Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.cer
File:                     4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.cer (raw, json)
Hash identifier:          xYHqtSK3BSvfRluGUtyXobazMgtHaAOzgHVD5PdN+MI=
Subject key identifier:   5C:AC:AD:23:63:10:C3:A1:6F:81:F7:BB:51:F3:99:AA:62:6A:C1:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA96CE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 Jun 2022 15:06:44 +0000
Certificate not after:    Thu 20 Jun 2024 17:18:16 +0000
Subordinate resources:    AS: 11514
                          IP: 190.111.112.0/21
                          IP: 2800:920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15374030 (0xea96ce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 10 15:06:44 2022 GMT
            Not After : Jun 20 17:18:16 2024 GMT
        Subject: CN=4ccd2caf1c1fdbfb4e89474c29259368c3a9736a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:51:32:01:df:4e:2a:e3:77:aa:e3:77:54:54:
                    58:64:c1:76:d1:93:bd:6c:ff:fe:46:5f:5b:09:2b:
                    24:ce:e3:e8:24:9c:e9:02:cf:41:67:40:93:ed:a2:
                    94:ec:9a:c0:ff:2a:32:09:dd:67:4a:eb:37:53:7f:
                    14:6f:ef:e4:be:2b:25:d3:6a:5b:a1:d7:b4:de:06:
                    ac:0d:40:31:18:c8:85:64:c6:29:68:64:1b:93:1f:
                    d7:7f:69:86:f7:c3:ef:3f:1e:51:eb:89:6f:38:8c:
                    21:51:60:5a:90:45:dd:b5:5b:0a:da:b7:7b:b4:a3:
                    0c:4d:c4:66:21:5c:5a:2f:41:af:fa:1a:5f:ed:cb:
                    a3:61:b9:e4:87:4a:04:31:b3:7f:65:37:a4:87:44:
                    ac:59:bf:32:fa:49:61:6b:32:a8:a9:ce:e5:92:fb:
                    98:ff:cb:8f:31:9e:ee:0d:69:8e:4d:c2:99:65:91:
                    19:cb:e3:c9:29:93:3e:6c:f3:fa:58:fd:0d:be:43:
                    35:f8:b7:93:ca:fb:3f:de:75:32:8a:9c:f3:ca:d7:
                    b1:97:67:13:dc:80:76:ab:58:eb:5a:2d:e7:5e:c3:
                    4b:f0:75:a0:61:b6:4b:bf:3f:f5:26:57:a8:c0:80:
                    a7:c2:07:4d:8f:3b:e0:81:74:9c:28:bd:46:41:c8:
                    dc:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:AC:AD:23:63:10:C3:A1:6F:81:F7:BB:51:F3:99:AA:62:6A:C1:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a4082bf-5f59-43f3-ae50-e18e580706cb/4ccd2caf1c1fdbfb4e89474c29259368c3a9736a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.111.112.0/21
                IPv6:
                  2800:920::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11514

    Signature Algorithm: sha256WithRSAEncryption
         4d:e4:62:df:79:46:b9:a6:f6:27:9d:c3:88:5b:7e:57:b2:b7:
         53:83:46:b9:d5:33:e8:d6:f7:30:23:f6:6f:a0:08:73:e2:30:
         9c:67:4e:57:21:9b:3f:46:64:f1:c9:f3:f8:97:51:c8:20:89:
         e8:67:51:2a:f0:ac:a2:08:06:c1:62:08:9a:24:aa:a1:eb:e1:
         40:10:77:78:d2:c8:a0:3e:4e:b8:c5:37:df:a8:56:ba:4a:21:
         a2:66:5d:37:e1:bb:0e:a6:ea:6a:09:b9:29:92:5b:8f:59:98:
         a7:0e:aa:fc:dc:5d:bb:61:33:d3:96:f2:bf:cb:3c:c6:aa:f6:
         cb:1d:6d:ac:97:33:73:ca:e0:ea:60:a1:62:2a:70:94:8c:56:
         5f:1b:29:40:53:f6:a6:9c:04:2d:79:f1:2d:33:08:06:02:f7:
         93:8d:f2:a5:f0:67:bb:52:d4:bf:ed:ec:f5:6f:d6:cd:29:3d:
         0c:09:68:08:91:d9:5b:c0:3e:1a:93:14:e4:b8:23:0a:92:e0:
         c7:07:60:83:1d:8e:67:b8:13:84:95:83:5b:6d:96:d5:6b:c4:
         1a:7b:4e:77:a7:3a:5d:5c:4c:c3:ac:b5:30:0e:d0:d7:03:e2:
         cd:9b:b0:68:5b:a6:c8:6f:91:07:a4:4a:c1:e3:c1:4c:f3:d7:
         d7:3e:10:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----