Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f343c34fa23e59fd7022db09a5ab3945ca466f5.cer
File:                     4f343c34fa23e59fd7022db09a5ab3945ca466f5.cer (raw, json)
Hash identifier:          W2atAOU4PmhTnIDP9fSZDKbtpmse/1OD4xgBxtz4G4E=
Subject key identifier:   3B:30:DE:D3:4E:09:13:BE:61:78:37:44:92:8B:ED:6D:C6:D1:5B:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D88CF3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b434b08b-1452-4708-bf72-af86ac948edc/4f343c34fa23e59fd7022db09a5ab3945ca466f5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b434b08b-1452-4708-bf72-af86ac948edc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 Nov 2022 17:31:31 +0000
Certificate not after:    Fri 15 Mar 2024 17:58:39 +0000
Subordinate resources:    AS: 265717
                          IP: 160.238.244.0/22
                          IP: 2803:75c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14191859 (0xd88cf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 30 17:31:31 2022 GMT
            Not After : Mar 15 17:58:39 2024 GMT
        Subject: CN=4f343c34fa23e59fd7022db09a5ab3945ca466f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:58:14:75:89:71:fa:74:73:6f:c4:d8:51:f0:
                    c5:6a:3a:69:8c:70:bc:10:d4:e5:23:03:67:62:79:
                    41:5b:a9:68:bf:3e:be:c5:f5:c8:b3:90:fe:26:51:
                    2a:b7:cf:23:87:35:96:4a:c9:cd:78:54:5b:96:77:
                    2a:2d:29:b7:2e:94:f8:5a:01:c6:6f:3c:3c:16:37:
                    b4:12:94:78:64:98:36:5e:ba:8c:19:81:d3:02:97:
                    5f:e1:fa:4b:25:66:03:18:00:bd:c5:4a:05:0b:5a:
                    4c:9e:a1:a6:8e:fe:79:9d:ad:c7:cc:53:1d:af:89:
                    67:b9:5c:21:3f:60:02:02:b6:c4:e3:f9:be:df:fe:
                    52:e3:b0:34:f2:30:eb:39:1b:53:88:1b:22:05:f3:
                    b9:d7:75:b2:99:07:ab:9f:c2:ea:a3:a3:a7:d8:44:
                    d8:13:fb:fb:fe:66:0e:28:07:bb:18:ce:fd:1d:a7:
                    55:73:89:a6:9b:c7:45:86:0e:15:50:94:96:8c:52:
                    35:49:62:da:8c:a6:bc:37:43:a7:fd:92:f1:fa:0a:
                    59:0e:3c:ba:2f:d9:fe:c5:0c:ed:9f:ab:0b:1a:ca:
                    f3:2d:5f:11:27:9f:e7:58:5b:10:1e:58:48:9d:0d:
                    5e:a2:78:d6:84:56:1c:df:df:f3:fb:96:70:85:ab:
                    ca:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:30:DE:D3:4E:09:13:BE:61:78:37:44:92:8B:ED:6D:C6:D1:5B:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b434b08b-1452-4708-bf72-af86ac948edc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b434b08b-1452-4708-bf72-af86ac948edc/4f343c34fa23e59fd7022db09a5ab3945ca466f5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.238.244.0/22
                IPv6:
                  2803:75c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265717

    Signature Algorithm: sha256WithRSAEncryption
         42:17:b5:17:35:ce:d1:6a:36:97:71:29:26:a6:4e:80:43:b8:
         37:dd:fe:c6:47:c2:09:db:3c:bb:e6:6b:50:9e:ae:16:1b:9b:
         44:7c:34:60:d3:b3:01:a5:e4:ce:d6:df:35:ed:e1:e2:6c:86:
         8d:22:e1:7f:c3:bd:0d:03:9d:84:01:68:76:ae:84:13:3e:dd:
         d2:85:f9:12:b4:16:d0:66:11:5b:bb:ce:f0:bc:f3:08:63:ef:
         c8:94:9f:f5:79:fc:41:95:df:d6:2c:07:da:14:9f:d4:0f:66:
         f1:6c:d3:4b:87:36:8d:ac:09:92:b6:48:92:01:c7:bf:2f:1e:
         8e:4a:e5:cd:98:98:8d:c7:9a:5e:17:98:ea:54:e8:b7:ac:03:
         db:b4:81:af:04:19:74:18:05:13:81:92:a8:fe:91:6c:05:ac:
         ad:86:d8:ee:24:7f:6e:75:81:67:5a:48:ff:33:be:b8:2d:a0:
         a7:21:8c:78:4e:0c:0c:8f:39:fc:76:e8:34:58:80:5d:a4:b8:
         92:62:3e:34:3d:67:dd:47:36:c2:c2:e5:9f:17:01:1d:09:32:
         a0:48:81:90:f3:29:21:76:ed:d7:f3:c7:a8:a0:75:96:50:1b:
         d0:5b:3e:37:ce:8a:22:0c:e1:31:b7:81:af:04:b6:4a:45:00:
         e4:69:5c:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----