Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/99499d80cec394d19d7b53760cbd0592d5cc9ed8.cer
File:                     99499d80cec394d19d7b53760cbd0592d5cc9ed8.cer (raw, json)
Hash identifier:          gqOF9TPn+L38QXCIQ8ajzPrgnMG250VKsH9Ed7GyfgU=
Subject key identifier:   D3:12:28:07:2B:77:6A:DE:9D:E5:D7:3E:04:1F:A5:72:F9:B5:A9:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CC2577
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/efefc6b1-9f94-4336-a0db-f023199e87d5/99499d80cec394d19d7b53760cbd0592d5cc9ed8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/efefc6b1-9f94-4336-a0db-f023199e87d5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Jul 2022 19:47:59 +0000
Certificate not after:    Fri 12 Apr 2024 00:21:46 +0000
Subordinate resources:    AS: 270111
                          IP: 189.51.168.0/22
                          IP: 2806:3b2::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13378935 (0xcc2577)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  4 19:47:59 2022 GMT
            Not After : Apr 12 00:21:46 2024 GMT
        Subject: CN=99499d80cec394d19d7b53760cbd0592d5cc9ed8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c7:b1:5e:b0:b0:00:6d:45:53:ac:0c:96:11:
                    13:13:19:61:88:dc:b9:84:d0:22:9b:0c:80:e6:8d:
                    4f:78:95:3e:10:b2:d9:66:80:b4:14:4d:48:ba:2c:
                    dd:01:91:c1:d2:21:65:4e:d9:b1:74:00:92:1c:27:
                    60:11:5d:ca:8e:4d:77:7f:52:90:1c:9f:da:71:6c:
                    ff:0a:be:3a:00:69:01:e1:c3:59:84:23:38:45:d4:
                    7a:70:17:af:46:0f:04:e6:e1:14:25:bb:23:7a:f0:
                    a0:5e:2b:4d:dc:09:51:39:77:79:e4:a0:d5:c9:ec:
                    c7:db:3b:d3:69:15:bc:40:31:f0:c8:48:d6:15:ee:
                    6d:71:c8:bd:f3:53:b9:b7:99:d4:15:8e:ed:75:97:
                    b6:0b:47:1d:a9:b3:bf:d9:72:57:2f:6b:58:cd:e1:
                    43:90:11:3a:dc:bf:91:53:ec:43:98:e9:02:72:35:
                    a8:f3:d9:b1:bb:7f:15:0b:52:3b:ba:19:c4:99:e3:
                    81:30:c7:31:ae:da:ae:40:ea:f7:c9:3b:80:03:0d:
                    53:de:f4:24:cc:89:ca:73:05:0d:e0:c7:ff:2b:0e:
                    71:cd:b2:8e:bf:d6:53:b7:9d:69:23:bd:ad:b7:69:
                    16:13:82:d6:f3:ec:db:f6:b9:39:b7:c4:f6:7e:00:
                    fd:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:12:28:07:2B:77:6A:DE:9D:E5:D7:3E:04:1F:A5:72:F9:B5:A9:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/efefc6b1-9f94-4336-a0db-f023199e87d5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/efefc6b1-9f94-4336-a0db-f023199e87d5/99499d80cec394d19d7b53760cbd0592d5cc9ed8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.51.168.0/22
                IPv6:
                  2806:3b2::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270111

    Signature Algorithm: sha256WithRSAEncryption
         c4:a1:d7:fd:c3:90:80:da:b4:ce:d4:df:c7:6a:d5:d4:e4:d9:
         db:8d:30:43:10:22:69:32:79:13:54:6b:98:00:c1:54:5a:ec:
         0f:48:fb:77:ab:fe:84:02:44:6d:0a:65:5a:92:a6:cc:8f:1f:
         00:f7:14:73:fb:b5:e5:1d:00:2a:0d:df:c9:78:b2:87:fe:42:
         8b:42:bc:fe:2b:04:52:2f:83:8c:a4:e5:f6:76:a6:58:f1:f1:
         44:f5:3e:e2:4f:d2:05:da:b9:1b:bb:b3:f5:0c:2b:5b:56:93:
         1b:9c:ef:0f:98:25:42:5a:92:19:be:47:c6:5d:c1:f3:e3:03:
         3b:c0:da:44:f3:30:98:48:e0:f1:02:eb:7b:b4:1c:36:36:7d:
         2d:4f:b1:fd:6f:5e:c9:8f:e6:5a:26:8c:10:23:c0:2b:a1:28:
         a2:96:83:7d:7b:e2:5a:fa:65:2c:f2:2d:ed:8e:9d:da:78:bc:
         a6:6d:08:90:39:9b:e1:43:42:44:62:84:c1:70:43:60:df:9b:
         ba:f3:21:f1:d7:bd:3c:43:bb:89:bf:5e:2d:dc:5d:1d:40:66:
         44:64:0e:77:a6:cd:c5:e6:11:8f:4d:f0:c1:a9:85:64:ae:38:
         a5:15:f9:b4:e2:a7:83:b7:96:6f:93:a5:98:52:f1:25:65:85:
         93:c0:2a:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----