Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fda6ad2528a266efa963c472a945b45114d0ccf.cer
File:                     5fda6ad2528a266efa963c472a945b45114d0ccf.cer (raw, json)
Hash identifier:          AM9TVhoEr2ip602Aq1jEEvOFOVx/KqaKpMbxeANEzLs=
Subject key identifier:   0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E03082
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 21 Jan 2022 21:31:38 +0000
Certificate not after:    Thu 21 Nov 2024 22:49:54 +0000
Subordinate resources:    AS: 23031
                          IP: 179.0.40.0/22
                          IP: 181.233.48.0/22
                          IP: 2803:c310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14692482 (0xe03082)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 21 21:31:38 2022 GMT
            Not After : Nov 21 22:49:54 2024 GMT
        Subject: CN=5fda6ad2528a266efa963c472a945b45114d0ccf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6a:db:5e:0a:68:a8:f5:6d:6a:8b:2c:aa:58:
                    3b:ca:d7:1e:19:f0:77:95:2c:17:e7:b7:a6:27:97:
                    0c:72:d8:a8:62:3f:a4:bc:ca:f3:2b:65:c4:7f:f1:
                    d0:e7:7e:81:d7:6c:e5:6c:ac:9d:19:bc:fb:a5:4c:
                    f7:1e:00:66:ba:9c:57:a8:e8:28:70:e6:27:7d:2f:
                    b2:ca:33:bc:af:55:39:8c:4e:e2:4e:44:ef:38:d3:
                    ee:78:9f:e4:d1:1f:e8:e1:2c:99:19:14:3c:e5:8e:
                    05:b4:0c:ec:48:80:69:f0:9c:3b:11:5f:8f:b5:03:
                    5c:f6:ad:0a:8d:e0:a1:b8:9a:45:3e:9a:c8:bf:97:
                    c5:86:26:95:b1:9a:d1:05:27:c3:e3:eb:01:b0:7c:
                    fe:aa:03:97:df:90:c8:81:18:b1:2d:50:09:a1:fe:
                    44:73:6a:70:5b:dc:8a:b3:cf:ce:a1:56:ca:2c:9a:
                    70:1e:7c:ee:2c:3d:94:30:c3:7b:bb:c5:5d:90:5f:
                    84:1c:8c:91:70:f4:95:dc:62:35:29:f0:a2:d9:8b:
                    fb:e8:1d:a7:ff:6a:1e:a4:df:04:f3:a7:bc:5b:37:
                    86:2c:f0:ce:c1:c4:fe:10:d3:04:5f:1a:c0:e5:e7:
                    eb:93:fd:85:b0:8d:8c:86:92:eb:f0:8e:80:ad:d2:
                    5a:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:5B:C4:3F:12:1E:BD:06:D1:45:29:6B:30:36:33:7F:44:42:D9:59
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58e667c5-3dae-4079-8c7b-8e29573d5ed4/5fda6ad2528a266efa963c472a945b45114d0ccf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.40.0/22
                  181.233.48.0/22
                IPv6:
                  2803:c310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23031

    Signature Algorithm: sha256WithRSAEncryption
         5f:a8:ec:a7:90:1c:4a:67:41:68:af:68:03:df:05:ca:38:2f:
         34:ea:c5:ea:a3:09:58:60:19:b6:bb:d2:f8:48:d1:68:1d:2d:
         c6:f3:f0:59:5c:aa:0a:71:7b:29:a7:17:14:32:15:f5:b9:77:
         f2:17:64:07:f4:f8:71:75:2a:92:9a:8e:12:2d:22:55:87:e9:
         34:9b:08:50:12:2b:a5:cc:de:0b:37:ef:49:9d:71:4c:8f:46:
         bd:fe:55:71:13:2f:e5:be:dd:97:72:ea:a8:bc:cb:a2:ba:d8:
         35:d2:87:eb:ce:22:cb:74:58:1a:bb:13:a9:d8:04:c4:7c:e9:
         e4:4d:81:ef:74:d1:ed:fc:be:c6:e3:6f:f7:96:0d:52:5d:50:
         66:61:c9:57:8d:36:95:35:98:fc:29:a2:e3:8d:93:3a:50:be:
         64:9b:e1:e3:c4:90:31:62:ff:24:f0:43:e4:c2:76:ec:c5:b2:
         81:51:ad:28:13:32:8c:f7:7b:e3:1b:e4:09:f9:a5:71:1b:32:
         7b:39:67:0e:8d:4c:8e:35:ea:64:af:52:79:14:1b:0d:2c:54:
         1d:d4:16:e0:8f:38:4e:37:6f:12:f5:48:6a:d7:24:2d:f3:51:
         9b:61:45:1d:18:b4:5f:ae:ab:28:cd:7e:7a:bd:bd:6f:e0:21:
         b9:e0:1e:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----