Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer
File:                     2a96158adc7e9d3c9c541c010ab3e9435225e88f.cer (raw, json)
Hash identifier:          sZe9x1XMEnzyujtCK9zUqEB39n4YIdPNKVFzSVTFiDw=
Subject key identifier:   C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3A6DB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Oct 2021 20:34:20 +0000
Certificate not after:    Sun 05 May 2024 18:53:47 +0000
Subordinate resources:    AS: 266842
                          IP: 45.238.156.0/22
                          IP: 2803:9ca0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14919387 (0xe3a6db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  4 20:34:20 2021 GMT
            Not After : May  5 18:53:47 2024 GMT
        Subject: CN=2a96158adc7e9d3c9c541c010ab3e9435225e88f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:d7:1f:67:65:74:79:f5:6f:37:ed:ed:81:
                    3c:db:27:98:7f:af:5d:98:e1:df:23:47:a3:54:19:
                    f9:17:69:92:c6:2e:ec:61:10:57:d2:c7:9a:cb:8c:
                    67:ba:6e:f5:52:71:14:34:8a:1f:ec:93:e7:53:02:
                    58:d1:d7:ed:96:07:28:43:42:b1:e5:55:ce:fe:be:
                    e6:4c:7f:a1:ca:b7:68:8b:6d:e9:be:9c:39:52:58:
                    51:98:47:43:27:87:62:87:c1:b3:8c:8b:8d:6c:e3:
                    13:1f:31:93:db:f8:0a:da:71:27:8b:23:5c:75:12:
                    8b:ef:15:2c:25:30:2c:f1:e9:5f:8e:35:36:27:9b:
                    b0:85:d4:2e:52:ca:34:65:bd:b7:44:41:f7:25:c4:
                    ee:18:e0:95:1c:c6:12:9f:b7:8a:21:bb:a1:f5:5a:
                    24:c6:f1:1c:61:97:ef:b3:dd:8b:c6:24:89:86:2c:
                    5e:ea:98:b6:cd:c9:81:b9:c3:c1:01:80:67:d4:41:
                    13:55:cf:f0:4b:52:fe:cc:0d:37:72:c1:28:a3:92:
                    d1:d6:25:a4:11:14:ce:0c:b3:c1:4e:57:55:55:0d:
                    92:9b:18:4d:ed:cc:f5:8d:3c:7a:e9:2c:62:7c:e2:
                    4f:ca:3d:e8:cb:77:c4:e0:74:8a:f7:53:cf:79:0e:
                    30:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8C:F1:B8:10:78:69:1C:C2:02:8C:1F:4A:A4:74:E8:BD:BC:0E:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/de4e5620-d900-4606-8016-f3fea25ed051/2a96158adc7e9d3c9c541c010ab3e9435225e88f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.156.0/22
                IPv6:
                  2803:9ca0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266842

    Signature Algorithm: sha256WithRSAEncryption
         c0:c1:b9:a7:b8:c5:e7:6d:68:f7:a9:34:0e:ee:8b:cf:aa:aa:
         14:eb:fc:aa:d1:19:fd:08:ca:1c:cd:6c:ca:5e:8b:19:fb:bb:
         d6:f6:5a:81:15:54:a5:67:f9:30:08:d9:02:31:d2:98:d4:94:
         36:2d:b7:60:8e:71:5f:21:bb:19:41:d1:2d:a6:88:ba:05:8d:
         fd:42:bd:1e:15:25:a8:d1:d7:19:ee:ff:18:a6:07:d5:99:a2:
         68:44:8a:d5:c8:ed:4a:3d:13:50:ec:84:55:e2:a6:78:03:b2:
         05:65:7e:a6:96:a4:45:39:27:28:03:20:64:2d:7e:17:ed:58:
         60:e9:d5:38:0d:ac:c6:c4:46:47:5d:6d:0b:83:23:f9:48:59:
         b3:7e:20:d2:a6:0f:53:13:c9:cf:cc:d9:f8:cd:6b:ae:93:80:
         74:5f:86:45:9f:f3:28:82:8a:b2:f4:aa:c3:79:31:47:8c:c2:
         39:f6:c8:09:85:c0:b1:a3:c8:0b:32:8d:d4:c2:c4:c6:d5:72:
         3a:e3:cc:70:d8:78:63:2f:75:28:8d:9f:74:ee:bc:48:f8:6b:
         a0:6e:04:87:41:38:e5:fa:88:aa:ea:77:a1:8f:87:ea:28:26:
         55:9d:64:3d:cc:e4:4c:a8:13:f5:15:55:74:f8:47:36:a2:79:
         2d:57:dd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----