Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5842a35efb02d60e07426e0d03b3de78f9d908db.cer
File:                     5842a35efb02d60e07426e0d03b3de78f9d908db.cer (raw, json)
Hash identifier:          SaAkRF9BwpGR9YRNJzOMgVoN1q91yh5lvU4imLEi6sY=
Subject key identifier:   ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D78398
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 Mar 2021 19:23:57 +0000
Certificate not after:    Mon 18 Dec 2023 20:27:54 +0000
Subordinate resources:    AS: 264769
                          AS: 265704
                          AS: 267720
                          IP: 138.36.220.0/22
                          IP: 168.181.176.0/22
                          IP: 2803:cf80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14123928 (0xd78398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 10 19:23:57 2021 GMT
            Not After : Dec 18 20:27:54 2023 GMT
        Subject: CN=5842a35efb02d60e07426e0d03b3de78f9d908db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:88:16:af:b9:24:10:1f:30:1a:2b:49:44:d1:
                    c4:21:b2:7f:a8:49:b0:75:3e:f3:bc:03:e1:43:30:
                    e3:a8:f7:e7:73:c8:4f:d1:30:60:2c:cb:bf:22:60:
                    e2:60:84:f3:e1:92:c8:7f:90:a5:c6:66:a5:7d:5c:
                    19:1a:7f:b4:8b:ae:77:56:30:09:b6:66:bb:cd:23:
                    87:ac:87:2c:75:76:51:74:fc:2f:a8:29:39:70:6b:
                    f9:18:8c:c9:88:9a:d7:7f:4b:50:91:89:8f:4e:f7:
                    0b:df:79:79:18:8e:9d:94:10:83:21:b1:da:fa:c0:
                    49:5c:d9:7d:58:29:f7:a4:40:bf:11:f3:0f:fa:61:
                    b6:eb:5d:41:19:5e:b0:aa:67:b7:08:5a:d0:e5:f3:
                    2d:00:20:37:ef:c6:31:f4:72:d6:3f:51:bd:44:6f:
                    2c:c2:a4:60:e4:c1:6c:89:d8:36:01:b0:77:e4:a4:
                    5a:c2:9f:fa:6b:f4:ac:7f:0c:2f:e9:dd:5d:c7:d0:
                    5c:22:7c:2e:bc:4a:9a:b8:e4:3b:d2:01:e6:ca:dc:
                    a8:08:8b:b0:89:b9:75:b2:82:15:e1:17:f2:75:a8:
                    c7:28:55:e7:fb:f0:22:a1:c4:62:98:56:09:17:7d:
                    1f:ef:17:15:aa:f6:f0:4b:88:09:d3:20:63:67:e1:
                    03:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8B:CA:8A:42:45:08:D7:40:0B:74:41:B1:45:0A:49:10:D8:6E:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f626fd-da9a-4119-b860-c13de47f8be1/5842a35efb02d60e07426e0d03b3de78f9d908db.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.220.0/22
                  168.181.176.0/22
                IPv6:
                  2803:cf80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264769
                  265704
                  267720

    Signature Algorithm: sha256WithRSAEncryption
         39:90:38:d8:49:05:b8:3e:ea:fc:53:cf:f8:7f:2a:b4:e8:20:
         22:b8:54:b5:9d:b5:b3:cd:dc:1d:bc:9a:93:26:35:f8:19:3c:
         9b:d3:31:a2:21:03:75:81:db:08:d9:8b:85:75:78:be:72:11:
         3b:ef:d4:6a:ed:e8:f7:bd:2a:dc:e5:7b:38:f1:1c:29:4b:68:
         58:ce:13:ba:b4:2c:da:0a:3d:9c:93:1f:29:60:e3:ae:fb:ed:
         42:3f:8a:bb:60:7f:3c:29:0d:79:24:42:99:a0:eb:69:e2:33:
         e0:8b:83:09:5e:44:0a:51:09:d6:4c:e0:4e:c7:bb:f1:ff:db:
         0a:30:79:c6:d8:23:be:33:8e:2d:1b:dd:3a:49:03:36:a8:91:
         76:69:4a:89:15:6f:5a:99:02:15:d5:04:d1:ed:10:ae:62:ce:
         e6:dc:b0:00:38:af:61:31:9c:26:1d:56:15:09:02:43:b4:7e:
         8e:4b:e7:43:0f:ed:a3:28:3f:8f:1f:b6:ea:77:8d:fd:da:0b:
         f9:3c:7c:df:4a:d3:7d:1c:7e:0f:6c:1d:45:57:65:5c:bb:5f:
         56:49:fe:03:21:49:c2:df:1f:96:e9:35:80:68:45:7e:d5:0a:
         4c:4b:88:f0:c2:ae:bb:0a:18:e3:31:49:c1:6a:96:f3:61:95:
         83:65:62:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----