Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b21961a01ca0e4d8ae0616af0d1f34b14d3d0855.cer
File:                     b21961a01ca0e4d8ae0616af0d1f34b14d3d0855.cer (raw, json)
Hash identifier:          1x63XsQJLboSpo6tWenBOYKFC9KpvNKq7Fdav6I/fac=
Subject key identifier:   7C:B2:36:EC:6A:30:FA:44:A5:8B:A6:F3:49:0D:80:5F:CE:34:74:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5E6C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1b639f57-328c-4304-96a5-c462937dcbd4/b21961a01ca0e4d8ae0616af0d1f34b14d3d0855.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1b639f57-328c-4304-96a5-c462937dcbd4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 Aug 2022 19:45:00 +0000
Certificate not after:    Thu 19 Sep 2024 18:37:26 +0000
Subordinate resources:    AS: 265675
                          IP: 143.255.104.0/22
                          IP: 2803:8940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16115400 (0xf5e6c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 26 19:45:00 2022 GMT
            Not After : Sep 19 18:37:26 2024 GMT
        Subject: CN=b21961a01ca0e4d8ae0616af0d1f34b14d3d0855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:77:01:c3:46:10:9a:5f:3e:07:28:85:b9:1a:
                    e8:48:42:3a:31:1e:1c:35:66:67:e2:fa:91:d8:7f:
                    ba:bb:c8:d0:75:a9:cb:d5:17:34:28:9a:11:79:45:
                    2c:ff:bb:15:3f:5f:e5:40:c1:71:10:fb:41:8c:11:
                    2e:9d:bd:8e:bb:8b:5e:f8:00:ef:1b:05:5a:c7:21:
                    e6:f0:d3:0e:1b:f8:51:88:8c:ed:a1:b9:9c:63:fd:
                    15:1a:71:c6:23:c9:54:b6:a2:a7:30:92:be:5a:3d:
                    cc:b4:a2:26:91:58:a3:c2:68:f8:6f:11:c2:b4:29:
                    56:f6:48:f0:a7:2d:81:e2:5c:e5:42:57:78:71:70:
                    4b:c0:8c:40:0b:6c:0a:2e:47:db:17:d9:7b:4b:f5:
                    61:2b:c1:6d:12:c7:6f:fc:fa:15:cb:27:06:30:6e:
                    04:0e:34:7e:75:70:a0:61:d2:7c:35:c8:1f:52:47:
                    c0:3b:07:c7:d5:25:17:a0:02:d1:2a:d7:8f:e5:38:
                    89:59:ab:0b:05:0b:0b:ef:67:a7:4b:64:3b:7d:7c:
                    54:6b:a3:50:e0:fe:d9:ca:86:fc:5b:a7:4a:a5:75:
                    04:1a:9d:59:86:25:70:a5:35:b1:68:d9:ea:6e:a4:
                    52:13:4e:9b:91:0b:f2:69:c6:40:ae:ce:dd:29:0b:
                    65:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:B2:36:EC:6A:30:FA:44:A5:8B:A6:F3:49:0D:80:5F:CE:34:74:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1b639f57-328c-4304-96a5-c462937dcbd4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1b639f57-328c-4304-96a5-c462937dcbd4/b21961a01ca0e4d8ae0616af0d1f34b14d3d0855.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.255.104.0/22
                IPv6:
                  2803:8940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265675

    Signature Algorithm: sha256WithRSAEncryption
         93:30:89:c7:d1:cc:65:db:fe:30:81:40:ed:84:b2:a2:2f:d8:
         23:a2:ad:34:e3:1a:67:b8:83:50:fe:ab:61:aa:5e:0b:43:8c:
         23:04:e8:7d:72:17:91:46:1b:8f:89:30:ed:42:11:49:b5:ce:
         53:6e:b0:97:b8:c1:08:09:0c:33:ac:eb:14:ad:f7:75:ac:38:
         d7:bb:8a:6f:5b:c3:d6:cc:3b:70:70:d5:d6:6d:ab:8f:4f:1c:
         94:48:a1:85:01:84:a5:eb:2f:30:15:4b:ad:8b:51:b7:5e:89:
         4a:0c:a4:0f:fd:0b:4d:81:85:2e:a8:00:7f:f4:20:c8:21:dc:
         b0:8d:c5:6b:5e:bf:8a:38:f0:96:02:7d:89:ea:4d:7c:d6:b7:
         08:ef:b8:0e:61:ca:90:d0:58:fc:19:24:97:38:2f:06:90:ac:
         07:4c:b1:7e:91:49:68:db:ce:ae:41:09:89:19:71:04:05:d3:
         33:c5:f4:86:45:e7:f9:33:9d:3a:a5:8f:df:98:71:1d:bb:07:
         69:29:29:22:98:4b:c9:b4:c3:46:e3:db:bb:88:ba:fd:1e:89:
         06:e1:a7:4f:47:ad:1a:3d:86:cf:9a:9b:19:9e:c3:a7:a2:26:
         78:89:a6:af:6c:b5:e0:9e:10:55:96:54:5e:a6:30:03:cc:f2:
         fe:fb:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----