Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/68961d4015dced167e506aa82ab89e5330a26c8a.cer
File:                     68961d4015dced167e506aa82ab89e5330a26c8a.cer (raw, json)
Hash identifier:          Di6qFjgNF/rX250O2CI3ia32ywuh2N06MqGyp28WNTc=
Subject key identifier:   57:16:F8:F7:DC:17:AC:72:3C:1F:98:CA:04:8C:C7:A9:1B:D8:C5:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C88CAD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/68fcc40c-2056-41be-b03d-0a9131c4df3d/68961d4015dced167e506aa82ab89e5330a26c8a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/68fcc40c-2056-41be-b03d-0a9131c4df3d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 30 May 2022 02:56:47 +0000
Certificate not after:    Mon 25 Mar 2024 15:54:15 +0000
Subordinate resources:    AS: 272797
                          IP: 2803:c890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13143213 (0xc88cad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 30 02:56:47 2022 GMT
            Not After : Mar 25 15:54:15 2024 GMT
        Subject: CN=68961d4015dced167e506aa82ab89e5330a26c8a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:82:c9:52:d0:25:2a:e7:1d:90:51:3b:03:32:
                    45:e7:71:34:79:f7:fa:22:6c:e0:47:24:95:70:9a:
                    80:99:fe:47:69:51:b4:ed:66:f9:a8:7a:d7:c2:d6:
                    a1:77:3b:82:ce:dd:dd:2c:1e:11:85:47:80:fb:44:
                    32:ce:21:c1:96:4d:6c:9b:7b:a2:07:32:fc:d3:fd:
                    97:d8:6d:a5:34:8d:9d:09:b3:6d:0a:47:ae:48:46:
                    fa:f8:25:22:69:9f:e2:fd:cd:fa:21:4a:3f:82:4a:
                    bf:23:2f:ca:08:56:2a:6c:95:55:b8:53:c9:43:cd:
                    be:0f:31:73:cd:9a:49:2d:34:22:9c:86:2c:fd:53:
                    33:30:3b:b3:f1:0f:b7:ae:f8:99:03:14:6e:05:e3:
                    3a:c5:eb:17:2b:ed:5a:98:2a:9b:f9:f0:40:11:ee:
                    23:74:36:39:09:f2:0c:48:15:7a:f9:ff:56:17:66:
                    f6:19:04:38:bd:46:f0:7f:ea:b9:ee:ab:9c:1b:2b:
                    60:4d:38:db:1b:c0:ce:09:46:4c:14:d8:cc:c7:7b:
                    33:f3:06:d4:05:79:3a:f6:98:2d:9e:d8:24:b2:48:
                    08:8e:77:30:6d:7d:6a:3a:c5:bd:be:f6:5a:62:88:
                    45:8a:fb:48:ef:95:be:61:97:cb:f0:0d:6d:72:26:
                    5d:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:16:F8:F7:DC:17:AC:72:3C:1F:98:CA:04:8C:C7:A9:1B:D8:C5:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/68fcc40c-2056-41be-b03d-0a9131c4df3d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/68fcc40c-2056-41be-b03d-0a9131c4df3d/68961d4015dced167e506aa82ab89e5330a26c8a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272797

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:ae:ac:0e:bb:4b:1b:12:06:b1:b6:b8:21:2c:13:67:a5:
         54:a8:28:42:f2:fd:77:e1:1d:28:39:55:ec:ff:e8:95:da:7e:
         ff:1a:d2:fa:0f:c9:e1:b5:15:92:d6:22:3f:e4:37:d7:4b:61:
         15:50:bc:82:d4:16:44:94:d4:04:4c:e5:da:62:95:e4:4b:61:
         6e:c7:75:87:5d:fd:a8:8a:8c:fb:b6:ff:fd:e9:a2:b9:df:be:
         1c:0c:03:b4:24:04:31:c2:00:57:0f:93:7d:78:ca:b7:50:5c:
         09:5e:f8:d0:f4:56:91:25:62:52:c2:29:66:1d:84:b2:bf:e6:
         c3:1e:8d:db:48:c1:85:af:74:5c:6d:58:74:2a:3e:11:1b:f3:
         0f:12:f8:18:fc:1c:09:fd:91:3e:2e:67:1a:a3:7c:1a:9a:bb:
         16:f9:25:45:7a:99:7c:8f:94:28:8f:e9:30:91:86:96:2f:1d:
         9f:b9:ea:4f:80:c1:63:e2:02:99:11:38:2b:6d:7e:af:ea:2b:
         30:0f:62:3f:55:36:a9:18:c9:24:ab:fd:d7:3d:16:6a:dc:a2:
         07:d4:c4:f8:80:7a:9e:89:0f:15:8c:87:da:09:6e:6e:87:1b:
         9a:a1:ac:89:6a:0e:f9:f0:2a:f1:b3:cf:07:21:30:39:d9:4c:
         7d:f0:44:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----