Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/abc5395f6470797c32ddfe8eb37ee50a47c505fd.cer
File:                     abc5395f6470797c32ddfe8eb37ee50a47c505fd.cer (raw, json)
Hash identifier:          76uSFCTzULeVAFFC774puHBt3vmGSMDaE32qvvX+s+c=
Subject key identifier:   13:A6:72:D8:AB:A6:7F:39:F5:C3:15:54:9E:93:1D:0E:9C:E8:DE:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D174C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/abc5395f6470797c32ddfe8eb37ee50a47c505fd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Sep 2022 00:19:50 +0000
Certificate not after:    Thu 04 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 61500
                          IP: 138.121.80.0/22
                          IP: 2803:c440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13726916 (0xd174c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  7 00:19:50 2022 GMT
            Not After : Apr  4 06:00:00 2024 GMT
        Subject: CN=abc5395f6470797c32ddfe8eb37ee50a47c505fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:75:be:7f:5a:a3:b3:6f:1d:89:ff:20:8d:
                    55:13:a9:86:c8:da:7b:a2:36:a0:b7:b2:22:49:07:
                    2b:47:a2:fb:f4:5b:0c:4f:5a:ee:30:d2:97:9c:44:
                    b9:03:b9:17:77:08:a5:c4:66:b9:7b:a4:32:86:d4:
                    fd:cf:ff:e8:ee:1f:18:86:d0:41:11:35:af:b9:6b:
                    fc:7b:af:f3:00:2c:f0:3e:08:de:5c:7d:18:2f:e5:
                    db:a6:29:bb:61:c9:d1:07:3c:01:29:1d:ce:b8:54:
                    05:b2:57:39:aa:e7:34:c5:63:c1:2e:d8:5d:f2:bc:
                    3d:e1:67:01:e9:f6:b5:e0:d7:55:ab:74:d2:43:e2:
                    dd:39:36:52:18:37:49:d4:da:77:67:d4:df:b5:d1:
                    26:04:12:53:6f:fa:3b:4e:a0:20:47:3c:4b:5b:a0:
                    30:8d:48:cf:77:82:92:65:94:34:13:cd:a1:15:e6:
                    a5:c0:f4:31:be:c8:d9:80:8e:84:3c:40:da:6c:b8:
                    4c:1f:3f:2c:d5:2d:02:5b:53:2d:97:7b:08:59:d0:
                    b2:66:cc:6e:af:dd:44:0f:31:33:af:a2:52:d5:25:
                    40:ac:e8:ca:5e:08:78:1b:02:90:a2:47:1e:17:9a:
                    9d:f6:d6:4e:5c:6f:97:f7:46:18:80:30:88:b3:ad:
                    57:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A6:72:D8:AB:A6:7F:39:F5:C3:15:54:9E:93:1D:0E:9C:E8:DE:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/086fbeb6-85d8-47e8-8e95-3497e2967b8f/abc5395f6470797c32ddfe8eb37ee50a47c505fd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.80.0/22
                IPv6:
                  2803:c440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61500

    Signature Algorithm: sha256WithRSAEncryption
         12:3f:84:13:49:dd:22:3d:4a:3e:9b:8b:b0:c2:16:56:62:ac:
         f4:86:92:1e:d7:54:4e:05:f5:e5:84:fa:33:4c:37:aa:74:4d:
         4e:9b:dc:02:74:ae:86:c1:44:88:ce:26:c2:88:6e:1e:d3:a9:
         83:f7:bb:ad:84:7d:8b:1a:21:d7:66:e5:51:57:57:94:cc:57:
         32:8a:94:d9:15:0d:1e:16:78:f6:0b:e5:41:f3:68:72:f0:67:
         ee:18:8d:23:00:7a:3c:b6:34:e8:5e:f9:f3:77:d9:e2:8c:72:
         16:2a:27:b5:b0:46:64:e8:ee:7e:7b:6e:4a:47:cb:87:c5:ec:
         f0:be:7b:bf:b7:db:dc:c4:dc:00:44:43:6c:51:ba:9c:79:e2:
         14:16:b1:9f:38:4d:4a:48:1c:16:70:8e:9b:02:8e:be:f9:4b:
         58:dd:38:4e:94:c4:11:13:b3:e1:bc:cd:4d:23:8f:48:3d:58:
         1a:41:fb:de:9b:8d:70:04:13:94:d9:77:96:5a:8d:e9:a5:8b:
         81:3c:14:ee:dc:3a:98:d3:a3:83:73:56:98:00:f4:8c:60:3f:
         22:19:31:7c:f7:b4:4f:bd:8e:fb:62:03:aa:b4:23:4a:d6:23:
         70:b5:fd:bb:5c:2e:f2:1d:6b:d5:e7:5f:80:9e:f5:85:2f:9f:
         cf:5c:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----