Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/29598424cc9e5513086a121e39d9b7e3d625ecb7.cer
File:                     29598424cc9e5513086a121e39d9b7e3d625ecb7.cer (raw, json)
Hash identifier:          mksuXGnm8xxWSd/5DgvGUnXK0NGSATAavjq8VoFSLkQ=
Subject key identifier:   E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAEF42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 21 May 2021 20:37:57 +0000
Certificate not after:    Sun 23 Jun 2024 16:48:39 +0000
Subordinate resources:    AS: 264758
                          IP: 168.196.24.0/22
                          IP: 2803:40c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15396674 (0xeaef42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 21 20:37:57 2021 GMT
            Not After : Jun 23 16:48:39 2024 GMT
        Subject: CN=29598424cc9e5513086a121e39d9b7e3d625ecb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:72:ee:17:44:9d:fb:8b:9a:3f:ad:a5:6f:14:
                    6d:4c:82:c1:38:53:81:a6:68:d3:9b:d9:57:6a:fc:
                    e6:10:f4:04:38:a7:9e:f6:61:df:bc:1c:d8:ad:6c:
                    e9:56:71:c3:ca:b7:f7:c0:f8:f2:62:a8:5b:0d:c6:
                    3c:9d:4e:7c:c0:13:1f:1a:bb:66:4a:01:6b:bc:e3:
                    77:ba:2e:15:f4:f4:6c:7d:07:23:12:af:d9:71:8a:
                    2b:e7:6b:f9:66:85:12:f9:48:ef:a1:3c:b6:14:6e:
                    cd:0e:64:b7:5b:c9:35:26:92:8f:5a:59:35:26:93:
                    cd:d8:17:eb:32:71:9c:b6:77:92:9e:66:b7:30:f7:
                    d3:3a:82:ab:0c:ce:24:b8:35:9d:0e:a9:17:cc:1f:
                    d6:59:46:50:62:21:b1:0d:f1:dc:0e:ff:51:f5:34:
                    f2:5e:b4:cb:a6:46:09:ef:68:b7:41:fc:36:b2:c8:
                    9b:4b:36:95:f1:c0:5e:83:21:85:c7:d5:3b:05:00:
                    81:3e:b0:00:08:d3:9f:cd:c0:8c:c4:22:0f:27:26:
                    09:f1:cf:c2:0a:18:d8:c6:a2:7a:06:a4:d1:7f:43:
                    5e:b8:bb:f5:d8:c1:f7:a2:42:11:ef:8e:09:c7:d5:
                    6c:d1:4b:9b:f3:4c:5d:3b:87:89:2e:aa:3f:4b:c3:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:35:3B:2F:23:B2:77:B9:08:2E:80:73:9B:D7:9A:2F:DC:7A:2B:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/00c0168b-cd86-4965-ace2-8812d7153fa5/29598424cc9e5513086a121e39d9b7e3d625ecb7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.24.0/22
                IPv6:
                  2803:40c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264758

    Signature Algorithm: sha256WithRSAEncryption
         b1:1a:ea:e8:48:41:00:0d:91:09:b4:4a:36:2f:a1:29:a6:1f:
         a1:94:a9:c8:b2:af:2b:ca:a1:4d:46:9f:5b:b4:46:a5:80:2b:
         5f:ce:89:15:b6:ef:c4:c2:4a:63:52:8d:8f:0e:ca:26:3d:e2:
         76:09:e4:3e:3b:1c:3d:bd:d4:da:4d:16:cf:05:72:e9:ba:35:
         ab:a3:da:50:d1:bb:3d:f4:2b:31:e0:df:26:89:32:72:13:23:
         66:62:f2:7e:5b:ea:f5:62:51:7c:07:66:1e:12:52:97:90:5f:
         43:70:7d:03:ef:e5:6d:c2:fd:dd:9a:5f:01:c7:32:f8:eb:81:
         5f:38:35:f6:13:83:90:55:2a:3f:44:4d:7b:6c:8d:5e:d0:53:
         ac:f3:96:91:28:64:5c:66:54:43:0a:e2:9a:99:56:ba:e4:e1:
         3c:ea:63:b9:0c:a3:0a:80:21:06:ac:19:c4:cb:5c:63:eb:12:
         7d:2f:79:f7:09:c9:85:f8:ae:16:0f:1e:ed:f5:3e:68:d6:36:
         28:11:21:f1:62:03:8b:5e:cd:c9:de:6c:a9:6d:22:6a:6f:3f:
         35:9a:79:a8:a1:11:9c:74:22:94:41:37:46:17:36:c9:35:83:
         0f:e9:f2:ac:97:4b:af:9e:d1:4f:1f:5d:70:47:6f:de:24:20:
         8e:33:ea:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----