Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/622a212a52d7db5f61eeaabb953a0ff99338ff33.cer
File:                     622a212a52d7db5f61eeaabb953a0ff99338ff33.cer (raw, json)
Hash identifier:          K4VRRAQr98ggY4fH5y0EsTKUJncNlvJuf9F6Zv8jSu8=
Subject key identifier:   FA:F7:DA:B0:F4:39:5D:63:0F:BD:AA:19:E2:2C:24:D7:90:1B:1C:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED6C31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/622a212a52d7db5f61eeaabb953a0ff99338ff33.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 12 Sep 2020 13:35:44 +0000
Certificate not after:    Thu 11 Jul 2024 22:50:57 +0000
Subordinate resources:    AS: 271799
                          IP: 177.52.221.0/24
                          IP: 2803:c010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15559729 (0xed6c31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 12 13:35:44 2020 GMT
            Not After : Jul 11 22:50:57 2024 GMT
        Subject: CN=622a212a52d7db5f61eeaabb953a0ff99338ff33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:fe:ad:08:57:cd:c2:5e:a3:ef:aa:0a:49:
                    1c:11:ff:5e:8e:53:aa:97:4b:c1:36:48:6d:b1:24:
                    e2:65:e2:7a:be:e1:63:4c:7f:a1:4a:12:04:b2:9e:
                    40:81:d4:cf:38:94:dd:28:5e:e8:3c:19:d2:60:ad:
                    a9:25:d1:a1:66:f8:2f:3b:d1:5c:76:48:60:14:4c:
                    cf:1d:c7:3c:a6:6e:c3:74:c2:fc:a7:43:c4:b4:fe:
                    c2:27:f6:86:87:ba:6f:24:e6:cc:37:0b:5b:7b:cd:
                    be:90:0a:9a:4d:39:b0:2a:0e:c4:d2:5a:cb:84:e1:
                    31:58:a2:ca:28:87:74:4a:16:49:03:66:c8:af:97:
                    d3:79:9c:47:10:8d:09:d4:cf:89:a4:a9:68:64:c0:
                    13:5c:ae:c6:2f:97:a1:3d:ac:97:5c:d9:ae:bc:38:
                    fd:35:86:4e:e1:0e:54:86:34:3f:c5:a9:67:6c:1b:
                    08:a6:bb:fc:e8:e6:32:9f:f4:08:6a:47:d3:61:84:
                    1a:d9:d0:cb:09:c1:e4:a1:bd:55:99:c7:15:74:f9:
                    dc:bb:42:57:76:2e:bf:5e:b3:03:4c:8f:b6:42:1e:
                    b0:a8:c0:15:8b:07:7e:4d:9d:ff:7a:76:04:bd:54:
                    b1:b4:a5:36:c9:b0:cb:fb:e6:dd:e9:20:aa:1a:b1:
                    43:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F7:DA:B0:F4:39:5D:63:0F:BD:AA:19:E2:2C:24:D7:90:1B:1C:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10a66b69-ab3d-4b96-8756-182108401525/622a212a52d7db5f61eeaabb953a0ff99338ff33.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.52.221.0/24
                IPv6:
                  2803:c010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271799

    Signature Algorithm: sha256WithRSAEncryption
         63:13:99:39:54:91:35:9f:14:c2:27:3d:f6:e8:a0:ab:51:68:
         d1:b4:44:51:50:32:c8:64:d8:b7:93:96:76:62:4c:3a:df:d2:
         88:0f:54:0b:e3:89:36:b4:74:ca:bd:94:c9:80:c4:c2:fc:c5:
         9f:29:30:8e:89:dc:2c:3a:7f:3a:52:7a:a8:25:62:55:8f:c6:
         4d:79:fd:b3:16:dd:54:f5:6a:a2:09:9b:16:90:d9:b0:5f:a1:
         61:c2:7c:87:d1:8f:03:a2:49:47:aa:4b:aa:11:16:6b:d5:9d:
         c9:df:71:de:5e:8b:a8:d1:e5:87:da:5f:2f:14:56:2e:5c:57:
         19:f8:e2:de:21:03:e8:8d:12:5a:92:80:b7:f9:53:c8:64:81:
         84:f8:45:3e:72:94:44:8a:83:c4:a7:3c:69:4b:33:f9:05:e7:
         f1:3e:45:58:f5:29:b6:19:f7:ea:02:16:11:45:df:b1:75:9f:
         15:44:7c:22:60:24:66:db:22:78:ea:fd:ef:46:69:77:1a:84:
         35:4b:c1:45:86:b9:d4:07:19:37:2c:48:44:d6:2d:39:b3:52:
         27:c1:6d:0d:8c:a2:9a:de:1a:52:cf:3d:17:a8:2f:ed:1c:e1:
         b6:f0:ec:b3:cc:ca:83:f4:dd:55:85:91:42:7d:64:8e:d8:2a:
         a2:f8:34:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----