Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2f4a3be8029a1d8312afd2c1162ec258f1294c7e.cer
File:                     2f4a3be8029a1d8312afd2c1162ec258f1294c7e.cer (raw, json)
Hash identifier:          OdC7jP6lANUuCnILab9xGNotvU1Ky69BNvajEjagJcU=
Subject key identifier:   C6:BC:97:11:DF:4E:0D:8A:6F:7C:2C:DB:6A:56:FB:65:01:50:88:86
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5AFA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b10ae9bb-2607-49b9-9a34-470136a28c37/2f4a3be8029a1d8312afd2c1162ec258f1294c7e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b10ae9bb-2607-49b9-9a34-470136a28c37/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Jul 2022 15:15:20 +0000
Certificate not after:    Tue 17 Sep 2024 19:10:18 +0000
Subordinate resources:    AS: 265879
                          IP: 45.227.32.0/22
                          IP: 2803:de20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16101285 (0xf5afa5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 12 15:15:20 2022 GMT
            Not After : Sep 17 19:10:18 2024 GMT
        Subject: CN=2f4a3be8029a1d8312afd2c1162ec258f1294c7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:6e:f2:92:4e:a1:56:3a:51:e8:96:57:30:3b:
                    e3:d7:cd:b0:c8:4e:bc:59:71:42:27:1e:6b:85:f3:
                    ea:41:3c:f7:ac:06:8a:92:11:5d:7f:40:09:98:2f:
                    74:b3:fe:8f:b4:0b:1c:06:c8:75:a1:30:d8:03:c8:
                    46:f3:34:81:3e:b8:91:6d:fc:aa:0f:51:83:13:2f:
                    4b:e0:e0:0b:25:11:11:89:63:79:cf:34:19:d0:72:
                    7a:27:b0:51:47:40:1b:74:d7:69:40:a3:6c:47:0a:
                    ef:38:ff:68:c8:58:b7:39:81:66:d0:b9:f6:38:0f:
                    d7:04:d5:e9:c2:b6:39:c1:93:9d:f4:13:a0:b7:de:
                    bc:81:96:22:a5:e2:c0:d5:f2:fa:17:01:f2:53:09:
                    b6:1b:f4:21:ad:91:14:ae:51:49:94:43:c2:8b:eb:
                    11:c7:50:ad:aa:a9:5c:7e:9d:ed:e5:c3:b0:9f:6d:
                    f1:bf:11:e5:1c:9c:3f:83:ff:bb:ae:a3:0c:4d:07:
                    c1:02:b1:02:34:8a:c1:9e:37:89:8c:74:21:b8:9b:
                    77:54:e1:35:13:32:1b:5c:f9:d7:96:22:63:5f:4e:
                    66:9c:90:00:2d:2b:a1:0d:5e:9e:cb:62:df:e0:20:
                    d7:23:4a:e2:8a:90:51:0c:a4:ce:fb:55:0b:2b:02:
                    53:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:BC:97:11:DF:4E:0D:8A:6F:7C:2C:DB:6A:56:FB:65:01:50:88:86
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b10ae9bb-2607-49b9-9a34-470136a28c37/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b10ae9bb-2607-49b9-9a34-470136a28c37/2f4a3be8029a1d8312afd2c1162ec258f1294c7e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.32.0/22
                IPv6:
                  2803:de20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265879

    Signature Algorithm: sha256WithRSAEncryption
         08:54:2b:48:7f:0f:84:07:58:cb:a9:b8:0e:b7:a5:0d:23:b0:
         2a:e4:7f:30:c5:6c:92:b3:ab:a3:cc:5a:76:36:b2:ad:34:17:
         09:3a:a5:ec:9d:55:a1:9a:d1:66:54:7d:d3:7f:5a:09:a5:0f:
         cb:23:7f:f1:8e:26:c7:42:d8:5f:8a:cb:54:10:9a:ad:d8:f2:
         91:cf:65:19:13:6a:26:c4:cd:bc:c4:e9:b1:da:12:59:65:06:
         89:6f:43:e4:1e:6e:44:16:9f:7b:83:c5:36:06:0d:a0:d2:4f:
         d3:80:cd:a2:8b:26:3b:df:10:39:20:2f:d2:6e:a4:30:aa:07:
         f4:f2:49:cc:fd:89:59:57:e9:a4:3a:45:91:a8:aa:72:70:25:
         86:95:81:f5:83:45:61:d7:cb:80:c9:16:08:63:5c:d0:fc:66:
         0b:c4:8f:72:1e:91:95:85:3a:8c:ae:ec:cf:18:88:f5:40:5b:
         ce:d6:d4:79:9e:e3:2e:09:b8:e6:60:07:2d:b6:01:17:42:5a:
         0b:99:cd:5e:13:3f:c4:0d:99:fd:4c:59:95:6b:b0:06:42:3a:
         85:4a:49:ef:05:1c:81:72:e8:b1:e9:9d:ef:dc:f1:ea:14:3d:
         8e:08:84:52:40:d7:95:5f:04:f6:a2:ea:70:95:e0:66:31:13:
         00:d1:e1:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----