Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/605717121a8b67da0bf3a5f2f42198217533cf35.cer
File:                     605717121a8b67da0bf3a5f2f42198217533cf35.cer (raw, json)
Hash identifier:          eH5cWJ7eeyAhEoHTgc5nvK8Fp4rBZsdDqpxBRCAOQ2g=
Subject key identifier:   5C:79:BC:5E:49:6E:FB:EE:FC:08:2C:07:FD:EB:F8:7F:22:7D:AE:06
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F13070
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/90c20066-735a-49b1-9fd1-245d8c1994d2/605717121a8b67da0bf3a5f2f42198217533cf35.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/90c20066-735a-49b1-9fd1-245d8c1994d2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 22 Apr 2022 22:07:45 +0000
Certificate not after:    Fri 09 Aug 2024 18:08:07 +0000
Subordinate resources:    AS: 265835
                          IP: 45.224.28.0/22
                          IP: 2803:a220::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15806576 (0xf13070)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 22 22:07:45 2022 GMT
            Not After : Aug  9 18:08:07 2024 GMT
        Subject: CN=605717121a8b67da0bf3a5f2f42198217533cf35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:55:ea:75:8e:07:30:10:8b:ba:17:9a:9e:fe:
                    6a:ab:92:2b:fe:70:4c:ec:d3:b7:fb:73:50:cb:ca:
                    a3:75:4b:ba:dd:d9:fc:a2:6c:d8:5a:a3:21:03:b1:
                    89:bb:87:22:2c:7d:e1:98:42:db:02:13:da:28:ab:
                    b1:02:c3:a6:d7:5c:44:9d:8b:81:2c:95:5e:93:ae:
                    8d:94:93:1a:ed:16:c6:22:f4:52:a0:07:49:54:89:
                    82:8e:b4:eb:6e:da:a4:1e:7d:1f:3d:b0:d5:0d:f5:
                    94:a9:cd:8c:52:a4:fe:2f:bd:e4:90:38:9b:66:16:
                    8d:98:a6:e1:e4:36:1b:72:8b:e3:16:f3:d2:7e:2c:
                    e2:72:a4:05:5a:f8:5d:c7:9d:2d:ce:a3:34:59:68:
                    f9:02:69:ac:b9:5d:80:f4:4b:2a:e6:a4:75:55:18:
                    67:fe:a7:7f:09:da:0e:66:11:da:9f:8c:e6:8d:c4:
                    e0:f5:68:e7:8e:c9:ea:cb:55:7b:ea:4b:b8:23:29:
                    50:5e:66:5c:13:f1:55:70:9e:21:3f:6d:fa:e5:25:
                    51:d5:5a:3d:cf:b0:c8:b7:c7:3e:0b:8d:d2:25:98:
                    4e:a3:ed:f5:bf:47:c8:e0:5e:8d:ec:8f:2e:38:4b:
                    c3:23:a6:d3:99:40:21:08:03:1d:fc:f7:5d:08:78:
                    73:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:79:BC:5E:49:6E:FB:EE:FC:08:2C:07:FD:EB:F8:7F:22:7D:AE:06
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/90c20066-735a-49b1-9fd1-245d8c1994d2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/90c20066-735a-49b1-9fd1-245d8c1994d2/605717121a8b67da0bf3a5f2f42198217533cf35.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.28.0/22
                IPv6:
                  2803:a220::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265835

    Signature Algorithm: sha256WithRSAEncryption
         65:be:be:5a:56:69:f5:bb:34:fc:8e:fd:df:8d:bf:97:87:ab:
         16:d5:36:aa:ab:f8:89:42:28:e8:f1:b3:dd:06:11:e9:11:25:
         83:5c:01:53:8e:c5:3d:7d:ee:8c:c4:2d:d4:69:3d:f5:18:25:
         1a:22:b7:23:a9:57:a4:3d:38:27:c0:38:7a:1e:35:33:23:e7:
         10:47:56:18:c9:bf:1b:21:a9:6f:4a:4e:73:2c:32:fc:c6:f8:
         a5:e7:95:49:ef:ec:3d:2f:ce:a9:8f:54:1c:40:86:11:03:a5:
         bc:46:5e:b8:22:28:45:3c:a4:bf:65:68:ea:39:db:00:60:3c:
         52:3c:02:5f:5a:50:33:42:ba:ea:a2:48:f2:b5:be:3c:03:65:
         85:19:10:97:43:43:9e:9a:94:46:c7:d6:cc:6d:3f:bc:37:0c:
         68:08:13:0f:c1:29:75:e0:67:8d:c0:99:42:16:d6:5f:34:e2:
         db:a4:b9:09:ff:db:ba:0f:5e:70:f9:2b:54:c6:4a:49:c6:d1:
         80:87:a5:ed:b2:23:b2:66:9d:b3:a6:04:60:70:05:9e:31:53:
         f9:7c:d7:c5:6a:0b:ea:50:08:bd:5e:5c:0b:75:8f:77:cc:5e:
         c1:84:d8:13:66:28:08:8d:b9:4e:e6:e6:ad:a2:9f:ba:3a:43:
         f9:6d:f6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----