Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4da24f95f9e14009eadf64141dc9a803fece4656.cer
File:                     4da24f95f9e14009eadf64141dc9a803fece4656.cer (raw, json)
Hash identifier:          XpshXbTeYJcnTJoDSvlVj23gS8DivSgH/ZjbvE6Fcuo=
Subject key identifier:   03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB429B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 21 May 2021 20:48:57 +0000
Certificate not after:    Sun 04 Feb 2024 21:49:07 +0000
Subordinate resources:    AS: 267822
                          IP: 45.173.212.0/22
                          IP: 2803:e860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14369435 (0xdb429b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 21 20:48:57 2021 GMT
            Not After : Feb  4 21:49:07 2024 GMT
        Subject: CN=4da24f95f9e14009eadf64141dc9a803fece4656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ec:be:d3:c9:34:39:87:a1:00:36:99:ef:0b:
                    9c:9b:8d:3f:9b:8d:58:2c:39:95:78:dc:a7:5a:f5:
                    a5:e0:20:bd:a3:1e:80:1e:79:da:2a:dd:46:bc:40:
                    71:33:cb:d2:07:18:a1:e9:59:89:df:3b:49:b4:d8:
                    1e:ba:d5:62:4b:af:65:60:96:3d:61:c9:fb:73:43:
                    67:96:2e:77:eb:53:dd:ce:9f:ee:cc:8b:c1:bc:0e:
                    39:50:bf:7e:88:98:7f:f0:e0:89:62:6d:91:bf:39:
                    77:b3:af:4a:f2:fc:3f:86:8f:53:8f:7a:b4:7c:fa:
                    5b:9e:45:e9:d9:b7:db:69:5b:3d:1d:23:12:be:50:
                    36:a5:64:08:3e:df:f6:0e:51:a3:7b:5b:ef:32:f5:
                    8e:92:f5:41:48:04:65:8c:6a:24:a0:27:2a:eb:9d:
                    12:60:7b:f7:fe:7d:f1:70:ed:39:82:2b:aa:22:8e:
                    f4:2d:e4:72:3e:01:6c:b6:ad:45:7b:bf:7e:12:c7:
                    22:7c:89:d4:53:fa:e4:7a:d4:33:b6:b5:f2:9a:79:
                    c4:53:db:99:d5:44:71:ba:19:80:2d:a2:2b:b7:e6:
                    c9:e3:6d:15:8b:3d:92:6f:3d:21:0e:d4:d4:bc:f9:
                    1b:3a:78:62:24:83:6a:d0:69:9b:6c:ec:06:88:2f:
                    65:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:1E:4E:7D:08:6D:12:2E:55:02:C5:99:53:92:85:D1:D1:14:CC:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ed3239a3-c6a1-4dfb-bd3a-cc2f5b637bcc/4da24f95f9e14009eadf64141dc9a803fece4656.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.212.0/22
                IPv6:
                  2803:e860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267822

    Signature Algorithm: sha256WithRSAEncryption
         5a:fb:09:0a:17:1c:5b:9c:2c:b1:ae:82:d5:05:d1:84:6f:2b:
         9c:13:3d:d0:f2:4c:ef:14:6d:de:65:6d:8e:6f:db:33:c8:e2:
         78:f8:b8:66:00:e1:63:ea:ce:7d:e0:49:2b:ae:35:40:2b:4e:
         f6:d8:b8:84:d1:9e:0b:7c:46:68:81:11:3d:c9:21:65:db:90:
         a7:4d:45:ce:f4:38:ea:d1:dc:ae:8e:04:e5:e7:6b:d3:8a:6f:
         53:4b:42:7f:94:a5:b5:5e:fe:b5:5d:55:7f:45:e3:a0:90:e7:
         66:7f:17:d8:36:b1:1c:8a:a8:b1:b5:83:c5:39:68:39:9e:e9:
         d9:a6:95:76:af:78:27:e6:57:88:5e:75:11:37:c9:4d:77:b5:
         3a:2b:ab:1d:52:eb:d0:ea:5a:51:86:74:bc:5e:96:61:a9:c4:
         e8:64:ad:ca:63:b2:87:af:d2:83:61:7c:ca:a8:e4:ef:d0:86:
         f8:ef:50:c6:d5:ea:e7:9c:bf:81:11:35:70:cc:a9:08:e3:00:
         ae:45:81:8a:a4:34:f6:9d:94:9b:65:44:57:0d:9b:67:ec:26:
         7b:be:d1:9b:b4:3c:66:f4:09:06:11:4d:16:7c:e2:b3:1d:57:
         2f:3a:38:29:00:a9:12:c2:11:1d:dc:aa:78:f4:5d:e0:22:be:
         9a:08:2f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----