Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72d171d8debd2ac10e765c7fc036618865729a14.cer
File:                     72d171d8debd2ac10e765c7fc036618865729a14.cer (raw, json)
Hash identifier:          HkCD0gdumvNFeSB0J6KzVp+g/4V04lkxBL27ofAStpk=
Subject key identifier:   30:F3:78:72:51:5E:4B:A9:1C:DA:8B:EF:F5:89:1F:40:13:81:49:47
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8FEA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bee8f12f-d635-4504-8539-b62b3943b324/72d171d8debd2ac10e765c7fc036618865729a14.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bee8f12f-d635-4504-8539-b62b3943b324/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 Feb 2022 18:54:25 +0000
Certificate not after:    Sun 07 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 27828
                          IP: 200.7.160.0/20
                          IP: 2801:104::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14220965 (0xd8fea5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  3 18:54:25 2022 GMT
            Not After : Jan  7 05:00:00 2024 GMT
        Subject: CN=72d171d8debd2ac10e765c7fc036618865729a14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:89:c3:38:bd:06:d4:e0:7b:a3:c6:4f:8b:71:
                    b0:c3:9f:5e:bb:fe:e2:b8:27:45:76:63:3a:51:fd:
                    37:2a:13:fa:34:73:c3:93:9c:dc:02:04:e2:c8:12:
                    0c:97:73:25:2b:8a:de:3c:56:4a:d6:ee:32:00:b2:
                    6a:48:68:95:9b:0b:05:ef:cd:78:b3:85:46:c9:d1:
                    4f:2d:4e:a6:93:82:50:74:50:58:00:53:3e:67:45:
                    fe:a3:c8:56:b8:f8:69:1f:24:8d:a3:c7:f1:a6:3b:
                    85:ff:4f:d6:df:64:80:7f:82:fa:a2:6c:76:f4:fc:
                    86:0f:2c:71:18:cf:c5:79:71:3b:e1:3a:73:be:4a:
                    4a:6d:89:d2:74:c9:12:b2:60:a9:de:7c:db:27:6e:
                    e0:9f:29:ad:b2:0b:14:18:75:38:fe:56:48:90:9d:
                    e1:1d:59:8d:0b:86:a5:84:20:1b:8c:e9:68:13:af:
                    88:48:ca:8b:ca:28:d2:2b:31:78:1a:33:ad:b6:b3:
                    f8:ff:c8:aa:f7:24:f4:20:73:02:b4:5f:2e:97:7d:
                    4b:68:41:e7:47:f1:e1:78:46:a8:e9:54:b6:58:67:
                    6b:3b:b3:ff:6d:18:ea:3d:d8:e7:0b:be:d5:a9:c4:
                    05:51:f2:3c:d9:4a:fe:a9:c6:6d:4f:cd:bd:b8:0b:
                    8b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:F3:78:72:51:5E:4B:A9:1C:DA:8B:EF:F5:89:1F:40:13:81:49:47
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bee8f12f-d635-4504-8539-b62b3943b324/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bee8f12f-d635-4504-8539-b62b3943b324/72d171d8debd2ac10e765c7fc036618865729a14.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.7.160.0/20
                IPv6:
                  2801:104::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27828

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:dd:33:60:66:ae:54:88:c5:d9:4f:b9:e3:6f:35:a4:6b:
         cd:9f:66:54:b1:dd:6d:e4:c9:13:56:96:d9:1c:b1:e3:34:5e:
         48:c1:03:c3:f2:b7:fd:59:28:6f:33:d3:f0:09:a7:02:94:8d:
         51:83:62:ed:76:3a:69:89:4e:f9:6c:01:8b:b7:ac:5f:ec:4d:
         16:8c:95:b8:72:e1:1f:bd:49:af:22:cd:48:a5:86:ca:f0:9a:
         e3:b8:f0:53:75:2c:ac:b1:66:38:af:50:bb:cc:58:7e:ac:c4:
         eb:1c:e6:16:df:20:05:41:a2:32:e6:d2:a1:74:93:34:19:27:
         56:a1:a8:1e:bf:41:4d:81:08:46:09:a1:65:fa:dc:e7:f1:b9:
         dd:c6:33:ca:64:9f:1c:a2:fd:93:58:ff:d2:85:24:08:d9:0f:
         f6:a2:7c:fc:95:98:61:a6:ac:00:3c:f8:40:6d:1d:f5:ad:a1:
         ae:8a:59:11:eb:73:fa:03:22:d3:84:d0:79:09:f0:9d:d6:20:
         ad:5c:a6:7c:b6:8e:a7:15:bf:c9:ff:06:b1:9f:1d:98:b1:48:
         1c:b6:49:ed:0a:46:2c:2c:61:58:f9:73:5a:a4:c3:4e:b8:ac:
         42:64:88:5b:da:a0:ec:c4:1d:85:d1:cb:6f:d2:4c:a9:1b:c5:
         16:26:0c:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----