Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4528cf46ea3aa4905fce636a3e0831d175aeb8bb.cer
File:                     4528cf46ea3aa4905fce636a3e0831d175aeb8bb.cer (raw, json)
Hash identifier:          kVfaBq00V3u2yKkRrtFxtIP2cGSQEdPAlrbrya75ITI=
Subject key identifier:   58:62:77:39:AB:9E:C3:24:27:67:7B:72:97:5F:2D:03:17:5E:DC:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C12BDE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3bec791c-5c8b-4f5b-b041-01d1a06d3c2c/4528cf46ea3aa4905fce636a3e0831d175aeb8bb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3bec791c-5c8b-4f5b-b041-01d1a06d3c2c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 25 Feb 2022 18:21:52 +0000
Certificate not after:    Sat 04 Nov 2023 05:00:00 +0000
Subordinate resources:    AS: 272078
                          IP: 2803:eb10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12659678 (0xc12bde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 25 18:21:52 2022 GMT
            Not After : Nov  4 05:00:00 2023 GMT
        Subject: CN=4528cf46ea3aa4905fce636a3e0831d175aeb8bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:60:9d:9e:12:8d:02:c2:5d:6f:f7:3c:6b:af:
                    3d:fb:ee:60:17:55:60:b5:31:7c:82:3f:21:e2:14:
                    62:43:51:7d:b9:7d:46:19:16:05:bd:77:d7:61:c5:
                    a3:52:36:cd:76:b7:76:53:ba:b6:0e:e2:c8:8a:37:
                    10:02:a9:f0:9a:25:5f:3e:e8:15:e3:a1:83:e2:06:
                    24:a8:b0:ee:84:cc:01:e3:53:e6:9c:3a:75:e0:22:
                    d5:ff:2b:6a:28:46:8a:56:ae:03:e1:a3:61:08:69:
                    a0:e2:ea:04:c8:2a:a3:e6:5d:46:93:d4:9d:55:b7:
                    f1:ac:b1:bb:db:a9:0b:71:45:4e:c5:2b:3e:9c:62:
                    70:07:e5:df:97:30:13:dd:7d:94:59:41:4e:d1:b3:
                    fb:94:ca:d2:5e:bc:2c:3e:70:3b:f0:31:7d:51:e2:
                    76:da:8c:47:a7:46:f4:e5:37:0a:4f:49:4b:20:09:
                    0a:36:95:69:99:6c:a7:97:1b:03:70:d8:12:13:57:
                    94:dc:4c:29:f9:bf:cd:36:db:24:2a:c2:b4:5a:f9:
                    29:70:19:0e:eb:8d:a9:cf:df:ec:7d:87:ed:f7:bd:
                    a5:b9:cf:31:b4:c4:5e:d7:4c:b0:a2:5a:cc:1d:8a:
                    03:cf:74:d1:81:ae:0e:b2:fc:df:b4:fd:12:fd:4e:
                    2b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:62:77:39:AB:9E:C3:24:27:67:7B:72:97:5F:2D:03:17:5E:DC:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3bec791c-5c8b-4f5b-b041-01d1a06d3c2c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3bec791c-5c8b-4f5b-b041-01d1a06d3c2c/4528cf46ea3aa4905fce636a3e0831d175aeb8bb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:eb10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272078

    Signature Algorithm: sha256WithRSAEncryption
         2b:d6:5f:12:8b:09:3a:d9:c6:2a:31:8b:dc:f3:9d:8b:2e:19:
         2d:61:38:e8:9e:07:ff:ce:91:0d:90:df:9f:20:92:c5:53:19:
         ce:53:48:57:c4:5d:a8:bc:a2:16:11:9a:0a:57:7b:b5:19:00:
         e6:24:27:18:29:81:9f:b2:18:db:9a:28:f1:5b:9b:45:df:b9:
         3d:9d:5c:7e:6c:d5:02:73:80:b6:3d:b4:3a:d1:d5:5f:09:ec:
         18:f8:ff:3c:33:bd:02:21:b7:7a:da:eb:41:b7:dd:90:22:ef:
         d6:e3:45:ce:91:40:04:8c:e2:62:3e:1e:fe:4b:e0:88:47:0e:
         b2:2e:56:ce:f2:aa:d2:43:20:47:c9:c5:ba:85:d4:8f:43:78:
         07:c3:56:12:b3:29:56:95:07:cc:75:42:f7:36:24:16:85:39:
         31:fd:5f:26:28:7e:41:d2:7b:00:d5:fc:b0:9a:e8:08:2e:06:
         94:cb:96:30:d9:68:9c:73:55:96:60:8a:a9:18:01:55:8c:39:
         e7:17:de:3f:22:aa:69:47:d7:cb:a4:cd:b2:47:be:6e:18:81:
         60:a9:66:c1:cd:b7:dc:de:fd:47:c7:03:17:ba:17:b7:77:32:
         9d:45:a2:fe:3d:02:ae:7a:ad:ce:70:bf:3b:fa:c6:0a:c4:2a:
         c0:70:75:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----