Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer
File:                     4a3d4fdf5d4afff13254531592d21c29a5ad3196.cer (raw, json)
Hash identifier:          Msg2nfj2CI1ZzFe//v12Fnc8N3jmClFXQqfkRNfbDqY=
Subject key identifier:   9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC35E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/4a3d4fdf5d4afff13254531592d21c29a5ad3196.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 Aug 2022 16:43:54 +0000
Certificate not after:    Thu 07 Nov 2024 22:49:43 +0000
Subordinate resources:    AS: 272038
                          IP: 181.233.180.0/22
                          IP: 2803:4d10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16528864 (0xfc35e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  5 16:43:54 2022 GMT
            Not After : Nov  7 22:49:43 2024 GMT
        Subject: CN=4a3d4fdf5d4afff13254531592d21c29a5ad3196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:3f:b6:43:ce:10:41:6f:bd:23:54:f3:dc:21:
                    1a:84:15:36:1a:49:c1:06:dc:3b:e4:f9:ef:2b:a4:
                    dd:95:6e:e3:f8:6d:10:98:ca:5c:b4:35:c6:2c:5f:
                    37:93:ad:a3:b6:ff:fc:a5:0f:22:fe:28:8c:c3:4c:
                    18:ba:ef:d3:be:81:27:c9:9d:9c:cc:ba:d7:70:ce:
                    da:ab:99:d1:d6:9e:62:3f:c3:ac:fb:c5:92:36:b6:
                    93:f8:be:ac:73:10:9c:11:0d:cc:2a:ac:97:b7:d9:
                    de:de:72:06:81:31:03:3e:54:43:18:50:2f:7d:3d:
                    e7:63:29:a9:5d:40:ca:87:a9:21:65:81:93:d0:8a:
                    67:e0:cc:e6:d7:3f:97:07:e8:3b:de:8f:a9:f0:15:
                    ae:15:a8:d3:27:b6:28:d2:37:b3:aa:25:3d:2d:e1:
                    eb:6b:dc:25:7d:4e:41:d8:38:c7:65:54:7a:a0:2e:
                    36:6e:e3:5d:a3:cc:5e:f2:38:ab:f7:c3:c2:10:66:
                    14:6c:25:6e:59:10:6c:b0:ca:85:4d:41:1d:85:c1:
                    42:dd:89:2f:48:70:27:c2:a4:1d:82:98:b8:bc:a3:
                    79:c5:7c:fe:0d:ab:18:1f:a0:2e:3e:b2:6a:44:57:
                    bf:7d:11:79:a5:38:fa:bd:67:a8:45:14:97:2d:a8:
                    47:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B3:09:64:3E:AC:FE:F8:8C:AE:4C:7B:C0:BC:58:B2:FC:C8:E5:FD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7c07cca5-9262-43a1-8fb7-dc9913a26d09/4a3d4fdf5d4afff13254531592d21c29a5ad3196.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.233.180.0/22
                IPv6:
                  2803:4d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272038

    Signature Algorithm: sha256WithRSAEncryption
         33:34:0e:af:ba:79:5c:51:e2:34:44:99:e2:9b:8b:f6:eb:f6:
         88:f8:80:65:97:06:b4:c9:0e:c2:47:cf:56:d1:3c:d7:7a:9b:
         37:d8:3a:51:13:42:fc:90:04:c0:11:9f:e6:fd:2f:40:bd:00:
         8f:62:67:83:42:c0:34:38:86:b4:db:7e:fe:ab:65:c0:83:53:
         d2:a5:c4:7c:02:27:0b:2b:05:e1:3d:a6:97:44:98:43:5c:a0:
         20:18:23:6e:be:38:af:c5:f8:5b:19:3f:9f:c6:66:de:16:d5:
         c6:c0:62:43:ee:69:7f:e2:3c:ef:1a:e8:ec:ef:2b:40:44:e3:
         5e:4d:93:c3:55:39:1a:08:2e:6e:82:84:91:15:94:d7:50:5f:
         35:ed:b6:bf:f5:b8:55:21:a3:9b:66:b8:09:9c:72:e6:36:62:
         10:a5:0d:47:02:2a:af:50:c2:bf:a5:5b:7f:aa:d5:b3:32:b6:
         d3:6e:ea:60:c7:69:17:fb:ce:88:9d:72:d4:5b:dc:7a:44:4a:
         1f:a8:1a:01:b0:dd:f1:cd:2b:74:97:72:15:be:53:ce:79:d0:
         df:3c:71:0a:fa:39:b4:da:6c:21:e4:53:88:8a:79:54:6b:a2:
         11:49:9f:15:a4:f1:85:cc:70:fd:bc:69:61:fe:4f:7c:32:9f:
         9b:e4:0b:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----