Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65a04210b6f862181fe4a2d3454a67b391b11958.cer
File:                     65a04210b6f862181fe4a2d3454a67b391b11958.cer (raw, json)
Hash identifier:          PWHoLtaDH+tnS5RPh0G2pcH1trtioYCiGtUflHMJcfs=
Subject key identifier:   58:D7:F2:27:8C:27:EB:BC:04:7A:A3:81:20:4D:73:BF:B2:2E:19:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D049D3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c82702ba-0e26-47c5-b3d5-a7e8d48bcf5d/65a04210b6f862181fe4a2d3454a67b391b11958.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c82702ba-0e26-47c5-b3d5-a7e8d48bcf5d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 24 Aug 2022 03:04:15 +0000
Certificate not after:    Wed 19 Jun 2024 17:22:35 +0000
Subordinate resources:    AS: 272849
                          IP: 2801:1d:5800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13650387 (0xd049d3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 24 03:04:15 2022 GMT
            Not After : Jun 19 17:22:35 2024 GMT
        Subject: CN=65a04210b6f862181fe4a2d3454a67b391b11958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:da:ed:b2:33:2e:dd:09:b8:65:aa:6b:ed:76:
                    9c:a4:48:d3:0b:64:3a:59:d1:b8:5f:db:3a:dc:65:
                    a8:ed:1b:7e:8a:4f:99:11:3a:66:c1:db:92:f1:de:
                    a1:16:5d:41:97:8d:ef:36:df:9c:99:cd:6d:dd:27:
                    e7:22:5f:49:91:d5:53:4b:1e:df:74:15:f7:4b:1f:
                    7d:d3:36:cf:55:7c:67:b6:52:63:de:76:f1:ef:92:
                    1c:28:f6:42:93:31:31:11:73:5b:66:9a:a7:63:a6:
                    3c:9e:1a:ab:21:94:8b:e1:8b:62:49:69:22:ed:5a:
                    c6:7d:8f:e9:aa:4c:c6:e9:68:41:75:2d:ce:ec:8c:
                    05:cc:9c:0d:5d:52:4e:3a:12:fa:6f:6b:84:e2:0e:
                    a2:9a:ec:3a:16:5c:18:9e:28:03:b7:df:83:57:33:
                    fa:3f:0f:e3:87:6e:1a:a6:ce:6d:0c:8e:b2:3a:c1:
                    47:28:c4:a5:4c:dd:5f:a1:7f:7a:7c:41:2d:99:75:
                    61:df:dc:73:27:25:76:44:c7:51:bb:38:6d:f7:a6:
                    07:0f:6b:e4:51:b9:29:8e:dc:3c:52:63:f2:4e:b4:
                    51:1b:df:a5:f5:a7:57:0b:d5:98:69:6d:07:c4:a4:
                    d0:a0:33:da:f1:e1:78:6e:f5:cc:14:eb:21:fc:3e:
                    47:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:D7:F2:27:8C:27:EB:BC:04:7A:A3:81:20:4D:73:BF:B2:2E:19:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c82702ba-0e26-47c5-b3d5-a7e8d48bcf5d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c82702ba-0e26-47c5-b3d5-a7e8d48bcf5d/65a04210b6f862181fe4a2d3454a67b391b11958.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:5800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272849

    Signature Algorithm: sha256WithRSAEncryption
         4e:04:48:b0:48:50:5c:20:5d:34:19:9c:c4:fb:ed:d0:e0:a8:
         59:f6:01:e2:a5:cb:57:41:23:6a:40:e1:06:cf:79:fd:36:12:
         77:4c:f9:89:10:d8:d5:24:2f:f1:c0:2d:80:f4:b3:6b:5b:65:
         19:4a:70:a4:ac:6b:ca:e6:58:06:22:81:65:e2:5b:c3:79:67:
         70:a0:08:56:26:8d:7e:62:ba:fe:e4:e5:03:ed:eb:e8:ee:3e:
         74:23:b2:c8:fb:a2:ed:7f:49:d2:0f:82:94:3d:76:cd:d6:80:
         6f:9e:93:61:10:33:71:2c:bd:87:d8:2c:22:02:10:34:21:73:
         c3:a6:2d:6e:25:d6:f3:d2:3c:b5:10:67:09:a5:08:c2:5c:33:
         ed:54:d8:e9:26:68:30:da:14:aa:98:65:d5:cd:9c:73:66:cc:
         aa:57:23:71:7b:33:84:f8:b2:0d:2e:8c:49:5f:bd:23:5c:13:
         4e:ec:ef:c7:63:e2:6e:4a:3b:0b:cd:b6:5b:c6:0a:14:54:cd:
         1c:61:42:12:ed:53:05:1c:31:42:02:cd:cb:9e:bd:93:d7:1b:
         18:4f:94:65:05:6f:37:38:da:76:b9:a9:4e:c8:bb:0d:71:e7:
         6d:26:0f:f1:ce:f3:e1:dd:b2:a6:08:69:80:33:4c:cd:d4:5a:
         e0:8f:ee:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----