Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/466e43c330240907a2659f129b7552a9a8972ea2.cer
File:                     466e43c330240907a2659f129b7552a9a8972ea2.cer (raw, json)
Hash identifier:          d4B2TdIKJGW7A5KiKL+CjXDCFmAwt0w+bV7WzUuR21U=
Subject key identifier:   30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E22CC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/466e43c330240907a2659f129b7552a9a8972ea2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Jun 2021 17:26:27 +0000
Certificate not after:    Sun 21 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 271872
                          IP: 128.201.224.0/22
                          IP: 2803:2bc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14822594 (0xe22cc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 29 17:26:27 2021 GMT
            Not After : Apr 21 06:00:00 2024 GMT
        Subject: CN=466e43c330240907a2659f129b7552a9a8972ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:0d:4c:11:23:ff:fd:27:ec:fe:82:de:e3:c0:
                    38:2f:45:99:de:2b:01:bd:87:ae:78:8e:70:4b:25:
                    58:1f:35:e8:2d:e7:c4:41:1c:fb:11:95:61:97:5b:
                    23:86:b9:9a:5c:39:a4:b6:a1:2c:9b:2a:3b:99:dc:
                    d3:d8:f5:b4:16:c4:a1:7e:9c:64:04:3d:86:bc:4c:
                    a7:3c:ac:57:87:5b:b3:32:36:a7:27:ce:4c:2e:b7:
                    01:5b:87:f6:2e:92:d4:fb:9c:02:d6:09:10:50:1f:
                    3b:5b:e5:d5:fd:3d:a9:9f:25:40:8c:37:9a:c8:15:
                    b2:54:af:50:82:33:c2:02:06:b8:3e:5f:03:56:8b:
                    f2:34:26:20:2f:e5:69:ce:1c:84:e2:79:1b:8b:98:
                    9c:b1:d2:ae:6d:4b:19:b3:a5:52:70:c7:ef:e2:bb:
                    77:ab:2d:4d:bc:9f:65:b5:94:b0:4d:14:71:c2:e9:
                    90:9b:44:7a:fe:63:c8:52:a7:2c:19:fb:e3:ed:cb:
                    50:b9:64:45:f5:11:fc:75:d0:23:97:47:f9:e4:76:
                    37:a7:9b:c8:72:b5:e2:2a:78:17:0d:59:b1:3c:5c:
                    a4:96:27:cc:e1:b2:27:47:c2:93:35:f3:8e:8c:b1:
                    b8:bb:6e:73:b8:14:92:f4:f8:95:a9:fe:1b:7b:49:
                    eb:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D7:9D:1F:5F:2A:04:ED:DF:25:CD:16:DC:A6:96:E5:65:07:97:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b9c54551-1957-45aa-aad3-c1765049ba76/466e43c330240907a2659f129b7552a9a8972ea2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.201.224.0/22
                IPv6:
                  2803:2bc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271872

    Signature Algorithm: sha256WithRSAEncryption
         31:41:b1:db:93:18:a4:93:78:b7:af:40:77:e7:91:78:43:db:
         9e:57:95:30:ea:b6:36:36:aa:05:fd:2b:15:af:a0:0f:5a:d7:
         ac:74:3c:59:9f:4e:8a:72:63:69:09:30:bb:e4:56:27:01:0b:
         71:c8:6f:0b:8c:92:f4:79:c1:bb:fe:3b:d7:56:c6:c8:0a:04:
         40:85:3f:80:6c:4c:ee:34:53:3f:c1:0e:ab:71:0d:15:63:c5:
         6d:46:c1:fb:09:42:8c:4c:80:9d:ec:2f:79:2d:a7:e4:6f:fa:
         f7:2c:cc:7a:0d:ae:ae:4b:c2:34:bb:21:d8:c5:2c:c0:35:43:
         48:6f:d4:c9:de:86:e7:cb:0e:b8:01:15:67:0d:44:f8:e7:77:
         3f:5f:c6:94:da:41:b8:86:a0:36:37:b2:f7:f9:fb:c6:71:a2:
         fd:11:3b:e7:15:c5:15:0b:7e:a6:5d:d4:42:45:4b:a3:0c:4d:
         f4:7a:1c:96:77:b8:de:69:fc:2e:e9:af:c9:66:c6:a7:50:30:
         ef:ea:7b:72:b4:f9:60:1b:e1:20:78:54:af:cf:a2:75:0b:3d:
         c9:6c:9c:c7:d7:1b:1c:19:d1:b5:02:86:0b:8a:a4:51:98:41:
         fa:01:3b:eb:f5:4e:ca:f9:ec:a8:28:e0:88:9d:b8:d0:75:ca:
         7b:93:99:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----