Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/406965e9bc1d932024cd1f27cbf7489c0b714ac7.cer
File:                     406965e9bc1d932024cd1f27cbf7489c0b714ac7.cer (raw, json)
Hash identifier:          CaeoAhRSqHsS4LLPbQ5cvccXZGPJBb8AhoCF6nxQ1f8=
Subject key identifier:   09:B3:4A:37:F5:87:C0:E2:20:EC:BB:02:FC:70:6B:FD:9A:D3:0C:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CCA7CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/406965e9bc1d932024cd1f27cbf7489c0b714ac7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Jul 2022 13:34:15 +0000
Certificate not after:    Wed 22 Nov 2023 18:14:45 +0000
Subordinate resources:    IP: 45.170.128.0/22
                          IP: 2803:8ba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13412302 (0xcca7ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 13:34:15 2022 GMT
            Not After : Nov 22 18:14:45 2023 GMT
        Subject: CN=406965e9bc1d932024cd1f27cbf7489c0b714ac7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:3b:ce:53:5e:38:2b:f5:cb:9a:e1:1b:7f:c9:
                    0d:66:37:c7:5b:46:bf:38:9e:b6:d1:2d:91:92:57:
                    4e:ea:b6:c4:5b:1e:ac:d0:ef:73:ac:33:3f:66:53:
                    94:77:41:a2:c9:4e:b7:42:4a:ab:48:e6:98:71:b9:
                    4e:b3:6b:3b:08:60:54:4d:69:d8:53:b3:d5:59:b9:
                    7f:05:9f:ab:80:30:9e:b7:7f:46:4c:87:18:27:7f:
                    53:1d:d6:63:03:be:50:66:8f:56:8e:26:84:90:24:
                    3a:9a:01:7c:b1:2c:59:dc:12:40:5e:ab:f2:95:85:
                    ba:32:04:25:09:ca:f3:9c:24:0a:29:ee:c0:41:8b:
                    46:04:5f:9f:e2:56:e3:a8:b4:42:3f:45:d8:f8:28:
                    92:09:33:e8:5c:e5:76:4c:22:58:4c:ce:ca:e6:d4:
                    55:e1:ee:c6:ee:11:30:20:17:02:c0:64:80:95:e8:
                    35:5b:0d:52:4c:39:8c:c8:be:9e:72:2f:87:08:9f:
                    f1:50:08:6b:4b:5c:26:42:a2:76:5d:a4:9d:08:95:
                    86:b7:a7:d2:93:ac:27:8c:19:81:71:0e:51:61:8a:
                    fa:14:78:36:a7:2a:50:4a:b3:04:c0:76:5d:04:13:
                    e0:34:23:be:cd:7f:08:47:a6:68:5d:ea:df:7e:55:
                    18:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:B3:4A:37:F5:87:C0:E2:20:EC:BB:02:FC:70:6B:FD:9A:D3:0C:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/11c5bbaa-36e3-4a05-97ad-174c4be99a93/406965e9bc1d932024cd1f27cbf7489c0b714ac7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.128.0/22
                IPv6:
                  2803:8ba0::/32

    Signature Algorithm: sha256WithRSAEncryption
         1e:ae:1b:50:21:c8:16:aa:e5:af:8f:45:7c:80:b5:d7:2c:49:
         92:b2:dc:13:c3:20:2a:55:6d:71:f5:d8:37:1f:58:a3:f8:e8:
         64:71:df:5a:3e:eb:22:d1:9f:01:3c:4d:55:d6:bc:b0:ce:64:
         5e:5b:f0:84:80:8c:0e:b5:6c:21:e5:39:f2:56:9a:f7:ac:b0:
         be:59:a2:06:8d:60:a4:3e:2c:3e:44:26:cb:53:9f:b8:74:23:
         9c:f6:98:92:b6:9b:bd:17:f4:e3:8d:01:64:be:bb:d4:43:d9:
         a9:09:2e:a2:75:f3:83:f4:a4:56:f1:c3:16:28:16:13:86:cd:
         79:84:fc:9f:62:34:36:9a:15:9b:46:f3:4c:b2:c4:20:d3:c2:
         ad:ac:d3:35:00:9f:9e:0c:39:b4:6d:46:cb:e2:99:8c:01:89:
         f8:01:f2:4a:82:db:73:77:71:51:5f:39:50:da:8a:ca:eb:41:
         05:46:8d:61:97:8a:f2:e1:3a:64:47:d0:e8:c6:5e:43:34:b3:
         9c:1b:58:3f:a0:25:3e:36:fa:55:9c:75:4d:16:a0:9d:44:e5:
         b8:6d:a6:ee:be:ec:2b:2a:9a:29:dc:7b:fe:fd:83:1e:67:97:
         f6:91:5d:da:80:23:74:2e:4c:ec:be:74:08:72:64:cb:35:3c:
         05:27:96:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----