Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/70819a70c9d0d345c30fc9a66d330e879157cda5.cer
File:                     70819a70c9d0d345c30fc9a66d330e879157cda5.cer (raw, json)
Hash identifier:          LELLW9MhowvBlzOSZNBCN+3l1Em69Mm7z0dgvUFXfsU=
Subject key identifier:   6C:9F:96:FB:8F:11:FE:A4:10:D8:05:C6:2F:BF:A7:83:37:23:7D:CE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8EB47
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/edb9510e-ef18-4e5c-9ea0-c22d4901fee1/70819a70c9d0d345c30fc9a66d330e879157cda5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/edb9510e-ef18-4e5c-9ea0-c22d4901fee1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Dec 2022 15:55:23 +0000
Certificate not after:    Sat 30 Mar 2024 22:41:17 +0000
Subordinate resources:    AS: 52480
                          IP: 179.0.11.0/24
                          IP: 2801:1f:8000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14216007 (0xd8eb47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  6 15:55:23 2022 GMT
            Not After : Mar 30 22:41:17 2024 GMT
        Subject: CN=70819a70c9d0d345c30fc9a66d330e879157cda5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:10:b1:32:14:3a:97:1c:2f:e5:94:e0:60:d5:
                    62:66:fc:10:79:91:d7:dc:b0:99:25:0f:2e:55:22:
                    b9:24:fa:22:72:b5:62:24:30:ce:83:b6:ab:07:92:
                    ee:da:cc:36:db:fa:e1:c0:b5:47:40:69:b9:29:dd:
                    54:3b:fe:dd:27:56:1b:b0:fb:a8:e5:fa:22:b6:92:
                    ca:26:63:b0:ba:45:63:e2:92:32:65:9b:ba:a5:34:
                    dd:ae:23:1e:ec:63:13:4f:26:c8:a7:5c:4c:b1:3d:
                    9a:0f:ef:cc:b8:df:1e:da:ec:61:c3:b9:e4:9a:48:
                    f0:a2:4a:32:c0:f2:db:ae:07:24:e6:6b:60:a0:21:
                    dc:da:11:a4:9a:fd:a8:23:16:15:f0:dd:f2:84:81:
                    aa:ac:5d:e7:c7:c5:59:57:fc:ff:0c:ae:a3:b0:76:
                    43:13:ff:b4:c3:6e:e7:f2:e3:95:5e:89:e7:fe:75:
                    ac:c2:99:26:7e:a3:75:a6:fe:c7:ad:d5:08:1e:db:
                    dd:1b:f0:87:82:76:7e:0b:f4:62:eb:ad:8f:89:b3:
                    bf:f9:99:de:d4:1d:00:37:db:b3:78:aa:21:35:ae:
                    27:b6:0b:a9:1f:75:e0:b0:d9:ad:0a:1d:9a:27:b6:
                    c1:da:c8:0d:cd:b3:6c:e6:ab:ea:6d:ee:28:5a:33:
                    62:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:9F:96:FB:8F:11:FE:A4:10:D8:05:C6:2F:BF:A7:83:37:23:7D:CE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/edb9510e-ef18-4e5c-9ea0-c22d4901fee1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/edb9510e-ef18-4e5c-9ea0-c22d4901fee1/70819a70c9d0d345c30fc9a66d330e879157cda5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.11.0/24
                IPv6:
                  2801:1f:8000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52480

    Signature Algorithm: sha256WithRSAEncryption
         10:d2:1d:bd:32:58:f7:ba:73:43:2e:6d:42:fa:28:ac:c6:84:
         8e:66:02:5e:fd:55:ec:f8:06:3c:ad:73:11:99:5e:d7:88:1f:
         a8:33:e9:30:9b:17:a5:d8:5d:fc:a2:13:46:c1:c9:84:1a:ba:
         3f:7b:a9:bf:61:74:6a:dc:d8:70:78:a5:fa:b7:5e:0e:b9:73:
         4c:bf:c4:12:0a:98:06:d7:03:e7:d1:13:a4:8b:75:d2:0d:db:
         8c:48:06:df:19:0a:00:2d:33:06:a3:c3:11:3b:a4:f6:21:1b:
         f6:1f:58:de:20:23:89:69:47:21:3f:b2:f2:a6:49:75:ea:e0:
         e6:db:ae:13:51:90:90:08:1f:91:cf:60:cb:10:56:0a:64:ef:
         70:ad:33:23:b3:91:52:3f:b5:88:d6:ec:d2:1a:06:a9:5a:99:
         7b:e2:eb:dd:83:62:a2:12:c8:e6:0b:49:08:fc:00:c4:b8:5c:
         20:58:90:23:30:12:e0:c1:39:2c:37:4c:7d:9a:21:4f:7b:7b:
         9b:6f:b4:fe:16:8a:13:cb:2c:20:4c:f3:68:a6:b6:db:66:9d:
         ae:04:8d:da:56:21:5d:fa:62:c5:8f:0e:ab:72:9e:3a:ca:e9:
         9a:83:7e:8d:a1:b1:10:34:5a:b7:fa:cb:3d:12:96:cc:92:8b:
         d2:ba:2a:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----