Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89b43ca0a70451881fc86586450001a0c3042bd0.cer
File:                     89b43ca0a70451881fc86586450001a0c3042bd0.cer (raw, json)
Hash identifier:          3jFbE7R6PpRBz63ASdC/Y5MrRWnr24bqYBWah8gVZ2M=
Subject key identifier:   62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F10FDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/89b43ca0a70451881fc86586450001a0c3042bd0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Oct 2021 13:54:13 +0000
Certificate not after:    Wed 07 Aug 2024 23:37:00 +0000
Subordinate resources:    AS: 271992
                          IP: 2803:9110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15798237 (0xf10fdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 21 13:54:13 2021 GMT
            Not After : Aug  7 23:37:00 2024 GMT
        Subject: CN=89b43ca0a70451881fc86586450001a0c3042bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:68:2d:c4:6a:31:ff:2c:10:ea:f9:42:09:e3:
                    e7:31:a2:66:45:9b:50:e4:3e:bb:31:4f:90:4c:72:
                    ad:e6:04:ce:48:bc:bb:48:6a:c6:45:95:3f:db:22:
                    b7:a7:2e:97:a7:a0:cb:56:c2:94:ab:e0:4b:d0:73:
                    f6:b8:02:32:60:c8:87:9a:47:43:7c:d0:af:dc:32:
                    24:05:e4:53:f4:14:c1:00:68:b2:51:9c:1c:c2:fb:
                    d2:e6:29:8e:6d:05:f0:c4:a1:a9:f8:fc:16:60:34:
                    1b:a1:a5:e7:c4:d5:3d:64:bb:78:1e:16:04:c1:1e:
                    f4:4a:df:19:67:20:46:c0:f1:e0:a7:a3:df:bc:72:
                    d8:ab:2c:7e:c6:b4:82:c4:c5:65:99:fb:85:76:4b:
                    87:74:5c:87:c8:4f:90:6c:dd:82:52:cb:12:60:d4:
                    85:a8:ca:3b:9e:37:2e:ea:ae:07:7e:7b:84:db:89:
                    b9:2d:70:fe:e8:94:60:eb:22:92:28:c8:10:6a:01:
                    12:d6:e5:fb:0b:31:31:4e:4e:9a:4c:91:42:88:43:
                    03:07:e5:16:9b:19:1e:b8:ee:56:66:a6:95:fa:cc:
                    d9:9d:72:b4:81:1a:b4:de:27:3a:01:58:3b:f3:2b:
                    cf:40:e9:8b:77:7d:d5:68:47:2e:5c:ea:cf:63:23:
                    ec:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:13:75:1F:EE:7C:F4:7C:D7:2D:06:C8:43:66:CB:D5:DE:5D:09:31
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/41566313-05c8-4400-8fe0-f110027257f1/89b43ca0a70451881fc86586450001a0c3042bd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271992

    Signature Algorithm: sha256WithRSAEncryption
         ab:d7:57:c0:8f:d5:a3:f7:33:ab:8b:a5:95:22:4c:71:ae:db:
         e7:39:9d:50:a3:92:cf:77:8b:b7:53:87:eb:07:36:77:05:3c:
         89:1c:7c:59:af:75:43:58:4e:f3:3e:cd:27:42:98:be:14:00:
         8e:fb:18:1f:0d:04:84:54:98:74:68:5d:76:cb:61:b7:21:97:
         b2:bd:3c:b7:18:ee:38:04:76:54:45:78:a2:26:92:e3:84:f2:
         29:92:d8:03:35:3b:14:a9:c9:fe:33:39:2c:8e:a8:00:02:19:
         e3:8d:52:10:5c:87:ff:a1:11:ca:5b:73:9d:b8:6f:ea:a0:a2:
         23:bc:dd:d0:e5:db:4f:ec:88:96:5e:b2:26:7f:33:68:88:a7:
         a2:ed:35:84:2d:06:58:cf:f2:41:e4:92:5a:46:e4:06:ca:94:
         6b:ca:42:fc:3a:7a:30:71:d1:89:9d:7a:5e:c3:6c:40:ca:bd:
         7a:f5:78:62:89:7d:c7:d1:f8:d3:1d:4e:5b:95:51:4d:b0:3d:
         58:71:58:79:03:e8:c1:b0:4d:4c:93:1f:f0:5e:04:6b:2c:07:
         97:17:18:f2:33:69:5f:04:27:97:69:50:2c:71:28:85:80:34:
         57:4d:80:45:7d:1b:92:94:b0:ec:da:18:a2:16:84:cc:bc:a0:
         46:5a:3a:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----