Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.cer
File:                     37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.cer (raw, json)
Hash identifier:          f/PtZ1EPPBSmTd5RrGbfREapDS+9CvVlZC4klSdhTyc=
Subject key identifier:   ED:99:66:95:7A:67:06:05:3D:E7:07:DB:0D:48:5A:65:82:93:A7:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D24294
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 15 Sep 2022 19:54:50 +0000
Certificate not after:    Wed 20 Dec 2023 16:21:17 +0000
Subordinate resources:    AS: 266735
                          IP: 45.231.224.0/22
                          IP: 2803:b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13779604 (0xd24294)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 15 19:54:50 2022 GMT
            Not After : Dec 20 16:21:17 2023 GMT
        Subject: CN=37bd7cd8964f0c9582b713bd1d719cbcfcf135e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bf:be:e7:84:db:bf:b9:4d:1a:d8:1b:e1:66:
                    89:cf:9e:8c:09:95:92:2b:2d:aa:4c:c0:14:ef:ac:
                    ce:3e:ea:60:98:a6:d7:bf:b3:c9:b1:e8:22:7b:c8:
                    91:a5:41:71:bc:59:d5:04:cf:67:ae:af:76:46:6e:
                    78:48:65:91:2f:77:09:a6:e3:5d:07:42:2a:12:8d:
                    19:09:3d:ae:8f:56:e2:4c:f1:46:ca:2d:18:4b:5f:
                    50:95:4d:90:85:a6:48:fc:11:65:10:26:05:20:83:
                    e0:87:84:48:e5:8e:2e:ab:72:6f:ff:82:e9:e0:29:
                    dd:a3:b7:ed:65:54:34:0c:48:5d:b5:ed:42:3d:90:
                    e7:17:e0:c4:17:19:4f:1a:05:67:c5:40:64:db:3f:
                    ca:70:4d:d5:a5:cd:ce:37:ba:7a:79:dd:ce:57:38:
                    7f:2b:7b:f3:3e:a0:8d:29:11:6a:3b:79:1a:2d:ee:
                    df:69:85:1c:0a:a5:0b:5c:c5:d3:76:03:af:1f:bd:
                    32:36:30:2d:93:29:7b:b0:74:75:79:1c:00:67:7b:
                    bd:10:02:58:5d:80:50:34:cd:85:73:09:d9:89:a1:
                    89:44:1d:b3:e2:19:96:b5:dd:b4:f1:cb:b0:3b:c4:
                    1d:bf:09:4f:ed:79:98:73:9e:7a:3b:c8:3d:e4:6a:
                    1f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:99:66:95:7A:67:06:05:3D:E7:07:DB:0D:48:5A:65:82:93:A7:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c9f070f5-eddd-4f1e-9a4e-591a0fed3fed/37bd7cd8964f0c9582b713bd1d719cbcfcf135e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.224.0/22
                IPv6:
                  2803:b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266735

    Signature Algorithm: sha256WithRSAEncryption
         27:71:5c:e1:30:75:95:59:d2:87:b4:f8:96:37:32:6d:58:14:
         e9:46:65:12:5c:89:92:70:de:b2:82:ed:4a:4d:a9:f5:c0:67:
         4b:2b:60:ee:d1:1d:de:3d:99:aa:97:36:f1:33:6a:01:c1:53:
         0f:41:55:b3:ea:1d:00:9c:fa:b3:29:da:01:82:47:ed:2d:e4:
         4b:dc:21:c3:94:e5:14:90:05:7c:b0:8b:4c:ba:97:09:7f:d6:
         95:b5:a0:77:d0:b0:03:f3:ca:2e:dc:83:d4:15:a1:b5:3d:f4:
         92:ff:1b:f0:e1:98:fd:9c:07:18:5d:9d:58:7a:da:e3:f0:13:
         28:5c:99:94:8e:5a:fb:12:70:84:d0:86:d2:ee:4a:c9:16:8d:
         82:89:83:d0:ad:d5:fb:18:33:c0:aa:d5:1e:a1:8f:c1:3a:2e:
         a5:7b:dd:fc:2f:11:a6:7c:7c:6e:f7:c0:37:69:52:7d:88:04:
         66:4d:2b:91:72:b2:5d:fd:4f:b5:7d:ba:09:7f:b1:24:53:8d:
         4b:51:d3:3a:e9:78:91:1d:28:e7:25:0e:a7:1f:8e:84:29:e6:
         70:ed:e2:ad:80:e6:05:20:8a:66:0c:51:01:c7:61:20:58:b0:
         eb:b2:7f:a3:ba:24:a8:34:29:31:b0:88:ba:05:90:de:e1:f8:
         ba:d0:80:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----