Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1.cer
File:                     9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1.cer (raw, json)
Hash identifier:          eDuwfUb4pz9L5RgL6xQjdNnmpCnWLZLI8B2nBHu1Gc4=
Subject key identifier:   28:7A:3F:A8:FC:36:C7:C2:70:4E:C9:91:E7:7F:14:E8:F3:7F:97:A4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CF0EEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/691e2295-422d-44fe-a0ac-b7035925b1d2/9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/691e2295-422d-44fe-a0ac-b7035925b1d2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 06 Aug 2022 12:42:36 +0000
Certificate not after:    Fri 24 Nov 2023 15:36:47 +0000
Subordinate resources:    AS: 266708

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13569770 (0xcf0eea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  6 12:42:36 2022 GMT
            Not After : Nov 24 15:36:47 2023 GMT
        Subject: CN=9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bb:87:6a:5e:b1:6a:1a:f5:cc:d6:c5:a2:09:
                    07:0e:61:3e:0f:50:67:1d:47:81:99:bf:e3:b4:74:
                    e5:0f:30:92:3e:1b:5d:a4:c6:6d:14:bd:25:79:47:
                    46:74:e3:4a:b7:1f:3d:e0:17:c0:a8:09:1e:36:0b:
                    85:79:90:80:9c:7c:23:8d:dc:94:55:53:13:92:cc:
                    d5:35:51:dc:74:a2:f8:90:dc:e4:18:a1:57:cb:17:
                    59:df:32:eb:5d:7b:ad:9d:fa:50:38:bd:9d:2a:3c:
                    12:bc:1c:db:18:65:76:6d:c7:ac:b0:7c:3c:2d:6b:
                    cc:a6:5c:51:54:85:88:be:37:31:74:81:03:43:fd:
                    fb:8a:a0:c6:5b:65:1f:85:1b:bf:c7:38:bc:6c:2e:
                    69:9b:ee:d6:5a:7f:4c:8d:e5:de:c0:19:80:c1:ae:
                    fe:f3:74:42:51:40:4b:ab:23:e5:9d:c2:4b:9e:9c:
                    0d:1c:ff:af:68:cc:0b:d4:49:f7:e6:74:26:f8:43:
                    6d:a3:63:64:40:f4:9a:b4:97:48:37:91:4f:0f:16:
                    2d:d5:98:bf:cd:ea:71:27:d5:2e:68:22:1b:fc:fa:
                    ab:e0:4d:76:71:51:96:0d:a8:7c:ff:32:33:45:c6:
                    89:d8:56:c3:e5:e6:b8:17:7b:4f:65:cb:e7:d0:09:
                    2e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:7A:3F:A8:FC:36:C7:C2:70:4E:C9:91:E7:7F:14:E8:F3:7F:97:A4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/691e2295-422d-44fe-a0ac-b7035925b1d2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/691e2295-422d-44fe-a0ac-b7035925b1d2/9faba721bc1c8d3c1a30d55ddabd89e9fdcd18e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266708

    Signature Algorithm: sha256WithRSAEncryption
         af:82:89:02:26:c4:47:b6:0f:f7:f3:a4:44:29:35:91:ba:ea:
         88:3e:03:ba:36:88:90:61:dd:c8:4d:0c:0e:58:7b:64:2e:6b:
         5d:34:a5:a9:78:06:55:4c:e1:87:8b:ae:d9:de:49:91:b1:c3:
         aa:5b:af:95:12:1c:ed:53:3e:36:8c:e4:a8:60:19:f4:84:6c:
         d5:02:f3:1f:35:32:ae:59:9f:f3:c5:27:00:19:64:ad:00:28:
         08:66:9f:7b:66:4f:56:73:22:14:16:73:77:30:6f:cd:c3:f4:
         4b:3a:56:d9:94:26:00:70:a4:98:07:5b:85:4c:f6:1c:d2:7b:
         a1:2f:07:2e:4d:da:e4:92:92:ca:f6:c5:73:4e:57:24:0a:49:
         5c:db:64:11:80:af:95:0a:39:3e:9b:88:cc:4b:7b:9d:68:e9:
         80:3d:1a:b3:64:77:b4:43:aa:c6:7c:9a:af:b8:a3:91:af:b3:
         f8:d4:7b:d6:09:18:89:5a:af:4e:8e:b8:d1:67:eb:0d:f1:6c:
         e2:c5:e9:61:27:0c:83:d5:e5:9a:70:f7:16:de:3f:37:ff:4d:
         a9:22:e6:bd:d2:f2:01:15:1a:27:23:ea:b3:bd:84:2f:01:b3:
         eb:71:23:a7:20:e7:1a:8e:70:56:92:7e:45:16:6b:98:54:b7:
         39:32:7f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----