Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53a84133ecea8791e075c28348a5c7805616cc52.cer
File:                     53a84133ecea8791e075c28348a5c7805616cc52.cer (raw, json)
Hash identifier:          oKmwDnasGyaysz/SMa6jCXHoLcwHArxbs1PXNkW+bmo=
Subject key identifier:   F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCC379
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 02 Apr 2022 13:56:01 +0000
Certificate not after:    Tue 12 Nov 2024 20:27:24 +0000
Subordinate resources:    AS: 272043
                          IP: 131.72.136.0/22
                          IP: 2803:6d10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16565113 (0xfcc379)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  2 13:56:01 2022 GMT
            Not After : Nov 12 20:27:24 2024 GMT
        Subject: CN=53a84133ecea8791e075c28348a5c7805616cc52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:fc:3b:08:f8:ff:b0:d8:48:5c:0c:a1:01:a4:
                    dc:64:27:18:a0:fc:83:19:40:ec:b2:93:af:69:a6:
                    f0:1a:5c:85:60:30:88:30:03:d1:b9:21:8b:bd:aa:
                    3c:37:29:02:b7:97:66:dd:4b:28:84:24:4e:33:54:
                    47:ad:f0:4d:28:2b:08:eb:76:73:23:2c:35:57:0d:
                    fb:7e:fc:be:7d:f5:0a:02:f4:44:79:26:f2:62:a3:
                    e2:8d:65:31:71:57:3a:34:2a:19:b5:58:e8:93:6b:
                    c4:cb:fb:b2:25:f2:49:05:db:b8:ed:41:d8:e6:ba:
                    2e:cd:fe:ac:93:8e:63:9c:59:33:59:d8:a3:a0:77:
                    2d:a1:0c:e3:73:77:a1:ce:4f:3e:d7:56:da:66:0b:
                    54:7a:7e:f7:82:5c:94:e9:6b:14:d9:c3:e1:df:c6:
                    ee:9a:f5:d2:8b:87:bc:bf:91:26:03:56:b6:98:61:
                    b4:5a:dc:0a:ba:8b:c5:b7:a1:62:49:db:18:b5:0c:
                    8f:d8:84:75:60:c8:41:71:3a:47:57:22:68:40:e3:
                    c0:b6:39:1d:41:35:76:61:ac:87:eb:a7:38:8e:0d:
                    70:c9:be:fb:9e:3d:27:c5:c2:fe:1c:01:98:10:e6:
                    c5:77:b3:c7:8c:0e:63:d4:28:26:67:27:5e:55:4a:
                    01:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:CE:25:08:5E:0B:77:74:7C:54:A9:C3:77:59:4F:4C:D7:AD:AC:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d3b3d224-8c50-47a4-886a-013809ff714c/53a84133ecea8791e075c28348a5c7805616cc52.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.136.0/22
                IPv6:
                  2803:6d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272043

    Signature Algorithm: sha256WithRSAEncryption
         0f:2e:9e:f2:f2:ad:a6:d7:2e:10:d6:bb:ff:87:9e:aa:4c:ab:
         76:d5:88:0c:09:cb:4b:36:a6:d4:0d:75:d8:55:32:58:f1:f5:
         3a:f4:71:15:e0:70:0e:eb:fb:90:9e:b7:47:74:53:7e:79:d6:
         3a:d3:6c:33:3d:df:d6:2d:a5:e1:32:5c:8a:35:35:87:89:1d:
         4a:7a:82:df:26:d6:ff:8d:79:96:92:2a:64:7c:17:f9:46:d1:
         cb:26:f1:f3:b8:4b:e2:26:b8:80:26:dd:60:47:20:18:f4:f4:
         b7:4d:90:be:7e:cf:3e:72:6f:06:d8:14:5e:12:f4:8f:ac:2d:
         14:e9:4b:6f:76:6e:3b:05:eb:e6:cc:09:f3:d4:ed:ff:a4:80:
         7a:56:04:10:d7:b6:1a:5a:01:a9:92:88:c7:fb:3e:bb:0a:ed:
         c6:62:53:2f:63:05:36:1b:2d:9c:19:6c:d7:ae:94:4d:3e:82:
         81:24:b2:94:0a:c6:e0:3b:4e:a2:36:26:9b:27:b5:b2:c9:e1:
         c5:62:b1:ca:df:85:ee:c9:5c:98:70:a0:1b:f0:1c:d5:4c:55:
         db:4f:75:66:e7:01:17:99:72:cf:76:ee:e7:15:8a:a2:e0:f6:
         63:ee:9c:7c:b3:ee:23:ab:47:5c:4f:d1:36:36:ba:f9:5d:9e:
         f5:89:a4:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----