Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48d4dfa98f1512deb0da1c618906f466917d8749.cer
File:                     48d4dfa98f1512deb0da1c618906f466917d8749.cer (raw, json)
Hash identifier:          KS7tuZ0QP04v2fNGJ6c/OSKeexjty7mz9xaH7CKtuuo=
Subject key identifier:   95:49:9C:AA:08:F3:87:2D:32:77:EA:02:E0:32:4A:93:53:00:AF:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD5D61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d7614415-778b-4965-b4ca-d01584fb8f3e/48d4dfa98f1512deb0da1c618906f466917d8749.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d7614415-778b-4965-b4ca-d01584fb8f3e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Jun 2021 15:26:59 +0000
Certificate not after:    Wed 28 Feb 2024 22:21:19 +0000
Subordinate resources:    AS: 269988
                          IP: 177.128.112.0/22
                          IP: 2803:9ee0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14507361 (0xdd5d61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 10 15:26:59 2021 GMT
            Not After : Feb 28 22:21:19 2024 GMT
        Subject: CN=48d4dfa98f1512deb0da1c618906f466917d8749
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:35:c2:2d:7e:21:e3:af:6a:91:ef:b5:e9:2a:
                    6d:22:16:2a:03:10:13:3f:32:64:59:55:33:a5:34:
                    70:78:38:3d:a7:48:eb:38:ca:29:bf:5a:b1:63:bc:
                    e3:c0:fa:18:0b:8f:af:77:47:70:cc:b3:3f:ff:a5:
                    0c:a5:a8:b5:5a:02:8c:9d:ff:88:85:80:a5:d3:97:
                    47:60:6f:4c:5c:6f:d5:bd:c4:ed:3a:11:5d:e8:95:
                    be:e6:1a:47:c3:f6:ee:a6:8f:18:69:46:a8:ad:a9:
                    31:d3:85:62:61:2b:f5:6d:88:54:1b:7b:ed:36:48:
                    fb:df:d9:c5:46:39:6a:02:09:9f:8d:8e:f6:0e:21:
                    38:de:95:dc:20:ea:e9:50:11:ee:17:09:71:50:4d:
                    85:15:04:aa:a2:37:a5:8c:a6:43:ab:18:93:22:9c:
                    34:b0:95:4d:91:cb:2e:5a:39:19:38:c2:9a:28:56:
                    09:25:17:e5:a2:3a:18:23:22:da:cf:0c:52:9a:ad:
                    f7:83:30:9b:b8:b5:1c:eb:f5:c5:f9:1b:4e:04:f9:
                    bb:df:c4:bf:79:e7:2a:f5:b0:c2:23:f1:dd:01:77:
                    af:ca:91:bb:e8:52:41:46:ed:77:19:67:d4:a8:f1:
                    2d:c2:80:b2:5e:93:ee:5b:7f:57:e4:a1:f5:19:ff:
                    b9:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:49:9C:AA:08:F3:87:2D:32:77:EA:02:E0:32:4A:93:53:00:AF:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d7614415-778b-4965-b4ca-d01584fb8f3e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d7614415-778b-4965-b4ca-d01584fb8f3e/48d4dfa98f1512deb0da1c618906f466917d8749.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.128.112.0/22
                IPv6:
                  2803:9ee0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269988

    Signature Algorithm: sha256WithRSAEncryption
         6e:8d:50:4a:0d:70:f2:8d:44:3d:1a:ac:2b:27:cc:0b:13:5c:
         bd:5b:25:0f:fc:f5:00:85:f2:1c:ce:44:7d:3d:41:70:4e:78:
         dc:42:75:43:9e:82:e3:42:9a:03:63:2a:7b:ea:5d:9d:67:2e:
         c8:92:52:0c:6c:c9:84:f3:60:e0:de:ed:2b:55:67:e2:a3:f5:
         8b:bf:ac:1f:65:ed:2d:16:e3:cb:a2:25:3c:08:3b:1c:a2:db:
         1c:23:83:24:34:5d:69:de:f2:60:94:1f:1c:6b:73:04:57:fa:
         85:7f:de:fe:f1:c9:a4:1b:9f:1b:de:c7:cc:5c:df:87:e6:40:
         29:0a:b3:43:25:ef:d0:60:43:00:66:f5:b6:36:be:26:43:76:
         48:c8:15:08:0e:d8:65:f8:41:bc:46:b5:23:e7:c1:c7:eb:00:
         45:79:67:77:16:9e:fa:cc:c5:1d:cc:d8:64:ca:61:e1:81:f3:
         5b:a5:0f:1b:69:a0:4c:d8:80:ae:63:bf:cd:90:67:e5:9e:f3:
         f8:b5:a8:ce:79:f9:eb:01:e4:0e:f5:23:65:2a:5f:28:d3:17:
         2d:ec:67:b8:70:71:6e:33:6a:18:57:a0:ff:39:81:25:dc:71:
         81:04:04:6e:12:1b:c8:dd:2f:6b:01:a7:c5:3e:b6:e8:93:e8:
         f1:e5:cd:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----