Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b31a8cfda0d53042955a6fbcadb44a381686bc7c.cer
File:                     b31a8cfda0d53042955a6fbcadb44a381686bc7c.cer (raw, json)
Hash identifier:          1p8t/fZowcQTbzK24G7gmeN231+dIfvCT9TVk+SghSA=
Subject key identifier:   F0:E3:B7:B8:9D:B3:10:B5:FF:B4:47:1B:E5:47:9F:B9:DA:23:1D:86
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6E794
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/b31a8cfda0d53042955a6fbcadb44a381686bc7c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Jul 2022 21:57:04 +0000
Certificate not after:    Fri 24 May 2024 20:17:53 +0000
Subordinate resources:    AS: 266863
                          IP: 45.239.128.0/22
                          IP: 2803:f2a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15132564 (0xe6e794)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 14 21:57:04 2022 GMT
            Not After : May 24 20:17:53 2024 GMT
        Subject: CN=b31a8cfda0d53042955a6fbcadb44a381686bc7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:23:89:f0:94:fd:89:9a:e1:d5:3e:1b:51:91:
                    ac:12:71:12:c1:b6:05:b5:12:2f:06:e2:d9:3e:5a:
                    5d:df:13:24:45:cc:4b:74:6f:d1:5a:71:e5:9c:d4:
                    10:b0:f2:17:2f:9a:43:02:39:af:b3:a2:d8:4a:45:
                    7b:d2:86:80:8a:f2:b5:05:49:e8:a2:9d:db:b0:53:
                    b7:6e:51:bc:9c:f6:dd:86:6e:91:39:7f:c3:40:31:
                    33:f3:28:e7:77:e5:67:e2:32:69:89:11:37:b1:54:
                    19:93:06:bf:94:79:fc:0f:c8:62:ac:79:f4:6f:1a:
                    81:3e:3c:26:d0:16:d8:d8:7e:64:2b:25:c4:08:c8:
                    e4:93:c4:fc:b0:00:1a:89:d6:7f:ed:d9:27:66:12:
                    13:95:a2:4c:b2:a8:f4:a7:9f:78:60:28:b2:43:76:
                    e2:b5:c0:d5:22:09:4f:6a:b0:99:14:29:7a:47:6e:
                    02:0b:fe:30:0d:38:43:37:07:7c:db:46:ab:bb:c8:
                    d2:29:96:c5:07:01:7f:aa:e9:b7:59:6c:f9:52:cd:
                    9c:ec:a8:5b:94:98:a7:07:d8:49:26:fe:55:ea:e7:
                    26:1b:e4:d9:81:67:0d:8b:20:b3:7d:ed:43:49:fd:
                    b2:19:61:b1:ef:10:fd:3f:c5:1e:bf:a2:aa:ed:f0:
                    97:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E3:B7:B8:9D:B3:10:B5:FF:B4:47:1B:E5:47:9F:B9:DA:23:1D:86
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/341f855e-ce1e-4515-b456-5fee1a4773d2/b31a8cfda0d53042955a6fbcadb44a381686bc7c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.128.0/22
                IPv6:
                  2803:f2a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266863

    Signature Algorithm: sha256WithRSAEncryption
         c3:f1:f5:cc:3a:d8:77:f2:1b:7d:d9:d6:5f:44:86:03:6e:58:
         61:58:a5:7b:39:db:35:d6:6c:1f:77:0a:c4:29:42:f3:f6:38:
         e6:89:a1:56:b4:11:9e:f2:fd:f0:b2:02:85:5f:5f:58:30:91:
         a1:ff:50:7b:14:d4:e9:f8:03:c3:85:ef:89:2c:59:90:23:1a:
         1e:2a:cd:0b:b9:d1:17:4a:ae:04:ff:36:a1:41:7c:94:e2:69:
         e4:7e:21:e5:1c:c7:f5:a0:4e:29:11:ce:ef:16:b8:b5:3c:27:
         10:f7:7e:c7:19:e5:e2:53:ec:dc:c7:92:d7:2c:9f:12:06:7c:
         3f:d2:53:08:17:59:b1:61:84:cd:74:b0:99:b0:e3:06:01:ce:
         60:7e:75:87:81:24:ee:9c:56:5f:c0:73:3e:67:21:ac:3e:04:
         2f:0f:a8:50:5e:cd:30:41:30:e9:93:84:03:47:03:39:8c:f9:
         e5:b4:a7:33:98:98:af:d9:ac:3b:33:5c:79:b5:c4:15:5f:f0:
         ce:a2:bb:cc:d0:7b:72:7e:60:cb:e6:11:1e:f0:77:7e:bb:6e:
         f5:83:f5:51:37:3c:69:f8:92:e0:fc:49:3f:aa:5c:88:71:35:
         28:8f:ba:a5:f8:d7:e7:a7:f7:32:1d:5f:60:68:29:3a:01:ed:
         b0:4e:e3:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----