Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39605400f52ffbae019f2c7f2d49fab6ba3e9a71.cer
File:                     39605400f52ffbae019f2c7f2d49fab6ba3e9a71.cer (raw, json)
Hash identifier:          6G4ZHxMh8aHJxQx2lwby88a/U69+MAdK0TII58WLoIU=
Subject key identifier:   4A:E3:00:06:7C:D2:4E:28:A1:26:7E:B1:AD:C7:40:08:82:22:20:CD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D52D1D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/39605400f52ffbae019f2c7f2d49fab6ba3e9a71.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Oct 2022 20:59:45 +0000
Certificate not after:    Fri 26 Jul 2024 16:13:56 +0000
Subordinate resources:    AS: 272093
                          IP: 45.71.180.0/22
                          IP: 2803:c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13970717 (0xd52d1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 19 20:59:45 2022 GMT
            Not After : Jul 26 16:13:56 2024 GMT
        Subject: CN=39605400f52ffbae019f2c7f2d49fab6ba3e9a71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:e5:1d:48:e0:32:47:92:99:10:a7:9a:d5:87:
                    26:12:9f:85:7b:b0:52:52:c8:22:d3:3e:79:76:9b:
                    c3:1b:e8:1f:6d:bc:b9:37:2e:b9:a9:be:ab:6e:d2:
                    40:49:a4:b7:66:a8:46:3e:54:ca:8f:3b:55:07:21:
                    a5:14:48:62:9e:17:bb:af:67:05:f9:7c:20:51:ba:
                    16:8f:d6:af:87:ea:77:1b:9c:35:1a:87:94:6b:72:
                    c7:ee:d8:1a:8b:39:9b:7b:f8:75:6d:bc:d4:2b:62:
                    13:ff:32:c5:18:f0:a6:6d:1f:df:de:85:70:75:8a:
                    c3:d0:d4:35:c5:0d:93:0a:88:e5:d8:4f:35:ff:7c:
                    93:52:56:6f:58:0c:e1:e6:8c:cb:32:fe:ed:1f:ab:
                    ea:27:e6:c5:9b:1e:46:e9:78:4d:7e:c0:86:75:a7:
                    1b:9c:23:53:bd:59:4f:e5:08:13:b8:e7:e4:3b:47:
                    89:29:e6:27:44:4f:19:5c:4d:88:08:08:b1:76:46:
                    2f:36:2d:b9:a6:85:85:af:8d:5d:33:76:d3:07:d3:
                    93:fb:40:16:05:7a:79:1a:6d:c6:db:68:1f:1f:4b:
                    93:72:70:ce:97:a4:fb:13:d1:57:f1:d3:a1:c4:af:
                    92:bc:6b:2e:4b:48:3a:07:07:c4:fc:1b:e5:3f:2e:
                    d7:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E3:00:06:7C:D2:4E:28:A1:26:7E:B1:AD:C7:40:08:82:22:20:CD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e0adbabb-409e-4eb4-96fb-8e27afa84480/39605400f52ffbae019f2c7f2d49fab6ba3e9a71.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.180.0/22
                IPv6:
                  2803:c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272093

    Signature Algorithm: sha256WithRSAEncryption
         c6:84:46:1e:2c:e3:ab:ef:cb:c8:37:2f:d4:b8:cb:a5:2f:b1:
         f6:d5:1b:27:f7:64:c7:fb:d0:43:9c:4b:52:f3:87:60:c3:cf:
         18:f9:3d:82:f2:6e:3e:97:a7:ad:10:1b:aa:78:69:eb:27:f8:
         fd:62:eb:38:7f:e3:9c:c3:5a:f0:14:1c:cd:e4:2a:7e:58:fa:
         93:9d:35:86:67:6a:b6:9d:3f:62:22:7f:29:6b:d9:39:74:78:
         a1:0e:cf:dd:73:22:34:c0:8a:51:c4:61:b6:30:8c:8f:16:ce:
         d5:6b:18:7b:f0:02:11:9b:09:fc:ff:10:da:0a:55:93:30:c2:
         ce:8a:30:9f:6f:0b:9b:40:15:e7:bc:9b:ea:62:bf:76:a6:b6:
         c9:58:1a:a9:bb:02:a3:80:a2:f9:22:14:fd:a6:b6:73:9d:0f:
         62:61:95:8f:30:9b:e7:ae:62:f2:fb:38:77:74:21:40:76:e9:
         d9:e0:d0:34:f9:3c:17:05:d3:75:a0:84:83:23:77:ae:8e:78:
         45:1f:76:ee:4c:cc:a1:6a:99:58:9a:fe:54:0e:37:a5:69:c9:
         e2:84:1a:99:50:44:4f:ba:43:b3:a6:51:ec:d8:ee:37:37:35:
         23:e9:aa:79:5d:ba:17:c4:7d:53:96:42:8d:6d:6f:17:5a:63:
         71:7d:fe:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----