Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.cer
File:                     595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.cer (raw, json)
Hash identifier:          JHqf+Kd3HcO84oefjdHEltvHK0eMkujKStpUHwJd2jI=
Subject key identifier:   23:B9:89:AB:67:D1:02:B2:2C:3D:8E:C6:E1:C3:78:13:43:E4:99:63
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC2962
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 18 Aug 2021 23:39:34 +0000
Certificate not after:    Fri 16 Feb 2024 13:56:02 +0000
Subordinate resources:    AS: 266774
                          IP: 45.235.40.0/22
                          IP: 2803:ef20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14428514 (0xdc2962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 18 23:39:34 2021 GMT
            Not After : Feb 16 13:56:02 2024 GMT
        Subject: CN=595b6f21d80ffe65425eaf4b36e8f5af2f3312b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:e5:14:b4:f7:b6:82:e1:c3:50:38:8a:a1:fa:
                    f6:57:73:55:c8:28:37:57:6f:80:23:90:40:e3:62:
                    17:94:96:53:cb:23:fd:31:6e:b9:b2:f5:4e:84:5b:
                    dc:a2:30:20:cc:86:9d:a1:4c:d9:22:a1:22:f7:48:
                    e6:60:38:86:81:ef:76:81:1f:bb:d9:37:12:98:15:
                    c5:be:d0:a5:11:dc:41:2e:fc:2b:e4:8b:10:77:3f:
                    89:e9:77:af:34:87:69:a1:4a:68:2a:b9:fc:29:42:
                    67:88:63:4f:67:1f:bd:03:4e:1a:f8:13:3a:6a:bd:
                    77:4b:21:1f:65:b0:7f:74:ce:68:4e:b3:5f:c3:5a:
                    f5:13:bc:25:92:c7:2c:ff:9e:65:fa:fc:78:f6:31:
                    d7:99:33:f6:dc:b3:ff:74:90:7d:d3:8c:2b:3e:a8:
                    48:77:86:1a:fd:6b:a7:b3:3f:d7:50:63:f7:6f:6e:
                    46:12:07:fb:5c:1a:1c:cf:f4:42:15:25:74:43:23:
                    ad:1c:07:e9:25:9e:83:0b:cf:52:e7:a4:e7:36:a7:
                    a9:f6:66:8b:ad:ea:40:d0:a4:24:b5:5b:71:e5:40:
                    14:f8:3d:e3:f1:89:27:0b:8a:3d:96:4c:b5:67:20:
                    61:9e:69:ed:8d:4f:4c:c3:c7:1d:32:21:c2:ac:b8:
                    76:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:B9:89:AB:67:D1:02:B2:2C:3D:8E:C6:E1:C3:78:13:43:E4:99:63
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50a38f3b-e2b7-4d2f-b600-d2b291ae493b/595b6f21d80ffe65425eaf4b36e8f5af2f3312b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.40.0/22
                IPv6:
                  2803:ef20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266774

    Signature Algorithm: sha256WithRSAEncryption
         61:06:9e:dc:43:c9:79:73:81:5a:6b:a3:60:51:57:de:28:5c:
         52:15:04:bb:00:f7:43:df:ce:3c:e3:5c:d7:53:d7:34:6a:17:
         a0:8b:97:5f:86:ea:8e:6a:0c:2e:c9:eb:41:95:d6:07:b2:46:
         cf:c2:bd:e3:ee:cd:ff:50:28:df:fc:fa:a4:f2:a7:9e:d9:39:
         dd:12:be:17:36:c4:8b:28:6c:46:e1:7f:49:47:1e:ac:67:35:
         fe:1d:a0:80:d5:cb:85:0a:c8:b9:43:55:78:dc:c3:48:99:b5:
         62:8a:bc:d5:0f:34:67:fa:f7:9f:d9:04:c5:b3:74:e3:5c:1c:
         b1:4a:33:a5:0e:3a:37:72:c6:b3:3a:d6:a9:20:b0:f5:5f:e0:
         6e:fc:44:f3:fc:ff:1b:1a:d0:91:45:0f:f4:b1:63:2e:ca:4f:
         f2:71:c3:a2:dd:fd:ce:27:ca:85:eb:7d:00:21:bd:82:24:65:
         45:66:e2:a9:72:25:e7:a9:07:48:33:54:fe:a7:1e:4e:c2:43:
         aa:c0:da:ae:11:2e:44:61:d3:f4:7c:97:b4:ce:02:1a:ab:ad:
         e7:0b:1b:f9:2f:09:95:3a:ad:b6:12:f6:3d:fb:63:df:44:f2:
         5b:60:7f:ab:4b:d2:9c:0d:78:c9:3b:84:0b:7b:59:44:dc:5a:
         16:75:6f:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----