Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3443505eddac7b5aa6eddaedee91340561a130ec.cer
File:                     3443505eddac7b5aa6eddaedee91340561a130ec.cer (raw, json)
Hash identifier:          XYo6X2ArZHNsMeCx7Ho26C20pWy65qDMvNThtGmZeB4=
Subject key identifier:   D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E01EA3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/3443505eddac7b5aa6eddaedee91340561a130ec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 Jun 2021 18:02:05 +0000
Certificate not after:    Sat 30 Mar 2024 21:19:38 +0000
Subordinate resources:    AS: 52393
                          IP: 168.0.212.0/22
                          IP: 168.196.240.0/22
                          IP: 186.179.0.0/18
                          IP: 190.185.108.0/22
                          IP: 2803:8200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14687907 (0xe01ea3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 30 18:02:05 2021 GMT
            Not After : Mar 30 21:19:38 2024 GMT
        Subject: CN=3443505eddac7b5aa6eddaedee91340561a130ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:dc:34:30:e2:89:d1:e9:75:5a:2a:ac:35:f4:
                    2c:f0:13:c2:f6:66:b1:94:61:a4:41:71:9e:21:52:
                    6b:08:1c:2b:e1:db:c5:dc:52:00:85:38:3b:2e:b4:
                    8b:93:99:39:b9:70:7c:dd:ec:27:a9:80:05:14:e9:
                    95:28:57:28:19:25:05:d0:39:2b:d9:29:11:1f:8b:
                    ae:94:84:50:39:0b:97:8a:54:08:49:c6:8b:64:b7:
                    94:32:d5:b5:34:c7:09:7b:a3:1e:d7:ae:ea:be:bc:
                    fb:55:6b:cc:82:6c:3a:e7:d9:ca:3e:d8:35:84:fa:
                    63:db:b8:71:8d:b2:4a:0c:2e:73:d3:dd:d4:f6:d2:
                    86:48:07:3c:37:e8:ee:25:39:1f:6b:81:96:9a:10:
                    01:b7:02:aa:28:65:d5:28:9d:14:38:bc:cd:17:b2:
                    9c:5c:03:65:77:3c:41:ae:69:83:7f:90:2d:ff:70:
                    50:b3:f8:e8:97:a0:6d:3d:43:3e:c8:f1:c0:e8:01:
                    3d:4e:94:ea:c0:a2:08:36:4d:5f:62:81:04:b9:52:
                    d5:98:7a:ed:8b:ee:70:bf:c3:be:51:1e:c9:02:ba:
                    50:ba:04:6e:30:0f:ad:89:6e:87:6c:3b:c3:29:e0:
                    9d:a6:bf:d6:11:f4:ce:ee:2b:9f:27:98:13:79:b2:
                    ee:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:D4:C7:13:9B:11:47:DC:25:7C:2F:DF:A7:B0:B2:78:CA:FE:A8:6D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f282fffa-5eaa-464c-9040-795032354533/3443505eddac7b5aa6eddaedee91340561a130ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.212.0/22
                  168.196.240.0/22
                  186.179.0.0/18
                  190.185.108.0/22
                IPv6:
                  2803:8200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52393

    Signature Algorithm: sha256WithRSAEncryption
         78:bc:a3:bc:2f:53:71:73:6a:9b:77:63:32:41:59:37:6b:b3:
         68:b4:1c:af:82:6a:7a:ff:02:dc:eb:6c:01:c7:44:7c:92:df:
         72:96:49:69:b6:f5:27:07:60:b1:5e:3e:e4:ad:c4:1c:6e:af:
         eb:86:f9:96:83:dc:ec:79:5e:2b:38:be:9b:87:38:84:e0:7b:
         1c:eb:a5:88:5e:ec:1e:ac:73:15:9e:5b:5f:7d:90:fd:2b:f1:
         f3:08:90:40:0b:c5:a5:07:a0:a7:07:0a:58:f8:c3:62:65:56:
         03:8e:99:5b:5e:c2:d7:b3:1a:de:53:c3:6b:ae:dd:de:c5:8b:
         11:00:29:ee:92:1f:7a:91:3c:aa:85:9a:88:48:9d:db:f4:5d:
         c6:52:ed:70:f7:66:48:7c:50:70:c4:e4:7d:74:46:68:0f:0c:
         52:53:aa:ae:c8:96:23:91:6a:f3:9b:d9:c6:2a:c5:cc:9a:26:
         35:ba:02:6c:02:ab:67:e5:24:cb:73:d6:de:40:29:f4:53:87:
         37:40:3e:49:fb:2a:95:05:10:b1:1c:08:a3:fd:e8:89:d1:3b:
         58:97:7b:ed:cf:93:99:0e:8f:d4:89:d7:d3:46:d0:80:09:d4:
         de:4d:af:e4:d5:66:48:fc:cf:f8:1f:15:85:d1:5c:ce:fa:5f:
         bf:cb:ae:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----