Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e59ab85356d25d04ce88952ed51cf85fdedace6.cer
File:                     4e59ab85356d25d04ce88952ed51cf85fdedace6.cer (raw, json)
Hash identifier:          l5XI58IS6G8MEVyZWPwwNQdEnxn0SPTL/fQ/cHQkRVE=
Subject key identifier:   C2:CF:29:05:77:4E:F7:C1:04:16:37:C3:5F:1A:CD:97:1C:CB:55:2A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1F7AF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/4e59ab85356d25d04ce88952ed51cf85fdedace6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Aug 2021 17:08:38 +0000
Certificate not after:    Fri 16 Aug 2024 21:45:05 +0000
Subordinate resources:    AS: 264622
                          IP: 143.137.244.0/22
                          IP: 2803:140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15857583 (0xf1f7af)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 25 17:08:38 2021 GMT
            Not After : Aug 16 21:45:05 2024 GMT
        Subject: CN=4e59ab85356d25d04ce88952ed51cf85fdedace6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:ee:7c:11:af:f1:00:45:30:db:fc:fe:29:12:
                    8a:4c:b6:c5:d0:78:0f:1b:c5:16:4e:f9:ca:22:5a:
                    d6:93:a0:b8:3d:25:63:11:85:46:9a:43:f0:56:1d:
                    f4:b6:c1:df:29:d6:e6:36:81:c5:40:00:11:9f:a1:
                    ce:5b:27:59:43:22:e8:85:03:74:11:ad:da:17:4a:
                    e4:e2:b3:46:46:28:81:eb:c6:73:39:36:99:3f:40:
                    71:83:d4:52:cd:91:2b:de:89:5d:ca:12:7a:b1:05:
                    54:f6:a7:46:dc:dc:df:cc:67:bc:cc:62:49:0a:3f:
                    04:03:05:a4:4d:d3:6d:17:f5:48:ac:22:2b:07:11:
                    03:08:0f:88:1f:65:91:96:1d:49:7e:54:64:72:2b:
                    32:a1:08:b6:86:46:47:9d:ed:42:f9:ff:8d:a0:2e:
                    d5:fb:3e:e9:89:2e:22:43:b1:be:08:87:ec:b8:9d:
                    b0:d0:08:17:57:67:16:3a:6d:2d:a0:68:f0:db:1e:
                    7d:e0:8f:25:c1:f0:f9:34:21:81:f1:5d:77:7b:0e:
                    95:4f:d9:37:de:63:98:70:e9:6d:4f:87:1c:17:37:
                    8b:60:8f:f1:24:94:a9:e6:d6:38:c2:bf:be:b6:37:
                    c8:b5:e8:8b:7f:d1:89:35:a4:53:86:17:e6:a9:d2:
                    d8:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CF:29:05:77:4E:F7:C1:04:16:37:C3:5F:1A:CD:97:1C:CB:55:2A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/87339146-20c3-42dd-9546-dcb353dbc985/4e59ab85356d25d04ce88952ed51cf85fdedace6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.244.0/22
                IPv6:
                  2803:140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264622

    Signature Algorithm: sha256WithRSAEncryption
         9f:91:46:07:86:0d:81:7b:9a:3c:36:45:c8:65:05:4e:3b:df:
         7a:b5:25:4a:74:e3:86:1d:59:aa:dc:64:66:92:4b:c4:56:d8:
         c3:8c:26:11:81:df:46:24:3b:11:9c:47:9e:b1:3e:42:12:27:
         2b:60:21:93:53:18:d8:9b:b1:d1:f7:30:ef:a9:78:19:dc:8c:
         4e:d1:d1:cf:7b:40:cd:42:8c:00:c1:34:90:13:24:94:5e:db:
         84:ac:63:ed:2f:1e:9a:47:c4:14:12:4c:2f:2e:64:1e:f0:28:
         77:5b:ab:e2:2b:e2:16:a6:e6:c9:84:3d:13:c5:b3:6e:5e:ed:
         fc:d4:5b:6a:01:be:d9:6c:33:7f:50:05:dc:8f:9c:70:00:f8:
         ca:7f:00:da:6f:7d:55:70:ec:84:d0:af:9b:fc:a0:10:6e:8a:
         aa:fc:f0:6e:49:d6:f8:6b:7b:bf:d7:5b:ad:c7:48:10:48:c0:
         c4:6b:b6:c7:e6:30:73:60:01:7b:d4:9c:2b:38:25:b0:0d:ff:
         94:86:06:b5:2b:63:4b:66:55:8b:fc:46:42:0b:cc:32:56:8e:
         fb:5c:d3:16:61:c0:46:6b:4a:a3:82:e8:ee:a7:91:16:b8:77:
         9e:3f:fa:ff:3c:0d:13:3a:a1:66:c5:fc:67:c4:71:10:63:06:
         7a:dc:21:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----