Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer
File:                     3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.cer (raw, json)
Hash identifier:          caMDIokED2uYwryYBXlVQIn8g8bx5fUfk0feEfPjkgI=
Subject key identifier:   A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1C9EF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Jun 2022 03:26:01 +0000
Certificate not after:    Wed 14 Aug 2024 14:53:11 +0000
Subordinate resources:    AS: 271814
                          IP: 164.163.184.0/23
                          IP: 170.246.56.0/22
                          IP: 2803:8810::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15845871 (0xf1c9ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 30 03:26:01 2022 GMT
            Not After : Aug 14 14:53:11 2024 GMT
        Subject: CN=3ac6d50ad5d743ef654e5c1f20e5c7a056198d62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d8:86:1a:b5:e9:25:84:fa:69:be:91:cd:ac:
                    36:8a:f0:3d:71:38:bb:ed:f5:2a:b6:e5:e0:09:1c:
                    d5:ae:63:4a:2f:d9:ff:b2:6a:25:0a:09:76:e2:05:
                    58:fb:b2:a1:8b:45:af:74:61:48:7a:7f:52:f7:b0:
                    26:c7:14:a7:8f:df:db:f5:ce:8e:3a:f7:1a:4b:19:
                    a6:fd:35:e8:38:50:93:c0:8a:fd:95:e2:17:b1:82:
                    7c:3d:27:57:4d:5a:e4:6a:4c:91:ce:fd:5c:49:50:
                    e1:d2:d9:b9:d9:b1:d4:ae:51:3a:35:66:f7:6c:1f:
                    05:d4:c4:82:18:3f:a8:7e:a0:46:eb:19:82:68:df:
                    0f:32:0c:53:4b:04:99:e1:0c:fe:8c:d3:11:fd:4a:
                    7b:25:fc:a4:c7:ae:a3:24:74:25:eb:80:cb:b2:a1:
                    40:58:ce:55:d6:70:e8:d3:1d:bd:b1:45:76:80:59:
                    f8:40:2e:29:0b:91:96:a1:af:ea:ab:e7:72:69:09:
                    90:d1:9e:6c:49:36:f6:96:df:b6:f7:e6:78:af:bf:
                    6c:18:08:ed:d4:1e:41:47:9a:9b:1b:de:ff:05:67:
                    43:4b:87:dc:36:a4:4b:b3:13:1d:f6:f1:0a:d9:89:
                    d0:28:10:40:02:78:35:86:07:56:8a:79:b1:f3:68:
                    21:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:40:75:67:C3:D0:0C:42:20:3F:05:11:5C:20:28:A9:A7:FF:81:54
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dccc7f15-cb1b-4767-b1ca-118d617d2621/3ac6d50ad5d743ef654e5c1f20e5c7a056198d62.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.163.184.0/23
                  170.246.56.0/22
                IPv6:
                  2803:8810::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271814

    Signature Algorithm: sha256WithRSAEncryption
         9e:eb:f9:1c:a3:9d:73:2d:56:d7:f3:74:ef:fe:fd:e2:60:04:
         7b:a3:09:6f:4c:b9:90:db:d0:73:4b:f2:5b:dd:78:77:86:25:
         8c:3b:02:5a:f9:4b:78:97:d9:d9:55:4e:0f:92:29:83:1b:df:
         ff:14:ee:65:85:f2:a7:12:95:db:b4:02:ae:a3:0c:80:5d:7d:
         47:44:32:97:b3:0f:db:db:94:01:b6:0e:18:48:3d:13:b6:21:
         f6:c6:05:0d:63:de:f5:6f:bb:3e:c0:7a:6c:b6:90:d3:0a:c1:
         43:b7:07:39:88:82:c5:16:22:36:ed:e9:20:3b:8f:cb:42:ac:
         01:9a:51:36:af:15:cd:a0:80:e6:27:b6:96:5f:a0:04:3c:9c:
         58:df:31:eb:9b:73:a8:23:bc:de:20:07:f9:79:82:fe:90:1f:
         12:3c:5c:a0:9e:6b:87:31:80:11:ee:b4:e1:d8:d9:84:d5:76:
         0e:a7:2e:5e:d7:06:92:72:7e:84:50:0c:9b:02:c0:f9:27:fb:
         47:45:49:99:1c:2f:5b:b4:12:97:92:6b:a2:97:b3:a6:5a:d1:
         28:8c:a2:a7:d4:d8:52:ad:35:73:9f:6e:bd:59:87:a4:79:e1:
         e0:5e:cd:6d:49:68:23:06:e4:93:8f:3c:44:b0:14:91:1c:03:
         b0:ef:0f:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----