Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/57137d1591db2acf97736badaf89ae65b4e8f1b3.cer
File:                     57137d1591db2acf97736badaf89ae65b4e8f1b3.cer (raw, json)
Hash identifier:          AV2Da/8c6BAfWy52MrFpe3SdvNjWhVneqv191UEDLT4=
Subject key identifier:   90:C2:6D:32:7B:8F:AE:E3:81:3F:CB:A9:6A:0E:6F:89:A3:C1:79:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CD591A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4064db64-ec6a-4593-8989-5851620848be/57137d1591db2acf97736badaf89ae65b4e8f1b3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4064db64-ec6a-4593-8989-5851620848be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Jul 2022 17:21:35 +0000
Certificate not after:    Sat 27 Apr 2024 21:11:50 +0000
Subordinate resources:    AS: 263771
                          IP: 200.71.112.0/22
                          IP: 2803:3980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13457690 (0xcd591a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 18 17:21:35 2022 GMT
            Not After : Apr 27 21:11:50 2024 GMT
        Subject: CN=57137d1591db2acf97736badaf89ae65b4e8f1b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:99:5e:b7:cc:6d:05:c6:a8:d9:5b:32:76:71:
                    2d:28:6f:ec:d0:43:fc:cb:51:2b:91:1f:17:eb:e7:
                    76:c5:55:b0:88:4e:d3:31:ae:70:dd:b5:ce:f7:0e:
                    cc:f8:1c:c3:92:93:09:f0:14:82:c1:d8:bc:3f:37:
                    72:86:94:71:b0:61:e9:5c:7b:17:7f:bc:c7:9b:67:
                    6f:30:b9:e5:31:5d:30:42:f4:18:ba:90:6e:4e:a1:
                    f2:c3:13:fa:dd:40:86:d0:21:bc:78:84:3e:26:ef:
                    d5:28:2e:a4:e7:25:0e:35:8b:9f:2c:77:0d:00:ef:
                    65:e4:c0:bb:8e:4b:54:b0:a8:6c:da:75:80:c4:1a:
                    d1:ae:29:48:69:80:2f:76:b3:65:b2:e3:7c:12:39:
                    8a:70:34:99:a0:7f:c3:a1:a7:d1:9a:28:36:6a:e1:
                    a6:78:77:b2:e1:73:63:16:9e:38:1e:9d:7e:6e:35:
                    01:5a:2a:7b:55:b6:49:7c:61:06:af:45:4e:30:74:
                    44:da:42:50:09:4b:35:88:47:2d:bc:c9:3c:d3:b2:
                    f7:1b:c0:1a:1e:fe:1f:7a:38:7c:31:8b:b2:10:f2:
                    7d:f6:a4:7c:93:b7:ba:c8:a0:e4:f7:b5:13:2b:0b:
                    1e:22:36:26:5f:62:3b:31:86:17:9a:75:55:d8:c6:
                    7d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:C2:6D:32:7B:8F:AE:E3:81:3F:CB:A9:6A:0E:6F:89:A3:C1:79:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4064db64-ec6a-4593-8989-5851620848be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4064db64-ec6a-4593-8989-5851620848be/57137d1591db2acf97736badaf89ae65b4e8f1b3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.71.112.0/22
                IPv6:
                  2803:3980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263771

    Signature Algorithm: sha256WithRSAEncryption
         48:19:77:05:0f:1a:9d:fd:80:27:5f:a4:1a:be:3b:5e:48:c3:
         f2:1b:55:62:f6:e4:b1:c4:91:1b:88:e4:d5:38:f4:3f:dc:b7:
         90:6e:a4:05:ca:b3:17:8e:38:c9:77:ad:ac:2b:53:b3:08:5c:
         fb:ef:d2:e2:95:43:55:19:fa:99:da:1c:d5:4b:44:f8:19:ff:
         fd:31:0e:9c:ca:5a:ab:ae:c4:81:87:c1:d3:80:11:4c:76:9f:
         d0:29:e6:e4:cd:c5:e3:42:4f:be:22:a1:26:62:44:93:d8:e2:
         c1:f2:48:b9:47:5a:bd:71:71:47:9b:19:4a:0c:6b:bb:27:51:
         55:ab:ca:f8:86:3d:c6:a6:45:be:19:ed:ca:a4:cf:19:b9:41:
         3c:a9:bd:21:cc:a5:82:ab:e6:26:57:4a:5c:39:40:4e:64:a9:
         85:9b:dc:62:a9:76:be:dc:c0:48:01:4a:33:58:3e:91:d0:e0:
         2e:ba:08:5c:04:c2:57:0f:bb:c5:93:9b:ff:01:b5:78:0d:59:
         22:c0:2e:98:33:66:24:b4:9b:2d:3d:a4:b3:c5:4e:24:42:5d:
         09:29:ef:39:48:c2:05:14:e0:f8:8c:06:fb:20:05:49:28:7c:
         f0:9a:25:a7:1f:3e:67:6f:cf:bb:b0:4d:e9:96:0f:02:bf:5e:
         9f:44:49:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----