Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer
File:                     6b09d9684795d8fdec4bb4afe6ca536e0a856f30.cer (raw, json)
Hash identifier:          aC1dp237esd0QwBG7iZ/nZ8tIdGp54db72qwMdotjBw=
Subject key identifier:   E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F77E21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Sep 2022 15:02:15 +0000
Certificate not after:    Mon 30 Sep 2024 22:24:30 +0000
Subordinate resources:    AS: 267735
                          IP: 45.167.88.0/22
                          IP: 2803:da0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16219681 (0xf77e21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 30 15:02:15 2022 GMT
            Not After : Sep 30 22:24:30 2024 GMT
        Subject: CN=6b09d9684795d8fdec4bb4afe6ca536e0a856f30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ae:59:d6:30:b0:88:c0:9e:63:5c:48:4d:04:
                    0b:01:15:ec:92:68:ac:a3:8c:fb:22:31:4e:7a:60:
                    87:ad:c6:a3:4f:80:6c:56:df:22:45:51:c3:dc:93:
                    04:a0:ff:6e:df:46:67:ac:be:d9:93:a0:43:1d:ef:
                    9c:fe:3a:78:eb:e3:17:47:f9:3c:42:3d:c1:7f:70:
                    c0:77:12:1b:c1:6a:6c:5b:36:dd:ef:3d:04:0e:63:
                    1d:df:9c:1e:00:8c:c9:94:0a:8d:de:fb:31:ef:7b:
                    82:f8:89:76:c0:fc:ba:ea:3b:1d:d3:a7:de:1b:3a:
                    34:4e:3c:96:c1:72:ce:87:f6:75:77:54:88:9a:ff:
                    11:e7:a3:82:70:0f:06:c7:35:2c:e1:e0:3e:09:7d:
                    fa:84:b3:a1:62:fe:41:3a:74:21:20:78:45:c8:42:
                    6e:01:85:77:ba:6f:88:ab:be:1f:28:60:3d:4a:af:
                    6c:20:95:48:b4:17:d0:85:79:fa:fc:3d:4e:31:30:
                    40:ff:90:a4:68:be:18:2d:6e:5b:c3:dd:12:57:42:
                    e5:2d:25:18:f4:1e:23:ed:fd:ff:8d:4f:b9:ef:39:
                    e4:ff:9e:89:08:5a:a5:d2:45:74:e2:07:67:f0:9d:
                    bb:87:18:e1:e9:61:d9:3a:bf:77:62:f6:ba:a9:7a:
                    89:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:B5:8F:28:11:C5:2A:8B:44:B3:F3:77:C5:FD:0E:72:1A:99:DA:C8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3cbe16d0-3f76-49f1-a2bc-ac6a6c2dd4be/6b09d9684795d8fdec4bb4afe6ca536e0a856f30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.167.88.0/22
                IPv6:
                  2803:da0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267735

    Signature Algorithm: sha256WithRSAEncryption
         ad:50:f0:65:c8:81:14:27:09:e5:ee:90:04:46:c6:ee:04:3c:
         a4:3e:e3:aa:0c:c1:91:7e:6a:92:df:ec:71:86:43:d4:7e:e6:
         48:be:dd:27:e5:ad:95:61:4c:46:98:26:a5:44:51:a8:47:ef:
         9a:c7:64:5e:0c:26:7a:24:80:80:95:39:65:21:d0:d8:59:e6:
         85:09:89:d2:7a:e4:fd:33:b5:b3:8d:64:0f:43:06:1a:c7:de:
         01:36:e8:c2:ff:4f:d3:f5:d1:b8:7f:9d:46:48:67:4a:df:d2:
         62:1a:d7:2e:79:17:e8:dd:b8:61:5d:86:38:a4:a8:cf:79:1e:
         dd:75:b4:7a:0e:07:1e:b0:22:9f:1f:9e:5b:bd:23:71:7b:8e:
         bc:e9:46:9a:48:33:bc:61:b7:0c:7a:10:aa:00:fa:39:32:24:
         d7:08:74:ff:52:48:dd:de:0f:f5:77:04:c4:13:8c:53:d0:b0:
         19:37:d7:b1:9f:a1:3f:f2:fc:12:ed:f0:5b:3d:03:43:02:af:
         7d:2e:d6:db:a6:64:65:e7:52:a8:39:d0:53:74:91:6c:d3:20:
         87:76:cc:7c:72:a2:1f:90:b8:68:a5:66:bc:38:41:f8:b7:e9:
         6a:69:22:32:81:c5:13:5d:32:03:d0:a9:0d:d0:d0:9e:59:89:
         b6:96:65:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----