Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.cer
File:                     34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.cer (raw, json)
Hash identifier:          dDCJ0V6y8tFs2kLq51EwkM2xovBeH/vgx4+9J+pRYVc=
Subject key identifier:   86:AB:1B:95:A9:91:3F:BB:C9:13:0B:83:86:CC:19:53:8C:44:3B:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFDB3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 Sep 2021 02:28:32 +0000
Certificate not after:    Sun 28 Jul 2024 23:43:22 +0000
Subordinate resources:    AS: 264787
                          IP: 168.197.196.0/22
                          IP: 2803:d8c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15719226 (0xefdb3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  1 02:28:32 2021 GMT
            Not After : Jul 28 23:43:22 2024 GMT
        Subject: CN=34dfefe96d7a1553a8ffa329c9e565c47bd0aa94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:df:84:25:92:eb:4e:40:f3:88:af:42:4b:4a:
                    10:81:ef:8a:a8:ce:a8:3e:fe:dc:5c:10:14:6d:e0:
                    e6:41:e4:96:99:61:89:29:d4:24:5a:1c:73:78:2b:
                    ba:fd:75:24:71:db:a3:f8:7e:d7:94:23:9a:39:52:
                    21:93:c8:f3:17:37:26:a4:9c:a9:7b:32:c5:de:56:
                    f0:0c:3a:7c:54:61:76:0c:e6:a8:61:e5:e2:ca:e5:
                    74:21:11:32:fd:b7:9c:15:bd:b2:27:ff:2e:e1:60:
                    e4:b5:d3:1a:80:bb:1a:af:47:f7:3a:d4:5a:0c:1c:
                    eb:a5:24:d8:d5:85:5b:ce:e3:23:fd:4a:91:45:46:
                    e5:4b:6f:96:48:60:b4:b8:1f:a3:6f:54:95:f9:a7:
                    65:84:65:d7:0d:f9:15:3c:39:76:40:c8:83:be:b5:
                    8c:f5:22:c1:cf:ca:6f:85:f3:ea:e4:15:bb:31:35:
                    26:22:85:dc:6e:9e:6a:46:48:22:42:52:52:5f:03:
                    81:ad:69:fb:e7:c9:d6:29:84:a2:64:2e:fb:60:d0:
                    6a:6c:c6:80:19:e3:37:bc:ee:e6:ea:e8:bd:38:99:
                    fd:d1:fb:de:ac:89:8b:ee:42:4a:93:7c:f4:7f:bc:
                    42:0f:72:69:73:f2:42:25:e1:c2:56:74:e2:d0:a5:
                    ef:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AB:1B:95:A9:91:3F:BB:C9:13:0B:83:86:CC:19:53:8C:44:3B:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6d45d450-ba4f-4b12-a148-582dc2a96a4a/34dfefe96d7a1553a8ffa329c9e565c47bd0aa94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.197.196.0/22
                IPv6:
                  2803:d8c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264787

    Signature Algorithm: sha256WithRSAEncryption
         03:e8:9f:1d:ce:6e:cb:9f:74:88:8d:49:b7:18:9c:14:ab:9a:
         49:a1:dc:b2:c1:ec:98:f5:c2:0b:e4:4e:ee:28:2b:3d:5d:e3:
         0b:24:b6:6b:03:1e:39:52:6c:b3:22:3c:84:f5:96:92:88:00:
         78:19:ca:1a:67:e2:ec:b5:7c:b2:20:7c:1d:3f:46:c5:20:6f:
         84:83:5e:86:47:29:a5:43:8a:89:89:b7:f5:b2:ce:5c:9d:61:
         56:6e:08:18:0a:f8:3b:87:88:25:30:5c:3b:77:55:ad:0f:62:
         b0:07:86:83:2d:d3:79:98:43:db:8d:58:bd:b2:54:1f:98:5a:
         70:24:a6:96:d1:0b:46:8a:4c:3e:d9:2e:40:e4:fe:3e:9f:e3:
         25:16:a8:ab:dc:f8:57:3b:80:d5:ab:92:8a:66:2e:ef:76:ee:
         40:00:46:0b:ab:5f:1b:e8:01:3d:0f:03:10:7d:ac:75:1b:12:
         73:4e:37:1d:6f:b2:9b:32:c8:6d:7b:05:4c:6f:1c:a8:43:b6:
         ec:5a:43:72:2e:07:6b:ba:ba:cf:a6:bb:8d:17:28:a4:68:5f:
         8d:c0:f6:d6:ea:ba:ab:94:a9:a1:c6:07:fc:d1:1e:56:9d:c6:
         95:96:3a:b8:0d:10:46:e0:7d:db:99:65:e1:c2:a2:74:1e:6a:
         66:8f:f2:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----