Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer
File:                     5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.cer (raw, json)
Hash identifier:          aBdwO3JoaI42MMbKB4A4tezp/FdNepa6yEHhulIigZA=
Subject key identifier:   B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5C1D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 21 Dec 2021 23:44:03 +0000
Certificate not after:    Sun 26 Nov 2023 16:29:10 +0000
Subordinate resources:    AS: 271855
                          IP: 181.191.224.0/22
                          IP: 2803:6410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14008786 (0xd5c1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 21 23:44:03 2021 GMT
            Not After : Nov 26 16:29:10 2023 GMT
        Subject: CN=5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:eb:d0:bf:69:2e:d5:75:e9:ee:03:d7:a1:cc:
                    c6:4b:f9:7f:2c:ff:76:ab:63:cd:f2:7e:21:3a:0d:
                    58:81:7d:d7:b5:fb:dc:f8:73:46:3a:21:c7:00:5c:
                    5a:63:ed:24:e5:95:b8:80:73:5c:b1:0b:84:4d:45:
                    a4:76:13:a4:70:4e:5c:cf:c9:6f:0e:0d:eb:dd:b4:
                    fc:a7:69:6c:e6:c0:e1:9f:3f:a2:c9:39:35:45:36:
                    36:dd:e7:76:2e:71:46:34:79:52:36:d1:b4:3c:ad:
                    d6:cb:4e:45:0c:4e:28:9e:a3:48:1f:76:e0:9f:d6:
                    bd:25:6c:2b:95:7b:af:63:60:67:dc:32:12:0f:9a:
                    3d:0a:18:5c:ed:c9:af:a2:39:03:62:60:02:4c:d7:
                    68:69:00:2a:49:f9:ab:4d:f1:3c:c9:20:d2:2b:0b:
                    c0:38:e9:32:85:9c:a5:56:2c:6a:f3:01:6d:75:cd:
                    58:15:77:89:b7:f6:ec:ab:b7:c6:4d:dd:7d:86:76:
                    e9:ca:00:b8:6f:07:6d:dd:de:37:d3:cd:9a:ad:03:
                    e3:65:a0:0e:83:08:38:84:5f:ef:48:32:7f:c7:77:
                    6a:6b:f7:8d:29:c7:42:38:82:8a:55:35:51:77:fc:
                    48:2e:c6:fa:fc:98:35:e1:7e:ed:f5:df:f1:f0:fd:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:DB:9E:09:0B:D6:24:87:AE:EC:3B:64:BE:82:5B:E9:1C:B7:71:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4c8379bd-01f3-46ad-97ef-4b8597efd185/5b43ff8ce977c8a5dbe15ffdf31cf11fbe6fb3f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.191.224.0/22
                IPv6:
                  2803:6410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271855

    Signature Algorithm: sha256WithRSAEncryption
         09:d0:9c:b8:2e:8f:4f:85:e3:eb:c5:eb:9b:30:a7:3a:1c:0c:
         2d:92:3b:06:9a:b1:41:20:f7:50:10:f4:82:fe:bb:3b:7e:86:
         87:2b:e0:33:b6:e6:43:af:42:5c:6d:5a:2e:65:5b:f9:0c:f2:
         ec:d1:e6:b6:e9:ab:df:33:2b:07:af:7d:b4:ce:bd:bd:2e:11:
         60:14:cd:61:59:c6:5f:70:ff:86:e9:13:47:6e:0d:2e:c0:45:
         7c:ff:40:7b:64:13:01:57:42:ee:24:09:7b:6d:84:0a:2a:b8:
         ee:d0:7e:5c:6c:9f:1c:80:a4:5e:9a:23:d0:8f:bc:4b:19:cb:
         87:cb:9c:14:68:be:b2:c3:14:1c:2e:25:f1:76:96:a4:ba:4d:
         e8:96:f8:46:f8:60:31:7e:41:14:5e:93:7e:ea:21:90:5a:d8:
         16:f5:5d:b7:a3:8b:2d:f2:0d:f6:3b:23:bb:2a:b0:56:78:e8:
         92:2c:cb:be:23:31:d0:db:b0:ff:fa:b8:2f:83:92:27:9c:ff:
         29:d9:f9:ed:ce:bc:2f:92:d3:39:a7:16:4f:dc:08:be:8d:b4:
         67:ca:50:45:ec:c3:37:34:11:89:88:29:e1:4b:31:80:ed:18:
         5c:18:75:25:77:45:63:30:6e:7f:1c:79:09:65:c5:12:8f:71:
         03:d9:d9:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----