e:29:d7:b4:43:cf:c6:03:e6:1e:8c:60:6d:
         e8:18:6d:f5:a9:50:1e:32:13:01:47:e8:53:80:a5:4f:64:5f:
         5d:9f:6a:b5:7b:9c:0c:f4:6d:93:71:c4:88:a0:00:64:ac:e3:
         ba:4a:97:cc:77:02:0f:81:7a:a6:4c:a5:a9:48:5d:01:d1:ab:
         38:38:84:0e:a6:5b:55:51:3a:2d:66:65:1d:55:22:53:d5:22:
         83:d7:25:e4:28:aa:89:db:bc:8c:68:b2:a5:7f:74:98:11:a5:
         43:47:f7:eb:1b:24:df:b5:f2:a8:9d:3a:08:eb:97:d6:7f:f5:
         96:84:62:df:1b:ff:8d:5e:ab:8f:f4:f3:8a:32:5d:5f:1d:d8:
         c1:f9:56:12:ac:28:6c:3f:8e:d7:08:d9:25:9c:f3:a7:11:54:
         80:8c:86:ae:6b:82:82:07:58:74:d5:73:5f:26:04:7e:c8:bf:
         11:c4:2a:08:da:17:ed:9e:66:16:a8:6e:c1:15:16:25:5b:b1:
         c8:67:a5:8a:b1:50:b6:54:46:eb:c0:bc:69:27:5a:bb:72:a8:
         98:05:d4:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----