Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer
File:                     71a464f59d46ac27cdbcbb0efe6e417e3717efd0.cer (raw, json)
Hash identifier:          5k7VmAnqAP4+GpB4FxsD7bQnF0VK5tSgDKH3fRDysoc=
Subject key identifier:   50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB5947
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Oct 2022 00:08:26 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 200.4.16.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16472391 (0xfb5947)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  5 00:08:26 2022 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=71a464f59d46ac27cdbcbb0efe6e417e3717efd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:dd:dc:cb:ed:4a:39:b0:c8:64:8f:3e:81:0f:
                    97:b1:d0:03:a0:43:1f:a9:2d:d6:52:8a:ed:f9:f9:
                    19:97:01:90:24:e7:35:3f:72:a8:02:36:a3:b4:57:
                    57:4f:25:3a:98:b1:33:7d:83:da:d7:5e:68:5c:c5:
                    a5:69:38:1a:2a:74:24:9b:37:f7:34:81:ff:2e:0e:
                    41:7e:78:65:70:4b:b0:c4:77:d3:db:99:0e:98:7b:
                    af:91:8c:7e:84:52:f0:e6:92:7b:9e:c8:5c:bb:95:
                    96:bf:15:19:51:53:9a:5c:97:8c:58:22:06:cf:cf:
                    e4:7d:46:f7:9d:c5:43:da:13:d5:5c:4c:e7:d0:c9:
                    53:66:1c:e7:1e:3d:96:0c:b9:f4:e9:c1:d5:29:4f:
                    1a:11:91:08:83:9a:94:f8:1d:e1:c2:f7:9e:de:2d:
                    8a:5a:10:06:59:5a:3b:51:8b:19:b0:a1:9e:49:2b:
                    23:ac:fc:02:1e:6e:d5:96:d7:5f:17:5e:e6:bf:b4:
                    6c:41:09:25:d5:2b:61:5e:3c:fa:9a:07:1c:34:0e:
                    25:15:cf:f6:3c:45:16:96:3b:66:ec:11:0c:d1:e7:
                    5c:06:35:5e:6b:fd:17:45:2d:03:c0:d3:56:83:e9:
                    24:26:91:2f:de:58:50:a0:a0:d9:6c:33:82:39:02:
                    7d:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:06:D9:00:0E:20:81:07:C1:3A:6B:1F:EA:9B:3D:4C:9F:EF:69:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/badee91a-35c0-4634-be9b-5838535d4a02/71a464f59d46ac27cdbcbb0efe6e417e3717efd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         25:4e:4c:d8:fe:7c:11:0c:5d:12:70:5f:6e:b2:bb:92:cb:90:
         eb:1c:11:90:06:e1:ca:b5:c5:d4:30:01:71:b5:f6:ba:e7:39:
         5f:62:e8:db:34:b1:41:f8:c0:54:b3:79:36:d3:25:5d:55:64:
         4e:37:a0:bf:29:c4:61:f5:bd:ac:88:46:a6:74:3d:b9:ca:45:
         03:a2:26:a6:3d:9f:a4:a8:04:72:9a:f9:8d:86:c9:06:1c:46:
         a9:5d:16:ff:23:5e:d6:e5:3e:43:04:89:8e:1c:7e:76:99:b8:
         9c:e0:26:31:1f:2b:44:88:63:8e:2a:c4:af:b0:33:27:e7:58:
         f9:c7:e4:82:10:fc:ac:3d:d7:31:0a:c2:28:0a:ba:82:8c:90:
         6c:3e:42:dc:17:1f:d5:45:47:4e:f5:c9:f3:33:e9:c4:bc:8f:
         e2:ad:67:22:46:a5:55:b4:4b:43:b4:6f:e9:7c:af:04:d4:1f:
         fa:6d:01:79:1c:51:f0:6e:75:d2:49:83:bb:ad:b4:33:80:40:
         8a:d1:13:92:a8:ba:8b:da:1e:c8:72:75:42:ff:35:5d:7a:e2:
         ed:5e:0f:b6:e9:23:e5:cb:37:f5:14:22:44:c4:6c:71:f7:75:
         d1:0c:03:38:05:f1:be:fd:4b:8a:b9:74:70:71:cd:ee:4f:49:
         22:4c:0e:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----