Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.cer
File:                     4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.cer (raw, json)
Hash identifier:          ts7+30NRy2Toq8sR81FOgCbJ2dY6IWuxp3ApER0VIIg=
Subject key identifier:   DD:04:C7:59:99:C6:77:29:62:60:0E:C2:01:3D:94:4B:8E:1D:5B:62
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA200C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 20 Feb 2022 02:32:44 +0000
Certificate not after:    Mon 18 Dec 2023 03:52:02 +0000
Subordinate resources:    IP: 201.77.96.0/22
                          IP: 2806:3a8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14295052 (0xda200c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 20 02:32:44 2022 GMT
            Not After : Dec 18 03:52:02 2023 GMT
        Subject: CN=4a3da061670e8a3ce2d2ac68cbe5d12acead8eca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:01:db:e9:c3:2d:19:8f:78:63:27:06:99:0b:
                    fb:ba:05:81:e4:69:7a:3f:37:44:ff:e2:0e:11:5c:
                    d4:cd:98:36:7f:91:44:77:60:67:fe:97:e8:65:11:
                    45:3f:91:0c:bf:db:e2:f6:7c:e8:de:c1:e9:96:8c:
                    a3:d9:19:52:4b:7b:9c:eb:7c:92:0d:11:68:e6:20:
                    c9:77:09:03:47:6a:f6:38:6b:bb:13:70:43:23:85:
                    4b:9d:3a:06:76:ac:0c:7c:c3:37:f1:fa:07:9a:3a:
                    e5:31:d2:fa:35:31:c3:64:cb:05:fd:ff:69:15:73:
                    9e:fe:da:cd:59:c8:8a:ee:94:c4:c6:9e:2b:39:9c:
                    6f:f0:22:24:33:65:ba:23:8e:38:53:95:eb:c5:51:
                    2b:78:88:90:25:0a:e2:5a:43:e5:69:52:3c:71:d2:
                    87:af:6f:83:33:a4:59:0d:c6:cb:c3:3b:08:96:1e:
                    de:7d:35:92:48:a0:4b:ce:79:c4:fc:3f:ec:1a:5c:
                    16:97:5a:1e:c4:41:92:20:e4:6c:3b:fb:cb:cc:80:
                    ed:70:18:29:b0:60:59:e7:25:f7:45:06:fb:9b:40:
                    2d:86:10:36:fd:f3:ea:9b:a7:d2:e1:21:e9:c9:b7:
                    4d:e8:df:94:66:66:db:48:49:bc:e3:89:dd:81:b1:
                    15:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:04:C7:59:99:C6:77:29:62:60:0E:C2:01:3D:94:4B:8E:1D:5B:62
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/24b64913-3f22-450b-888d-a02758dfa3a2/4a3da061670e8a3ce2d2ac68cbe5d12acead8eca.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.77.96.0/22
                IPv6:
                  2806:3a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:da:b1:3a:7c:26:e1:e0:91:1d:ce:42:ca:98:0d:c6:c2:09:
         7e:bd:c2:38:88:19:ba:d6:b4:d5:bc:7b:5a:1c:96:e8:af:c6:
         92:18:04:01:94:67:2d:49:b8:b2:f2:da:28:d8:b1:17:5a:0a:
         6e:36:db:68:fb:3e:d4:c3:18:17:94:aa:8a:7c:43:9e:db:23:
         6a:72:ca:26:a1:c3:bd:0d:0a:07:f2:8d:9f:08:e3:d0:60:d1:
         96:e9:bb:d6:52:9d:15:da:3e:f4:ac:0d:79:b4:56:8c:27:63:
         c8:91:9c:0d:4f:4c:df:aa:27:7c:06:52:e6:25:f8:6a:f9:1e:
         f2:1e:ee:15:0e:38:28:23:d6:78:ea:f4:8c:12:bf:8a:88:31:
         7e:72:e5:4f:29:86:83:13:94:4a:d1:4d:5d:36:4c:6a:c6:0c:
         24:d6:13:1b:44:6e:af:33:3e:de:d0:61:92:eb:5f:7e:23:ff:
         35:43:c7:a0:2f:92:78:db:d5:f9:0c:19:c5:d0:43:77:69:25:
         25:27:13:74:d9:f5:24:c0:3d:55:de:6f:48:d9:d2:81:d0:90:
         44:e8:b4:0f:30:db:6a:8d:df:b9:96:3a:81:38:0a:10:d3:a9:
         e7:b1:36:f3:a6:fe:9f:69:71:f5:bb:a9:c7:d6:98:c3:ea:c2:
         2c:fb:88:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----