Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/51cc36a73e0bbe2b338c61fa1df595670735aa98.cer
File:                     51cc36a73e0bbe2b338c61fa1df595670735aa98.cer (raw, json)
Hash identifier:          0hi7mS1VXHntp66AOg4NEY0Afl11QI3yWhouLL5j+7k=
Subject key identifier:   9D:83:6B:D4:65:8F:74:C8:F7:10:6A:FE:03:A6:FD:62:01:88:BF:46
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D41FB3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/51cc36a73e0bbe2b338c61fa1df595670735aa98.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Oct 2022 23:17:46 +0000
Certificate not after:    Thu 02 May 2024 06:00:00 +0000
Subordinate resources:    AS: 19422
                          IP: 152.156.0.0/16
                          IP: 186.8.0.0/16
                          IP: 200.58.128.0/19
                          IP: 2800:840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13901747 (0xd41fb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 23:17:46 2022 GMT
            Not After : May  2 06:00:00 2024 GMT
        Subject: CN=51cc36a73e0bbe2b338c61fa1df595670735aa98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:84:eb:35:f5:55:02:87:12:16:3c:32:0b:ac:
                    79:be:71:05:a9:7c:1f:76:3a:f3:8d:4d:fd:e0:a2:
                    35:16:4a:4d:2b:53:a1:37:bc:ff:d4:17:9c:ca:c4:
                    f9:0b:a5:b0:84:96:97:f6:c7:c6:b6:29:c6:15:5a:
                    41:c2:fd:54:b1:7f:e5:9c:73:10:59:7f:fc:96:1d:
                    7e:fd:48:ab:b5:d7:93:88:f8:0d:4f:77:18:85:1c:
                    94:06:0f:3c:e7:87:ce:67:9a:02:0f:f8:42:0a:67:
                    54:cc:62:7a:92:f1:b4:9f:96:ee:57:6e:d5:61:58:
                    2d:21:35:ad:e2:6e:68:96:ee:49:52:d7:ae:84:88:
                    bd:9f:f4:97:36:01:ef:87:b4:b3:93:dd:b8:aa:c7:
                    db:95:16:f0:91:b4:76:e6:2a:5e:c7:6f:ac:30:7c:
                    32:c1:36:61:75:84:e5:2f:41:f7:37:d6:4d:ff:9c:
                    d6:f7:a7:15:8a:ae:dd:f2:44:78:9a:a5:f4:17:ba:
                    55:8e:a1:f7:8e:97:6c:86:9b:ca:86:25:69:79:55:
                    ec:98:e8:cd:88:ce:30:01:1f:19:63:22:42:3c:1d:
                    b6:49:2b:75:f8:58:de:bf:9d:68:a1:23:fb:2f:41:
                    7b:e0:ce:db:b1:2c:a9:48:9e:fe:49:cc:51:87:50:
                    a5:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:83:6B:D4:65:8F:74:C8:F7:10:6A:FE:03:A6:FD:62:01:88:BF:46
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dd3e3fed-93ed-4e6b-98b0-cd4dcf6317d1/51cc36a73e0bbe2b338c61fa1df595670735aa98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.156.0.0/16
                  186.8.0.0/16
                  200.58.128.0/19
                IPv6:
                  2800:840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19422

    Signature Algorithm: sha256WithRSAEncryption
         0a:9d:25:3b:97:47:52:8e:75:de:49:93:09:39:17:dc:fc:e5:
         bd:ac:69:00:89:c3:fe:d7:bb:0d:05:35:28:81:08:6d:bb:7a:
         99:38:62:33:67:5d:81:80:a0:5a:2d:c2:ca:f2:17:d6:7a:db:
         16:ca:af:d8:fd:bc:b5:de:46:fa:ba:4e:99:c0:7c:5a:90:42:
         61:33:27:bc:6d:25:99:1d:f0:0a:6f:5f:5e:36:d5:90:f9:04:
         bb:fe:04:fa:b0:24:9f:4e:1a:fc:6f:27:6a:ee:76:34:e2:cb:
         dc:2a:cb:5d:80:19:2e:8b:d4:e3:9d:d8:55:d2:9a:31:93:64:
         9e:d8:93:8f:1f:ec:a2:25:ff:03:a2:b4:7b:b9:53:b4:b2:4f:
         26:f1:25:37:a9:03:22:5b:f9:72:57:f9:91:71:ce:ae:22:eb:
         8e:fd:5c:34:ff:f0:51:b0:cd:4f:ce:50:96:75:44:b4:91:d0:
         52:8c:9f:cb:52:ea:94:68:26:bd:1f:6b:9e:5a:f5:35:ab:11:
         1f:ff:60:2d:71:dd:d2:c7:33:05:d4:36:bd:43:13:33:ca:f2:
         5c:49:10:6b:a9:0c:54:8e:e9:d4:7c:e8:3b:6b:bf:67:4f:8c:
         5a:40:8e:9e:8f:07:0a:2d:07:b3:f6:74:0d:20:ad:df:0f:f9:
         53:b6:a2:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----