Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39792f984408f7aab509e7ed43fd25066ac001d7.cer
File:                     39792f984408f7aab509e7ed43fd25066ac001d7.cer (raw, json)
Hash identifier:          xFtvAesOt/U58P20SLecrIV1JyV55CIo5GrVJzFQHdE=
Subject key identifier:   09:FB:1D:CD:C0:57:41:FE:0B:37:72:FE:A3:3A:BF:C5:F4:3E:C9:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       BBB1AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/39792f984408f7aab509e7ed43fd25066ac001d7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Nov 2021 13:39:08 +0000
Certificate not after:    Mon 23 Jan 2023 18:34:18 +0000
Subordinate resources:    AS: 271891
                          IP: 181.224.72.0/22
                          IP: 2801:1a:e800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12300719 (0xbbb1af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  3 13:39:08 2021 GMT
            Not After : Jan 23 18:34:18 2023 GMT
        Subject: CN=39792f984408f7aab509e7ed43fd25066ac001d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:35:ad:c8:e1:b0:45:91:ec:b4:f5:30:f9:a0:
                    52:b7:15:e4:7d:7e:23:47:a1:f0:5b:b4:b7:b3:6a:
                    83:bc:54:3b:6d:ac:7e:b8:36:ff:06:e6:25:09:6d:
                    76:43:ce:ed:53:b7:9f:28:f2:8a:52:a2:93:b0:e0:
                    8f:72:5a:27:1e:bd:f7:d4:31:f3:33:7d:50:1b:1a:
                    c4:96:61:28:2b:b8:d1:c8:b4:67:52:f5:62:65:dc:
                    ee:3c:7a:df:fe:c3:5f:21:89:3d:99:6e:8f:0a:3e:
                    48:89:4e:d0:f9:a1:ba:7f:ef:ee:6b:b4:91:4b:65:
                    47:77:b9:95:81:fc:5b:b2:0a:6b:e8:ad:5c:af:e5:
                    46:b7:24:9d:53:78:09:54:d2:7d:a6:0c:d8:1c:de:
                    07:7f:f6:84:fb:b5:94:44:78:ca:e7:b7:cf:b5:31:
                    77:e6:04:de:16:34:ac:04:c5:f1:c9:18:83:d4:ac:
                    fc:1c:ce:39:7c:f7:bc:80:91:0b:13:d9:47:74:d0:
                    f8:35:02:ec:23:db:d7:9d:9f:68:92:c4:dd:91:90:
                    29:36:8a:b5:92:d7:f6:4c:09:af:a5:1d:d6:fb:89:
                    b3:42:ca:a0:21:cc:44:ed:03:e5:a4:8b:95:d4:f3:
                    39:38:da:c8:06:40:89:70:cc:8b:1d:18:0e:34:7b:
                    6e:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:FB:1D:CD:C0:57:41:FE:0B:37:72:FE:A3:3A:BF:C5:F4:3E:C9:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/449ecc19-c291-4fcf-9697-4a9669b30e80/39792f984408f7aab509e7ed43fd25066ac001d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.72.0/22
                IPv6:
                  2801:1a:e800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271891

    Signature Algorithm: sha256WithRSAEncryption
         42:62:50:21:04:4f:57:c9:fb:e0:cd:6d:c5:39:b6:06:4f:cf:
         14:2b:08:67:8a:6d:ce:89:9c:91:11:0a:c0:6a:aa:bd:3c:5e:
         cb:83:87:ba:13:0f:07:85:a2:41:ed:d8:4e:a0:5b:77:a8:99:
         cb:51:6a:ed:a8:52:04:5c:e0:3b:70:3f:b4:18:89:72:46:5f:
         55:3c:f8:81:6e:1d:c0:79:49:4d:11:00:cd:ff:a8:02:d5:f0:
         9f:9f:32:47:14:ef:e9:90:e5:f5:8b:71:04:d4:43:b7:4c:08:
         df:8c:2b:f5:45:26:d9:5a:35:74:2e:3d:1d:cc:e4:54:f1:aa:
         1a:d5:b2:7d:5e:f2:21:2b:c4:14:be:5c:f8:7f:d5:d0:07:57:
         5a:1e:de:af:5c:69:b0:41:a7:f9:89:b0:71:71:52:48:a2:b8:
         6e:e9:6a:d9:66:84:d4:e3:cb:9b:25:c6:bf:ee:af:33:48:6b:
         d1:16:da:1c:90:7b:8e:10:79:98:2d:1c:3c:37:5b:c8:cc:d6:
         e6:63:ce:9e:52:08:62:01:25:bc:ea:25:32:19:37:24:f2:c3:
         64:97:2a:ab:31:7c:b8:23:c7:c6:bd:61:26:c2:55:36:f7:c9:
         27:45:90:32:f8:f7:e9:ea:0c:9c:c3:f0:11:24:8a:82:0b:a4:
         67:d4:00:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----