Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/40dd355863a64b49aaea56a333a078f4104009ff.cer
File:                     40dd355863a64b49aaea56a333a078f4104009ff.cer (raw, json)
Hash identifier:          kSS3c3nMwslZhGsPePEnxe8t2NOSivbVDrFdLkNbe7k=
Subject key identifier:   30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D96FF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 May 2021 20:24:39 +0000
Certificate not after:    Fri 12 Jan 2024 19:07:16 +0000
Subordinate resources:    AS: 266754
                          IP: 45.232.0.0/22
                          IP: 2803:fb20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14249972 (0xd96ff4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 17 20:24:39 2021 GMT
            Not After : Jan 12 19:07:16 2024 GMT
        Subject: CN=40dd355863a64b49aaea56a333a078f4104009ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:38:ef:bb:ec:47:58:a1:60:a2:27:e7:d8:da:
                    a9:a9:0e:6f:90:1c:eb:3a:55:c7:72:34:65:f1:e6:
                    57:03:ef:8c:43:28:cd:f1:0c:9f:43:e4:88:da:d2:
                    80:c1:be:2c:77:eb:84:c5:3b:de:ba:54:b2:a4:43:
                    1d:ae:a3:cd:ab:bc:e1:76:a8:73:77:d0:ea:d3:ea:
                    db:ed:f5:fd:17:d7:77:ce:06:85:16:b2:3f:74:de:
                    70:35:1b:c5:c1:b9:51:67:cd:1e:e5:3b:b1:c7:b3:
                    0d:ed:c8:26:47:cb:87:66:c9:d1:8f:fa:ec:eb:d5:
                    f5:3d:01:69:24:68:42:c0:95:1b:db:da:9d:44:02:
                    99:ec:1c:c3:2e:32:74:39:23:b5:45:93:82:4b:7e:
                    6d:4b:de:a6:18:5a:4e:58:32:04:68:91:ad:77:dd:
                    cf:4b:30:db:09:1c:71:bb:42:68:bc:9c:8d:c1:30:
                    ed:40:4f:c6:31:f5:ce:b9:b7:79:6e:60:14:f3:15:
                    b5:9e:0e:d6:9f:02:bd:f9:8b:23:17:9d:50:12:b4:
                    85:f0:a3:8d:f4:c6:9a:1f:5e:3e:49:db:c2:ae:1e:
                    18:a5:69:2c:1c:98:53:7d:86:0f:1e:2a:b9:2d:a0:
                    d6:e7:a3:52:23:da:6f:97:e6:f6:a8:b9:da:14:90:
                    c2:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:03:EB:ED:04:79:DB:CE:DD:0A:60:F8:33:AC:52:69:51:5B:A7:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02efd32a-664b-4770-a500-8fc74a5992ad/40dd355863a64b49aaea56a333a078f4104009ff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.0.0/22
                IPv6:
                  2803:fb20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266754

    Signature Algorithm: sha256WithRSAEncryption
         30:34:5c:8a:91:d9:4f:2e:c2:08:45:a5:1b:19:69:09:f1:be:
         4f:2f:b2:f8:40:4d:20:07:0e:ab:80:1d:8c:bc:4e:d3:04:d3:
         21:c5:b9:43:17:9a:08:8f:30:e1:0a:7e:f1:17:8f:0f:06:55:
         d0:2f:21:90:2f:9d:f0:05:4f:87:5b:46:1b:61:3d:d3:73:be:
         d3:e9:b5:6d:aa:a4:fc:75:69:4b:94:d2:20:c6:36:02:26:77:
         a0:24:ad:68:29:36:ba:58:54:a5:aa:02:54:c4:fd:18:d9:6a:
         d6:13:f9:57:e2:e5:e6:2f:fa:4d:f6:42:ad:ea:32:e0:50:52:
         ba:9d:4c:15:f4:a4:cc:f4:23:50:eb:de:c6:a6:9e:ce:b2:b2:
         ff:2b:1f:77:6e:63:fc:3b:a3:97:b3:30:6f:1a:38:94:24:82:
         76:9c:12:2a:06:ea:3c:96:43:6a:9c:34:fa:62:fa:9a:cf:0c:
         83:5e:4c:56:b2:9d:ea:1b:05:14:dc:4e:e6:b8:2b:7d:90:b5:
         d9:2e:f1:b0:d4:b7:9e:55:be:f8:6f:0b:f9:49:05:f4:d0:6c:
         a3:27:06:5c:ce:4b:06:78:00:98:34:c2:40:7c:0a:61:6a:c0:
         9f:c0:fb:32:50:f5:fa:84:7d:b9:31:fa:41:70:a1:6e:e1:c2:
         8a:4b:8b:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----