Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.cer
File:                     a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.cer (raw, json)
Hash identifier:          urHoeBoBp72ztsk2hNJa1R9Xv7zeiLKNutjgGMs1YwE=
Subject key identifier:   D9:9F:AA:DE:5A:B0:40:4C:86:75:7E:DC:E1:BF:48:EB:C6:0E:14:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDE73B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 06 Nov 2021 22:34:36 +0000
Certificate not after:    Fri 08 Mar 2024 01:31:45 +0000
Subordinate resources:    AS: 265587
                          IP: 45.175.236.0/22
                          IP: 2806:33c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14542651 (0xdde73b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  6 22:34:36 2021 GMT
            Not After : Mar  8 01:31:45 2024 GMT
        Subject: CN=a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:70:85:ab:06:4e:80:54:5b:a4:62:da:b7:4f:
                    5e:a0:6c:d8:f7:77:74:fe:53:a7:33:b7:25:0a:88:
                    13:bd:4d:f4:ea:30:47:9e:02:6a:f3:b0:bd:de:d8:
                    c1:3c:fd:30:79:58:18:5b:89:fc:90:5b:eb:ac:04:
                    73:d6:47:a2:c3:30:58:e6:84:91:fa:72:cd:ee:6b:
                    da:14:3e:41:30:64:66:0d:56:cb:41:83:aa:32:3d:
                    46:4d:1a:c1:f2:ac:2f:1b:64:ac:16:ad:f0:a1:27:
                    fd:43:74:6d:56:4d:6b:08:03:82:dc:88:cb:8d:a0:
                    ce:b7:24:58:46:c8:11:64:82:f3:47:04:0b:bd:3a:
                    f0:90:34:55:7b:39:88:a8:42:7a:64:a3:aa:fb:a1:
                    b8:c2:59:a4:8d:d5:9c:06:ff:af:ec:9a:37:69:64:
                    92:68:09:5e:1d:9b:ad:27:3e:91:62:c4:41:24:7f:
                    b0:8f:2b:a8:2d:58:4f:a3:17:2e:10:f7:41:94:80:
                    25:4a:d0:7a:62:0b:3f:b7:ad:39:53:08:e0:23:87:
                    b7:db:e8:90:3b:7a:1a:62:a3:0f:33:57:99:c5:ee:
                    fa:26:1b:96:6c:0c:c4:4c:c8:31:85:3d:b7:62:7c:
                    f7:db:0a:c2:f7:9c:c2:57:dd:de:eb:fb:cf:0c:8f:
                    69:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9F:AA:DE:5A:B0:40:4C:86:75:7E:DC:E1:BF:48:EB:C6:0E:14:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c49c6dda-e288-4168-868a-e03fa75ce046/a2d64b47b5cacdd0d5bdf71f43d98b51c97c74ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.236.0/22
                IPv6:
                  2806:33c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265587

    Signature Algorithm: sha256WithRSAEncryption
         14:6e:b6:5a:f8:59:c0:17:87:1b:69:87:68:a1:d2:18:ce:4d:
         51:1a:96:c4:07:28:7f:a8:af:41:ea:0e:4a:f7:a9:46:53:cd:
         c9:37:f7:dc:81:96:0d:7a:9c:80:1e:a3:f6:5b:4c:d9:17:52:
         e3:85:08:e3:c0:99:c6:56:e1:0c:6c:c5:e6:17:ea:1c:8d:06:
         7a:83:0d:a0:71:05:76:7e:7d:02:dc:75:b1:40:d8:38:19:1c:
         05:03:24:e7:71:6d:24:6c:74:d8:85:1a:90:38:e6:67:23:c6:
         5b:3c:71:5c:e9:2e:3b:d8:10:e3:ad:4f:fe:a0:29:3b:de:77:
         8e:1a:07:7d:60:a4:e1:cb:3e:41:98:27:b9:ef:06:91:39:51:
         a8:b2:0b:83:bb:6c:7d:03:18:fe:54:c5:31:a8:34:8d:5b:10:
         b2:3b:cf:01:12:c4:9b:f4:4f:71:95:30:fc:b6:ad:5e:d6:72:
         18:43:b4:e4:b6:f6:b1:a1:d1:84:37:1c:b9:00:9e:53:6b:73:
         8b:ab:97:19:15:fc:d5:67:dd:77:62:e5:a3:61:eb:9f:80:43:
         6c:aa:4a:d9:96:86:48:ef:9b:12:6f:38:c9:b3:62:d5:7e:3b:
         aa:6d:29:a2:09:6c:9f:ea:a7:59:d9:f3:46:78:7d:7e:63:8f:
         b6:d8:ce:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----