Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9469fb387befc96f019d014c6e5234d0955553a9.cer
File:                     9469fb387befc96f019d014c6e5234d0955553a9.cer (raw, json)
Hash identifier:          u27hyWrAl6Mt4EnEnrj+NVuy2Pk2LkXEgsI809Nn2aM=
Subject key identifier:   0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC98F2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 24 Sep 2021 19:21:50 +0000
Certificate not after:    Tue 20 Feb 2024 06:00:00 +0000
Subordinate resources:    AS: 27768
                          AS: 27866
                          IP: 177.250.0.0/15
                          IP: 190.23.0.0/16
                          IP: 190.52.128.0/18
                          IP: 201.217.0.0/18
                          IP: 2800:960::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14457074 (0xdc98f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 24 19:21:50 2021 GMT
            Not After : Feb 20 06:00:00 2024 GMT
        Subject: CN=9469fb387befc96f019d014c6e5234d0955553a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:03:00:7d:02:e0:87:f2:42:63:ef:69:23:48:
                    2d:c2:43:10:fe:7e:e3:83:d6:41:ae:84:5f:31:e1:
                    f9:2e:9a:ad:1e:29:3c:7b:ca:b9:fd:4e:21:4e:7d:
                    11:30:80:63:8d:39:00:35:13:24:22:2f:d0:c7:9c:
                    c7:39:16:14:51:64:42:8d:5b:99:11:e5:df:44:eb:
                    c4:5e:f7:af:47:f0:0b:fc:1e:ac:c7:f8:3a:da:a5:
                    5d:10:6a:bc:3b:21:d9:3d:bc:6a:3f:7b:a2:03:55:
                    55:39:5a:bc:bc:de:b8:44:cb:26:38:b7:17:ee:e7:
                    bf:73:9e:2a:6a:aa:10:cd:89:3f:18:7a:b8:8f:fa:
                    b2:89:32:c4:9a:e1:76:6a:58:dd:b1:f3:d7:c6:8b:
                    3f:5c:38:ef:e1:f4:ef:78:16:db:55:6e:3b:ac:bc:
                    5e:58:3c:41:6a:e6:d4:6a:c4:0f:7e:dd:10:44:cc:
                    04:9f:49:72:40:2c:4d:d3:f8:ac:c5:24:3f:7d:b0:
                    1c:f9:cf:3f:fa:7e:c7:b1:84:b5:35:58:d2:2b:68:
                    28:c5:65:63:2a:6e:eb:37:d0:7d:81:a4:7f:6d:1a:
                    35:16:26:07:0a:f4:4e:56:2f:5b:8d:fc:b5:f6:42:
                    8e:7d:23:85:78:bc:df:89:a0:48:5b:4a:90:2a:f7:
                    97:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:85:05:14:47:68:0B:DB:20:29:0F:24:74:35:15:B5:E6:12:6A:7F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4ad68e3-a7f0-4d51-8658-ccf9c26d3ea7/9469fb387befc96f019d014c6e5234d0955553a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.250.0.0/15
                  190.23.0.0/16
                  190.52.128.0/18
                  201.217.0.0/18
                IPv6:
                  2800:960::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27768
                  27866

    Signature Algorithm: sha256WithRSAEncryption
         48:0b:ae:d3:80:82:57:2f:b8:9f:de:90:b1:43:b8:15:05:34:
         d5:37:ef:6e:7c:9a:fe:90:4c:60:36:ba:52:49:56:34:7f:01:
         9d:fe:b4:db:04:ce:2d:4b:18:71:4b:9c:47:0f:9d:85:e6:f8:
         7f:1c:d6:97:6f:b4:05:29:0b:0d:ab:f2:c2:2b:d7:37:b4:a5:
         b0:ac:e3:8f:74:a0:4b:c6:e1:09:bd:1b:19:5e:02:19:e1:f0:
         b0:51:03:43:42:07:9f:95:35:43:68:4a:b3:7a:cb:34:08:74:
         2e:98:d8:8e:48:96:c7:70:8f:42:96:16:15:fe:99:12:ff:87:
         56:31:f0:f0:bf:9f:ba:27:66:47:59:eb:98:38:f0:6c:e6:d0:
         07:3b:bf:b8:38:bc:2a:31:23:b9:2c:ff:0e:cd:83:3a:83:51:
         f7:2a:7c:2d:77:67:17:6f:e7:d1:e7:72:66:7d:ea:2b:7d:5d:
         ab:bc:b3:a5:1f:26:59:31:04:e9:56:0e:c3:56:66:eb:66:e9:
         80:39:ee:99:48:80:3f:c0:dc:83:81:c4:c4:8c:da:24:38:81:
         65:a6:fd:c7:00:e8:ac:ee:84:4f:b0:d8:98:10:83:2c:0a:b0:
         90:e0:a8:5b:5d:3a:fe:0e:84:a6:18:4e:d5:ae:b3:64:15:be:
         09:d5:e3:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----