Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c.cer
File:                     33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c.cer (raw, json)
Hash identifier:          R12VMxBlesjpscsnJYDSMSoYHY7EB6M476EYDreOOdM=
Subject key identifier:   4D:2B:87:C0:DD:BE:A7:17:F9:EC:65:91:46:F8:41:7D:3A:C3:8C:7B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7025C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3f6d3a97-760b-4087-94bd-e1b38c3a4cc8/33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3f6d3a97-760b-4087-94bd-e1b38c3a4cc8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Nov 2022 19:01:10 +0000
Certificate not after:    Tue 03 Sep 2024 23:24:10 +0000
Subordinate resources:    AS: 272903
                          IP: 2803:3690::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14090844 (0xd7025c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 10 19:01:10 2022 GMT
            Not After : Sep  3 23:24:10 2024 GMT
        Subject: CN=33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:9d:99:74:4e:f3:3c:b2:f4:c3:10:79:6c:7f:
                    b2:3b:a2:a0:9d:c5:67:f8:36:3a:4e:05:f0:45:76:
                    45:b3:5d:2e:47:36:fb:34:12:fb:69:54:79:91:78:
                    d2:39:ad:d2:f9:76:fd:a4:95:5b:43:45:4c:d5:78:
                    75:50:d2:f9:71:35:70:57:8b:46:17:e0:83:06:ce:
                    c6:1d:48:07:39:40:07:92:d9:6d:f4:34:e7:cd:ad:
                    b9:07:f3:11:11:6a:fe:c1:c3:e7:ae:dd:f2:9b:f0:
                    7a:3c:91:d4:27:69:1e:e0:6d:4f:2d:ed:0d:8e:ad:
                    01:3e:2d:1f:45:a4:8b:5d:77:06:b7:45:f1:02:03:
                    22:d1:07:b5:94:b1:ce:21:25:a3:21:5b:e3:09:5d:
                    b4:4f:77:e2:01:d8:5d:87:dc:1f:a3:f1:e6:f2:fc:
                    69:75:49:c2:20:bf:fb:a1:93:72:7d:ed:40:d9:4d:
                    e2:d3:51:79:c5:af:ea:58:74:97:c8:bb:85:99:f6:
                    80:06:7f:8b:21:4e:c8:37:8c:69:70:91:25:6c:ad:
                    3c:66:47:1b:62:7a:06:2b:37:fc:f5:c2:01:ba:97:
                    46:8f:23:9b:bf:42:53:91:63:2b:4b:a3:30:ce:ff:
                    72:97:e8:08:be:c5:7d:bc:b3:e1:c6:7a:43:1e:dd:
                    58:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:2B:87:C0:DD:BE:A7:17:F9:EC:65:91:46:F8:41:7D:3A:C3:8C:7B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3f6d3a97-760b-4087-94bd-e1b38c3a4cc8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3f6d3a97-760b-4087-94bd-e1b38c3a4cc8/33f03b69d1dc00461322a7da4d5fe8d9b6eebc8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3690::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272903

    Signature Algorithm: sha256WithRSAEncryption
         02:df:77:69:4d:40:e1:b0:4e:b4:0d:93:ff:34:f0:58:d9:73:
         1b:1c:d5:5e:08:de:41:c8:7c:73:48:f5:82:6f:ec:18:da:0b:
         68:5a:8a:c9:d0:5b:35:96:ef:e4:8e:de:16:88:a0:ef:ee:16:
         d9:3c:e9:e6:37:3a:be:b2:fc:5e:23:16:0a:95:52:8a:e7:ea:
         39:e9:a3:b7:7f:bc:94:c8:57:c2:55:96:19:92:df:ac:aa:ae:
         81:d2:09:68:a4:f4:52:4b:ed:53:ef:58:80:1d:ba:a0:2e:27:
         0c:fe:99:eb:46:48:ac:9a:db:fc:89:e3:fc:63:07:e2:71:55:
         3e:4b:23:f5:38:71:1b:7f:41:2c:4c:2c:3c:d1:5e:e5:88:c2:
         ce:0a:3e:c0:8f:ba:0a:d2:0d:be:14:a9:28:e6:2e:c0:c7:52:
         c9:4f:71:6b:41:bf:46:08:16:da:a3:2f:20:d6:1f:e9:6e:6d:
         04:c5:9d:25:a0:8a:6b:30:9b:b4:a2:37:24:24:b3:af:89:bf:
         03:60:dd:4c:d5:07:cf:5e:22:39:1d:09:2b:d6:ad:68:92:7f:
         73:fe:55:c3:07:9b:91:e6:a8:0f:d2:90:f5:55:77:dc:ea:d5:
         aa:94:4b:b3:fb:26:e3:ad:00:bf:f8:e7:42:a9:3d:c5:7c:18:
         8f:51:33:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----