Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/424acfa826ddcfe814d48486045b2a1196bd2435.cer
File:                     424acfa826ddcfe814d48486045b2a1196bd2435.cer (raw, json)
Hash identifier:          FbjP5AlMmgB2rXa9hohmQcjAAVdLb+WNn6dBtu8YPiE=
Subject key identifier:   4F:7B:3A:FB:1E:46:17:68:53:E0:B3:C4:21:0B:7A:1B:C8:85:DC:22
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D4EA50
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bee445b9-06cb-44db-a1e0-91cdea468215/424acfa826ddcfe814d48486045b2a1196bd2435.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bee445b9-06cb-44db-a1e0-91cdea468215/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Oct 2022 17:34:32 +0000
Certificate not after:    Fri 19 Apr 2024 19:16:48 +0000
Subordinate resources:    AS: 265535
                          IP: 45.7.136.0/22
                          IP: 2806:2e7::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13953616 (0xd4ea50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 17 17:34:32 2022 GMT
            Not After : Apr 19 19:16:48 2024 GMT
        Subject: CN=424acfa826ddcfe814d48486045b2a1196bd2435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:de:6f:2c:78:dc:17:a1:e5:b1:2d:df:96:62:
                    db:95:d9:8d:dc:c5:43:ea:66:4a:ac:75:8f:fc:82:
                    1b:34:12:54:10:4b:45:18:1a:06:7a:7b:45:fc:61:
                    82:14:44:d0:a6:0a:07:e3:ea:ba:a0:e9:14:8f:13:
                    22:35:3b:ec:f3:04:50:9d:33:d7:16:f9:5d:79:f0:
                    e7:0a:49:27:0a:76:04:f2:8f:80:b0:36:7c:54:59:
                    97:d8:9e:41:18:dd:3e:c7:ed:5f:a1:79:86:3a:56:
                    0b:42:d1:e6:1a:c5:47:27:1a:54:3c:a6:bc:33:77:
                    48:25:10:07:3f:85:d6:a3:a3:7f:fc:5b:f8:3b:1e:
                    f3:f9:b8:25:06:d9:af:5a:19:0f:7b:d7:2d:f5:0e:
                    9c:2c:5d:72:32:d2:a9:ab:18:2c:87:0b:3e:f3:82:
                    1f:eb:8b:fe:51:18:24:5e:3a:fc:11:0c:1c:1c:34:
                    31:15:2d:f9:13:0e:b8:f6:36:7c:4f:2b:b6:ce:d6:
                    3f:69:15:af:7e:35:49:ea:2d:f9:15:2b:30:37:7d:
                    09:9a:8a:1c:d0:26:08:cc:06:43:08:7a:03:2c:1a:
                    e9:dd:0c:00:7e:a3:b0:04:8a:86:4b:dd:e9:5d:65:
                    48:9e:7e:d5:49:cf:b7:c9:34:a2:1c:9e:65:1d:86:
                    fa:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7B:3A:FB:1E:46:17:68:53:E0:B3:C4:21:0B:7A:1B:C8:85:DC:22
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bee445b9-06cb-44db-a1e0-91cdea468215/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bee445b9-06cb-44db-a1e0-91cdea468215/424acfa826ddcfe814d48486045b2a1196bd2435.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.136.0/22
                IPv6:
                  2806:2e7::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265535

    Signature Algorithm: sha256WithRSAEncryption
         74:c7:bc:49:82:16:4d:f8:3d:46:d1:c3:bf:4b:43:71:02:21:
         83:d7:b7:f1:39:33:4e:42:e7:eb:5c:9b:0c:a0:e5:ff:fd:24:
         66:2c:84:b6:63:87:05:9e:79:7e:96:c8:a9:04:de:31:c3:62:
         de:6f:86:b4:b7:f0:db:7c:4e:74:49:63:6c:fa:b8:58:ff:9d:
         ad:a3:ea:60:fe:94:b4:d8:df:93:be:3c:01:8f:8e:73:57:32:
         ec:8e:60:65:4c:f0:97:a0:cf:b4:8e:35:b8:0b:71:9c:f3:46:
         fe:a6:8a:3b:86:0a:2b:66:66:d2:a2:22:18:ec:7c:08:98:c7:
         59:b1:90:be:9e:2a:84:50:3b:66:06:80:24:d0:a8:95:53:49:
         f8:10:e5:3f:17:5d:29:55:db:33:2e:2d:13:68:32:8d:20:56:
         da:8d:20:e8:ea:07:f4:a8:c3:32:a3:1c:b9:15:32:fe:87:de:
         94:30:f0:06:cb:83:40:fb:f3:87:d4:84:02:68:38:a2:99:ea:
         4e:88:76:93:f6:59:a1:c0:28:30:79:ea:09:d3:b9:42:25:7b:
         6d:0c:7f:cb:86:67:b1:44:ca:09:dc:0c:41:36:24:88:95:f9:
         be:30:63:a6:cb:11:0f:ec:89:a3:07:cd:b2:7a:3e:39:28:b2:
         33:6b:0c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----