Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94a8b3328633493890542c58c5e5b0246682d373.cer
File:                     94a8b3328633493890542c58c5e5b0246682d373.cer (raw, json)
Hash identifier:          Df/FVUvB5vufLCQSJkyEyugtr6HeMbEM6IwkrC38k2E=
Subject key identifier:   DA:06:41:0D:CE:48:5B:64:47:71:64:66:D9:2E:38:E4:B3:BF:46:5E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED99F8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/94a8b3328633493890542c58c5e5b0246682d373.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 14 Feb 2021 04:33:03 +0000
Certificate not after:    Sun 14 Jul 2024 16:17:48 +0000
Subordinate resources:    AS: 271795
                          IP: 190.12.148.0/22
                          IP: 2803:a010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15571448 (0xed99f8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 14 04:33:03 2021 GMT
            Not After : Jul 14 16:17:48 2024 GMT
        Subject: CN=94a8b3328633493890542c58c5e5b0246682d373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:78:5c:14:77:64:31:5b:cb:b8:a2:3c:63:3a:
                    64:35:b7:bb:dc:47:18:55:ca:80:4b:3d:88:16:50:
                    c3:d8:db:b1:c8:7d:bc:86:24:ee:62:ef:83:f0:a6:
                    e0:10:b1:57:e6:c3:2d:2e:4a:4f:f1:b9:5e:6d:de:
                    32:14:d9:83:8a:81:49:22:65:76:6a:98:68:74:3a:
                    06:f4:c0:72:b1:e2:27:f2:d4:37:a6:aa:63:00:38:
                    ed:f0:fd:37:e1:29:b5:54:e2:b0:d6:34:d2:3a:9b:
                    9f:42:65:88:67:3e:38:58:28:c9:94:2b:a5:80:50:
                    b1:79:2d:be:24:b9:20:85:8a:64:a4:8c:86:2a:0f:
                    9b:bf:a0:bf:fb:18:cf:38:64:88:ea:40:ba:51:cf:
                    d7:86:81:46:31:af:70:ac:a2:3a:29:49:5f:2b:cf:
                    5d:19:be:50:a4:b9:69:a8:b4:4d:26:00:72:26:18:
                    9f:b0:64:62:87:01:0b:50:7e:c5:b9:c9:e0:4f:04:
                    82:67:c7:85:74:e2:f7:2f:ef:6d:a7:9f:8a:a4:14:
                    fd:8a:51:66:f4:0a:de:bb:06:40:3f:11:15:84:f2:
                    68:aa:28:fa:ca:a1:f2:bc:32:23:43:c2:1f:18:3b:
                    0a:0d:a1:56:f6:29:cc:00:ed:77:3a:4e:07:c0:5c:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:06:41:0D:CE:48:5B:64:47:71:64:66:D9:2E:38:E4:B3:BF:46:5E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a0dd30fd-4c3c-48a0-a0bc-d33926869297/94a8b3328633493890542c58c5e5b0246682d373.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.12.148.0/22
                IPv6:
                  2803:a010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271795

    Signature Algorithm: sha256WithRSAEncryption
         a8:ad:ad:ee:74:9b:8b:e4:0f:9d:bf:18:73:24:60:32:1d:18:
         a0:ac:bf:0b:ce:45:70:d8:bb:15:0d:d6:5f:0e:f2:a8:2b:b9:
         0d:ac:70:93:89:00:c0:55:31:86:8a:12:4a:43:8a:60:b1:c6:
         41:67:a1:02:91:60:3b:f1:69:0a:ae:e3:ac:56:85:e6:7c:bf:
         71:f8:e4:d0:93:7d:5d:24:c5:00:90:db:86:14:77:a4:97:9d:
         9e:3a:cf:13:1b:bb:50:3f:c3:a7:ac:2c:31:1f:1b:7f:40:aa:
         3d:39:15:74:ab:0a:d4:f3:9a:d4:09:b5:7c:0b:ee:ba:5a:f8:
         4c:b4:62:5c:26:08:c9:c1:ba:4d:21:c4:40:04:63:91:c5:06:
         ae:33:5b:51:68:19:cf:b9:79:9c:ce:8c:8d:bd:2a:9e:ad:fb:
         aa:6b:4b:65:9a:88:62:51:f7:b8:a7:bc:35:c5:73:87:1b:d8:
         4f:94:2b:7e:17:62:2e:04:18:aa:8d:e3:b3:73:0f:a3:27:49:
         d6:64:16:a7:d9:a4:d7:fe:e2:58:bc:06:83:53:75:db:0a:ad:
         ec:c1:e2:23:8a:9b:75:f0:e1:b4:08:3b:b8:01:e2:f6:00:11:
         d8:66:af:56:8b:e3:8b:b4:50:f0:cc:77:2c:6c:a3:68:be:c8:
         b2:fc:21:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----