Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1be9f9f11cc9399507d52793d27263cec20dfef0.cer
File:                     1be9f9f11cc9399507d52793d27263cec20dfef0.cer (raw, json)
Hash identifier:          YBZKwpwGh3OF3KU6EKo/C5a7xIJU4C2g6XFGyw0Z8Zc=
Subject key identifier:   18:C6:F5:2D:90:C0:73:5D:CB:66:2A:13:AE:EF:B3:50:F3:42:59:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5F039
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/1be9f9f11cc9399507d52793d27263cec20dfef0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 02 Feb 2022 00:21:31 +0000
Certificate not after:    Tue 01 Oct 2024 23:39:00 +0000
Subordinate resources:    AS: 272019
                          IP: 201.46.114.0/24
                          IP: 2803:c510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15069241 (0xe5f039)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  2 00:21:31 2022 GMT
            Not After : Oct  1 23:39:00 2024 GMT
        Subject: CN=1be9f9f11cc9399507d52793d27263cec20dfef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:7c:27:92:1e:42:7a:04:5d:ff:1a:9d:31:cc:
                    2e:91:52:aa:38:64:4f:6f:ab:89:c8:4c:54:32:c8:
                    0e:9d:bd:f3:13:b3:7d:e6:13:fe:34:4c:05:63:9b:
                    4d:97:32:13:01:43:34:5d:5b:3c:70:26:b2:38:76:
                    2b:d2:0a:8e:ae:4a:91:31:b5:f0:9a:75:68:6e:be:
                    d5:b5:af:7e:e6:a2:1b:d3:88:ba:64:8e:38:47:95:
                    64:70:82:aa:6c:d6:c1:24:bc:38:b8:27:bc:c0:b8:
                    d0:7a:7c:44:b4:8a:7a:e4:2d:44:ac:67:44:fa:ce:
                    0d:04:e3:d5:0f:db:36:43:ee:36:b7:8c:4f:74:b8:
                    32:c8:c5:8b:95:c6:64:fd:e1:16:26:68:98:c1:dd:
                    3b:76:d7:db:aa:93:f3:2e:46:9e:e5:f0:5b:4f:f0:
                    26:48:9f:a0:74:1f:1a:d1:21:0a:2e:6b:9e:89:28:
                    5a:10:42:b6:10:43:62:ce:61:71:b0:33:b8:bb:d6:
                    f6:7c:c9:f5:56:61:d4:30:d9:d6:c4:79:1c:03:6b:
                    ae:f0:d2:3a:c7:37:98:e4:a5:87:38:e3:d0:dc:13:
                    5b:f0:4c:3f:c4:3c:da:dc:2b:6f:99:f2:d0:68:94:
                    9e:63:c5:79:11:50:b3:ed:1b:47:fc:6b:98:85:9a:
                    45:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:C6:F5:2D:90:C0:73:5D:CB:66:2A:13:AE:EF:B3:50:F3:42:59:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c5c8028e-84c9-426c-9b61-072ae7a69e94/1be9f9f11cc9399507d52793d27263cec20dfef0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.46.114.0/24
                IPv6:
                  2803:c510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272019

    Signature Algorithm: sha256WithRSAEncryption
         ae:52:32:df:5b:f2:e9:3f:64:42:d7:d4:3d:52:c2:5b:80:e7:
         68:94:ae:54:d2:3c:40:57:6c:c9:db:01:6d:c5:e0:35:4b:4c:
         85:1d:55:31:7e:ee:72:58:db:a2:40:f9:46:37:dd:f6:70:5f:
         0c:c9:b4:01:54:f8:b6:4e:80:2a:96:c8:ba:28:46:dc:d9:b7:
         d5:ec:20:9f:a8:08:94:b8:90:d9:05:9a:98:9a:ea:3e:dd:37:
         b1:a7:f5:2a:b9:b4:cf:f2:9d:17:c3:f5:c8:4f:7f:cb:67:05:
         fb:fe:8d:b7:58:e9:91:54:7e:16:6a:5a:f5:a8:f2:14:0c:bc:
         cc:d9:97:a7:51:49:cc:67:49:43:ff:41:ae:51:d3:6c:93:36:
         88:9e:fb:cf:24:89:12:f9:e4:b2:25:38:fd:77:22:4f:04:e3:
         4a:aa:87:8e:46:6f:37:7a:95:b4:67:10:89:c0:f1:35:e1:27:
         6c:ba:60:27:a5:d7:8b:e5:1f:6e:77:5f:2b:cd:08:63:22:d1:
         02:43:50:0d:5b:0a:ce:a2:ce:c7:7a:4b:f3:0b:d5:72:af:2b:
         0f:66:a3:d1:b8:6b:3f:3e:3e:e5:9e:84:4b:23:e5:d4:95:f8:
         97:5d:83:9d:b5:cc:11:dd:a0:d4:52:0e:ac:61:60:18:fe:b3:
         48:aa:b4:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----