Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/72dcf4f6ae59843fdce24c28f903c9595129b623.cer
File:                     72dcf4f6ae59843fdce24c28f903c9595129b623.cer (raw, json)
Hash identifier:          kzJm6TzoLRKpZu4J9RsIMYrsO0cUS3log6rg9Oi0BgY=
Subject key identifier:   89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D83754
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/72dcf4f6ae59843fdce24c28f903c9595129b623.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Nov 2021 13:49:35 +0000
Certificate not after:    Tue 26 Dec 2023 17:48:44 +0000
Subordinate resources:    AS: 271867
                          IP: 200.36.208.0/22
                          IP: 2803:c10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14169940 (0xd83754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 25 13:49:35 2021 GMT
            Not After : Dec 26 17:48:44 2023 GMT
        Subject: CN=72dcf4f6ae59843fdce24c28f903c9595129b623
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:3d:0b:f3:03:d9:07:40:1a:91:be:fa:06:65:
                    9c:5e:ab:63:db:01:ed:97:8a:56:3b:69:f7:b5:55:
                    87:50:c9:51:19:82:83:69:6f:29:a5:44:33:42:11:
                    4c:43:d6:4d:f5:a5:c9:13:c4:ca:90:b9:5f:33:d1:
                    76:84:71:3a:3d:25:46:43:cd:d5:02:f2:3e:02:bd:
                    09:fd:b4:de:54:69:e0:f9:db:f7:4f:72:49:d1:95:
                    73:dd:87:28:9f:70:5c:b1:ac:27:5f:8d:ba:cc:1b:
                    44:a0:ca:85:1c:f3:66:fc:55:b1:30:01:b4:83:ea:
                    86:3d:0e:50:bc:c4:0a:8f:de:f9:04:c6:a2:26:4c:
                    ac:3d:6c:f1:16:90:76:07:c9:54:b1:84:48:08:7a:
                    52:02:c1:a1:6f:44:04:87:7f:27:a7:47:70:08:0f:
                    1a:92:83:5f:4b:b1:c3:46:3f:39:7d:6e:61:be:f7:
                    0a:76:ce:ba:10:71:87:5c:43:8f:da:b0:f1:41:d1:
                    a0:90:45:03:c0:5e:3e:11:94:a7:db:f7:b1:24:01:
                    bc:43:3c:39:b9:55:50:30:35:69:79:49:ed:d8:60:
                    a1:c3:9f:05:70:22:34:5f:6d:6b:af:63:c0:e2:27:
                    c6:cb:52:02:91:86:40:50:b2:68:ef:82:f2:34:12:
                    c4:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:86:D7:8F:18:A2:0B:CB:15:07:EB:D2:31:2C:0D:8E:09:AD:2E:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a126501a-1f2d-4eaf-bb3a-9d7872ad9baa/72dcf4f6ae59843fdce24c28f903c9595129b623.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.36.208.0/22
                IPv6:
                  2803:c10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271867

    Signature Algorithm: sha256WithRSAEncryption
         21:70:b4:c5:d1:d7:82:ef:c9:85:09:72:17:5d:c1:ed:e2:20:
         60:2f:8a:77:3b:b6:eb:0f:14:9e:f2:a7:8b:ad:f9:38:53:d4:
         ad:f0:47:a8:dc:50:05:04:2b:45:d3:78:4a:92:8a:67:23:35:
         64:aa:74:e5:69:f7:1f:02:c3:2b:de:cf:ad:7b:00:df:1c:4f:
         97:f4:74:f3:92:91:a4:f2:9a:57:a7:97:6c:6e:c6:97:9c:e0:
         37:c7:1c:60:43:4b:9a:54:28:60:ca:67:70:dc:10:fc:82:c9:
         94:43:b1:30:bd:ac:1e:df:44:f2:9c:6f:5d:28:41:c6:09:15:
         66:28:3f:f7:0a:bf:1d:66:b2:7b:8b:b0:37:65:ff:de:35:75:
         e9:4f:19:30:b3:c4:b4:fc:7f:19:58:61:df:56:88:44:32:cd:
         a2:2b:7e:79:5b:72:20:67:df:f3:05:0e:f4:2a:4b:89:01:b3:
         32:12:90:78:ab:98:6e:cd:55:bd:df:b8:38:c8:65:dd:be:7c:
         6e:4d:1d:99:7a:40:da:93:9a:e3:4f:c8:e6:e6:50:9f:ed:ee:
         51:8f:bb:3c:19:91:3a:ac:e7:f7:2f:24:56:dc:66:dc:0c:06:
         9c:08:89:12:87:bd:05:27:96:f6:ea:be:86:8e:77:fa:38:5b:
         15:5b:9f:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----