Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72abba6b7cd25cc52bbab3345005452793c3070a.cer
File:                     72abba6b7cd25cc52bbab3345005452793c3070a.cer (raw, json)
Hash identifier:          eLiwiObIFc4ZDtEllNOZAY2OwO7um/hHchn5BcKGhN4=
Subject key identifier:   DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA35EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/72abba6b7cd25cc52bbab3345005452793c3070a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jul 2021 17:11:00 +0000
Certificate not after:    Sun 21 Jan 2024 17:22:38 +0000
Subordinate resources:    AS: 271938
                          IP: 45.5.216.0/22
                          IP: 2803:8610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14300650 (0xda35ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 20 17:11:00 2021 GMT
            Not After : Jan 21 17:22:38 2024 GMT
        Subject: CN=72abba6b7cd25cc52bbab3345005452793c3070a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:96:6c:f9:38:19:4c:9b:4a:26:08:73:e6:e4:
                    e8:9a:78:33:97:63:d8:5f:c4:b8:29:7a:af:4e:92:
                    3d:07:4e:43:c4:a3:e5:ea:e5:1a:df:35:6f:4c:56:
                    10:72:da:8f:83:d5:2f:b7:bf:04:97:eb:d7:b3:9d:
                    45:aa:65:48:db:c4:df:7a:3b:ad:e0:0b:fd:d0:0d:
                    43:61:6c:b8:94:f0:cf:79:48:78:60:95:01:8b:51:
                    c3:97:c2:06:71:df:1b:9c:48:c8:b2:56:37:cc:39:
                    dc:61:14:43:37:c5:f0:6a:66:9f:f2:c9:b1:89:aa:
                    d3:a5:46:23:04:a4:52:95:b8:65:d8:46:1e:c9:f9:
                    68:6f:4f:42:e8:65:f0:97:34:36:e3:ae:f7:4b:d2:
                    43:ba:33:3d:61:b4:e4:2f:f4:b5:ea:5c:33:ae:32:
                    41:d9:e5:8b:38:73:fb:4d:0e:81:fb:3c:21:a7:ae:
                    a5:c8:5e:61:6d:55:f2:3c:c6:ff:4a:fb:21:67:3a:
                    bc:41:8d:ac:17:e1:fe:23:b9:c6:0d:99:85:c6:0a:
                    87:9b:17:49:bb:51:28:3d:09:21:3a:5e:e2:a5:62:
                    06:bf:2b:3e:6e:e0:8b:e0:ba:41:93:5a:c1:47:ad:
                    95:32:69:ef:12:77:7e:b5:f8:29:47:cb:56:26:96:
                    79:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:A6:D1:42:79:C2:7D:AB:84:68:F0:56:15:83:0F:3A:0C:FB:A5:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8d2c5922-a702-4472-b427-25731d531f00/72abba6b7cd25cc52bbab3345005452793c3070a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.216.0/22
                IPv6:
                  2803:8610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271938

    Signature Algorithm: sha256WithRSAEncryption
         5f:5d:f6:73:c6:25:dd:57:8d:c9:5b:33:7c:a1:f4:ef:32:28:
         2e:a1:69:6e:71:8b:a2:d3:a8:fc:a9:a2:c5:70:64:60:cc:e9:
         88:09:3c:dd:62:f8:fe:78:6b:e5:da:c7:81:fc:3f:fe:e8:5e:
         f7:a1:40:3a:58:38:50:32:8e:51:aa:f6:83:7b:4a:25:34:2f:
         74:c7:29:85:9a:6b:35:be:56:a6:6c:a7:a3:22:db:f7:f3:aa:
         0b:08:1a:48:ea:56:1d:5b:e8:4a:db:88:09:6a:c1:03:dd:42:
         a9:f3:aa:87:ed:24:92:41:26:db:f1:94:01:db:90:f7:82:1b:
         2f:3a:64:46:7d:63:dd:1b:d9:75:04:9c:cd:8d:62:83:e1:c7:
         30:33:3e:71:06:62:45:b7:32:0a:0b:b1:01:72:c2:94:4d:52:
         f1:74:0f:fc:26:a9:b0:dc:4b:87:a1:76:65:f0:3f:4e:44:2e:
         4e:c3:ae:7a:f7:96:ca:e2:14:db:6f:aa:f9:9b:d7:3b:3a:8f:
         9a:34:64:61:22:3b:db:80:ce:6d:f7:3e:b2:8c:c8:b6:82:b8:
         8e:84:21:7c:32:d7:4c:3c:81:ff:18:18:c3:9c:00:00:d1:aa:
         49:14:5d:04:db:89:ab:aa:67:a4:c9:4f:ac:86:27:cc:ed:ac:
         f9:43:a1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----