Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.cer
File:                     7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.cer (raw, json)
Hash identifier:          Rf0Uw6qmw1nJO600XvV9nA7Rg7m6J0jEEwFBHbQv7fI=
Subject key identifier:   8F:31:10:80:6C:2F:2C:5B:E3:65:90:C1:B5:59:B5:9F:E3:15:DC:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D4317C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Oct 2022 22:13:27 +0000
Certificate not after:    Sun 30 Jun 2024 18:55:52 +0000
Subordinate resources:    IP: 168.196.184.0/22
                          IP: 2803:60c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13906300 (0xd4317c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 22:13:27 2022 GMT
            Not After : Jun 30 18:55:52 2024 GMT
        Subject: CN=7cd1ba1c4f2170f7f3f283070d2f069edc42eeef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5a:00:9f:68:fe:90:a6:4b:2d:06:4f:2e:2a:
                    cb:15:fe:2a:a3:16:0e:bb:1f:1c:0f:c7:a0:43:6e:
                    b4:c7:d3:a3:61:55:ed:3b:6d:0a:b7:fc:db:fe:ca:
                    1f:c1:a7:43:41:8f:bd:d0:d0:c0:78:67:0c:7c:b9:
                    83:de:3e:69:fd:0a:2b:a8:f8:88:2f:1f:a3:cf:48:
                    08:dd:f3:3e:40:58:67:d4:bc:52:40:db:2a:04:e8:
                    aa:5d:55:b2:f0:1a:20:c8:3c:cc:e7:b4:b3:3f:2c:
                    17:3c:e7:ea:5d:76:5a:64:94:38:d7:50:12:9d:5c:
                    29:28:81:6c:17:fe:c9:b9:0b:48:db:2b:8a:06:21:
                    36:8c:07:0d:81:a0:51:e5:40:4a:37:b3:a8:eb:0d:
                    95:fe:18:ff:fd:7c:3c:d5:ac:ac:9b:aa:50:ed:8f:
                    b9:4d:21:93:ed:c9:13:08:77:bb:66:18:56:3f:8a:
                    77:d0:3a:81:a4:42:cc:84:36:95:27:86:fe:0f:b0:
                    e2:77:e4:99:d9:8a:52:87:c4:5f:db:a9:34:fc:cd:
                    dc:eb:02:e4:20:b3:2d:a6:57:e8:03:aa:6e:dc:07:
                    3f:80:08:3e:0c:a2:f4:94:c1:42:1b:18:bf:ca:8a:
                    5c:f6:a8:be:1a:2c:96:c6:82:cf:c9:3a:79:c3:ff:
                    5f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:31:10:80:6C:2F:2C:5B:E3:65:90:C1:B5:59:B5:9F:E3:15:DC:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2ea7a450-8918-487d-a01e-6d59ef33e1a0/7cd1ba1c4f2170f7f3f283070d2f069edc42eeef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.196.184.0/22
                IPv6:
                  2803:60c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:9e:4f:fc:1d:d8:09:45:e7:16:3c:6e:b9:75:83:1a:e0:b4:
         6e:0f:e3:c2:60:8c:7f:56:98:bf:7f:66:64:ea:a9:b0:e4:dc:
         7f:ad:95:96:95:87:9b:f4:3e:2f:ba:4a:1a:4c:f5:1d:b1:06:
         bf:03:1a:1b:13:46:e7:f7:12:52:4b:23:c5:9e:81:cc:fc:6c:
         30:11:3a:7d:d3:98:15:ee:da:5a:73:90:1f:fe:20:77:49:2f:
         e2:a3:b2:52:e0:74:ae:23:67:7e:35:2b:d3:02:ec:ac:54:33:
         90:19:f9:da:7e:af:c3:50:74:d3:b5:83:ac:5e:8a:ea:c4:77:
         ee:a5:4f:6e:7e:b2:ac:74:6f:cb:96:59:4e:a2:6c:1a:93:48:
         33:8f:42:0e:40:3a:92:34:7e:2e:31:cf:a1:79:96:66:25:9d:
         22:44:aa:46:b7:d3:a8:7b:05:44:67:ef:85:a0:df:4e:0e:be:
         e9:8c:41:54:8a:ea:78:f6:58:90:cc:b7:cd:d3:37:b3:0b:c5:
         54:09:cd:5f:8b:94:f2:ac:7f:78:ac:8b:e4:9a:c8:61:ec:f3:
         69:19:d4:9b:c1:61:a3:f8:70:b1:c2:2e:6d:f4:dc:37:aa:f7:
         a8:e1:24:0b:6f:9e:ff:67:a8:f8:9a:87:55:73:b0:3e:08:cb:
         3d:79:ff:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----