Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.cer
File:                     3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.cer (raw, json)
Hash identifier:          Oi+3RwWMnxFOcdcI5zhGIyfKWd5oB5WyF3yznA7EysI=
Subject key identifier:   1A:71:DF:9A:5E:72:38:35:DC:82:02:55:D3:26:0A:01:8A:9E:55:7E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F804CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 19 Aug 2022 15:30:07 +0000
Certificate not after:    Fri 04 Oct 2024 19:06:05 +0000
Subordinate resources:    AS: 28396
                          IP: 200.9.182.0 -- 200.9.185.255
                          IP: 2806:21c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16254157 (0xf804cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 19 15:30:07 2022 GMT
            Not After : Oct  4 19:06:05 2024 GMT
        Subject: CN=3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:35:f5:9d:62:6d:43:c5:24:01:f0:8b:3b:dc:
                    26:7e:be:be:e5:99:e4:61:5b:0c:d8:84:2d:5a:a7:
                    82:f9:16:40:71:fb:3f:63:33:88:8a:91:02:83:2c:
                    25:c1:a0:36:7f:55:b2:fc:1c:56:db:f3:a5:6a:ab:
                    f6:cf:f1:ba:79:99:fe:62:44:96:b7:e8:3b:3f:ee:
                    f2:75:86:3f:ed:d6:0d:5b:e9:b6:4c:aa:5c:a9:46:
                    af:33:20:8e:55:6c:5b:76:2e:f1:f8:5e:b7:2a:8e:
                    e8:ef:df:e7:be:6d:88:4e:c0:8b:41:66:0a:69:36:
                    56:25:cb:1f:83:d3:ca:c6:77:d5:98:72:4a:8d:6d:
                    64:4b:7b:78:a6:42:03:85:b3:9b:4e:00:08:ca:01:
                    81:57:f8:2f:8a:f1:55:92:98:cc:1d:a4:08:c0:3d:
                    8e:0e:a9:06:1e:a8:49:8a:59:50:89:f9:e9:0d:ad:
                    37:65:7f:0e:6b:dc:46:c0:61:19:74:71:55:ad:1c:
                    84:65:ca:ca:f1:e4:0c:34:fd:d4:94:22:c3:6f:03:
                    82:c5:da:ca:28:dd:f8:e6:06:a3:be:59:87:ff:aa:
                    05:fb:c8:65:ad:45:b3:3a:44:eb:6e:27:88:dd:74:
                    8e:a1:92:58:d1:14:eb:65:c7:ca:28:4c:e7:38:1f:
                    7b:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:71:DF:9A:5E:72:38:35:DC:82:02:55:D3:26:0A:01:8A:9E:55:7E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ab893e9f-8355-4c9b-ab33-6fe04a4ffc4f/3a4fe9b9bd095a1eb73b9fd8910d5a0c69d538ae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.9.182.0-200.9.185.255
                IPv6:
                  2806:21c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28396

    Signature Algorithm: sha256WithRSAEncryption
         45:fc:52:ab:78:70:78:7e:87:a9:f3:27:07:4e:b6:cc:0a:ed:
         12:3f:c0:e9:ea:55:ae:5b:ac:93:2c:e2:a5:bb:84:e2:3e:c9:
         5a:b7:a1:e0:3d:c1:55:ef:88:19:a8:b3:44:44:2c:f6:30:63:
         f2:db:3b:17:f3:e1:79:f8:99:de:df:fd:d8:62:4c:27:31:a1:
         94:fc:95:5e:bb:83:82:7b:80:5d:a0:6e:4e:4a:2b:a1:77:f5:
         83:9b:67:b3:f4:4c:33:e2:aa:63:b0:9f:6b:fa:02:01:67:74:
         79:ac:ea:01:31:ba:db:1b:51:48:11:fb:07:62:42:f8:a2:51:
         5f:c5:93:f7:a5:0e:60:b2:61:b1:9c:b3:13:04:94:6e:a0:ed:
         29:6a:bd:37:72:1e:7c:18:f9:69:c0:db:03:6f:1c:78:40:e1:
         44:57:ea:49:53:dc:c5:99:55:38:31:24:29:53:59:38:8c:b3:
         e5:bb:ac:93:dd:4e:9e:c6:69:2e:35:af:de:8e:1c:5e:33:ea:
         4c:51:1e:0c:45:a9:3a:b1:c0:a8:f4:62:06:06:91:12:29:18:
         4b:6a:4d:28:5a:ea:0e:31:5a:5f:96:4c:4f:ec:2a:9f:0d:f7:
         78:7d:86:47:53:ff:7c:f2:6f:86:97:fb:9a:f1:b9:7d:94:7e:
         8f:df:36:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----