Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0c720a9a69baef973dad173f853967bbc985a77.cer
File:                     b0c720a9a69baef973dad173f853967bbc985a77.cer (raw, json)
Hash identifier:          f9hCF4qt4ZDc9Rhgk+pt1W+fplWdtnT86X/lT6IYJN4=
Subject key identifier:   B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F029C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/b0c720a9a69baef973dad173f853967bbc985a77.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Apr 2022 15:16:51 +0000
Certificate not after:    Tue 30 Jul 2024 22:05:35 +0000
Subordinate resources:    AS: 269800
                          IP: 45.185.52.0/22
                          IP: 2803:7360::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15739333 (0xf029c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  8 15:16:51 2022 GMT
            Not After : Jul 30 22:05:35 2024 GMT
        Subject: CN=b0c720a9a69baef973dad173f853967bbc985a77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:05:96:d5:68:5e:e3:78:0c:f5:73:ce:5f:88:
                    99:d8:da:88:e2:fa:80:11:17:53:b2:81:6f:45:7d:
                    7e:e0:b7:f7:5d:2b:34:e2:0d:dc:22:4d:1e:68:4c:
                    b3:31:5f:57:d5:4d:25:d2:14:1b:dd:a4:9b:a8:9f:
                    8a:77:f3:8f:e2:57:3d:3b:8d:be:d2:ef:c2:fa:2b:
                    80:d7:9d:82:08:94:16:a9:01:8d:76:d1:e4:38:89:
                    c5:76:62:71:b1:1a:9a:30:a7:7a:b8:ee:01:1b:fe:
                    c9:ac:4e:ad:ea:1c:96:62:df:77:3a:02:b5:91:54:
                    5b:2a:0c:f2:21:16:7f:00:d4:34:ff:19:a1:0c:60:
                    9a:b7:4a:e4:ea:a1:58:74:0c:03:63:d4:d9:fa:3c:
                    d8:8d:15:43:4a:fb:11:2c:9f:e2:f5:60:48:70:ae:
                    07:3e:4c:9b:0f:85:d6:fa:06:a6:fd:35:e6:38:ff:
                    1e:99:df:a0:79:88:c0:57:26:eb:85:b7:98:f7:08:
                    82:78:bb:a3:16:86:66:b1:5d:ee:7c:db:be:95:c6:
                    e0:4a:14:2a:f9:7b:8d:da:fc:8a:b6:59:99:a7:2c:
                    be:80:3e:77:48:47:bc:5d:af:05:fc:9a:c9:69:58:
                    9d:3a:46:77:bb:bb:c9:47:72:d8:61:2e:42:c5:24:
                    e7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:47:21:09:0A:59:DB:40:4B:92:81:E8:E6:E2:57:28:D9:3A:91:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9e6a1e9b-fb05-411a-8007-08108f0d44cd/b0c720a9a69baef973dad173f853967bbc985a77.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.52.0/22
                IPv6:
                  2803:7360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269800

    Signature Algorithm: sha256WithRSAEncryption
         21:c5:71:44:9d:0e:12:02:73:94:07:59:b0:0e:40:0d:28:28:
         cd:d0:e6:23:42:de:bc:ba:d3:99:ee:c1:34:11:8f:30:b5:fc:
         d9:d0:16:12:f4:8c:73:cb:1d:6d:71:c0:d5:92:f9:32:93:1d:
         b2:de:53:cc:9d:0c:73:84:ef:b6:66:aa:b3:db:69:a6:fb:23:
         ff:45:53:83:51:52:ad:8d:c4:e4:4c:34:43:96:38:84:26:bc:
         cf:df:56:f0:af:c6:eb:28:6d:97:6a:81:49:b1:99:e3:cd:9c:
         5a:f4:2b:a6:f8:79:c0:0a:de:e6:69:bb:b9:51:e8:3c:e5:f7:
         72:ff:3a:a9:ff:df:07:14:93:57:e7:5d:bb:af:72:c3:c6:ee:
         26:ca:61:89:7e:56:e6:c0:27:13:0d:c2:b6:ad:9a:9c:bd:e5:
         64:ed:fa:cf:28:69:cf:3a:cb:f3:08:d6:b9:4f:5b:22:72:2a:
         e3:80:12:bc:22:fb:1c:31:6b:06:df:25:33:36:fa:d6:73:9f:
         e6:4b:95:44:2b:c1:d7:b0:63:cb:22:53:b2:ed:19:50:eb:d4:
         72:ad:ae:ad:23:cc:b2:c8:54:66:6b:42:6c:7a:d0:a8:fc:05:
         ba:12:18:b5:14:62:2d:ad:b1:46:5b:59:51:d2:98:d9:2a:d2:
         09:b2:1d:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----