Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/badc597dac1debf52afd4da6abc08896e46e7502.cer
File:                     badc597dac1debf52afd4da6abc08896e46e7502.cer (raw, json)
Hash identifier:          gFfFAIoPQv+H3jQc1nEjL4VTICU0DJE6rc4KI9Uip/0=
Subject key identifier:   7D:88:53:4C:C6:C1:D1:42:DF:C1:AC:17:ED:6A:CC:A0:55:8D:48:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0C5CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/badc597dac1debf52afd4da6abc08896e46e7502.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Feb 2022 18:27:27 +0000
Certificate not after:    Mon 05 Aug 2024 15:20:40 +0000
Subordinate resources:    AS: 271991
                          IP: 2803:1110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15779275 (0xf0c5cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  1 18:27:27 2022 GMT
            Not After : Aug  5 15:20:40 2024 GMT
        Subject: CN=badc597dac1debf52afd4da6abc08896e46e7502
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:57:61:46:98:13:93:f1:20:53:66:35:54:fb:
                    c6:60:60:2f:bf:df:2d:d2:fc:f1:b8:9e:7d:df:a8:
                    8f:d6:ea:8c:88:7c:41:f4:58:a5:85:c2:f0:b0:4a:
                    2f:74:37:4c:0f:1a:d7:01:dc:a6:2e:69:d2:03:bd:
                    cd:92:26:44:d9:27:21:d0:e4:b8:7e:df:f1:a6:b4:
                    10:da:7d:10:81:a0:73:2e:9a:79:0d:96:92:d4:54:
                    9f:86:44:5b:a1:c5:93:61:24:b4:b8:8f:49:28:80:
                    99:56:53:6e:65:8f:cd:85:93:a8:6a:54:77:39:3f:
                    b1:f9:a7:a1:09:b5:5a:88:9b:25:aa:97:98:6b:b6:
                    b5:56:47:3c:b6:5d:01:6e:92:1e:98:18:6a:fe:f4:
                    2d:c1:85:7b:55:d9:d0:9c:5c:a2:ac:ff:87:53:8c:
                    46:07:3b:dd:59:2f:2b:b4:43:15:89:6a:45:c1:79:
                    48:49:1d:46:0b:b4:fe:38:20:c0:4b:1e:d5:e6:eb:
                    2d:c0:90:08:d2:f8:e4:4f:b6:96:b4:de:14:59:7d:
                    b0:6f:a9:7d:54:94:e3:bf:44:ac:5f:12:aa:d6:3d:
                    dd:d0:30:b4:d8:05:e0:cf:79:7a:83:87:36:5a:99:
                    b7:87:67:9a:47:6a:02:e1:bb:bd:54:1e:12:41:e5:
                    5c:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:88:53:4C:C6:C1:D1:42:DF:C1:AC:17:ED:6A:CC:A0:55:8D:48:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bdf7ba73-5e8f-4a2f-8a91-a1394f6e3164/badc597dac1debf52afd4da6abc08896e46e7502.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271991

    Signature Algorithm: sha256WithRSAEncryption
         69:79:0b:27:6f:f2:56:c9:5a:f7:9e:91:2c:d0:8a:1a:83:c5:
         22:58:b6:18:2e:f2:d0:3d:f1:72:a4:74:90:8a:17:ca:94:1a:
         1a:23:fa:52:91:77:bb:0f:5c:eb:e4:15:65:4a:e2:5d:55:a1:
         32:c8:27:08:a9:79:48:9c:33:6c:7f:9a:30:37:e6:5a:71:f8:
         8b:d8:20:1e:61:d0:77:72:57:3f:29:44:b2:8d:9b:ef:4f:06:
         1a:f2:4a:32:e6:ff:e3:ec:52:ae:df:0d:04:7c:92:6f:49:62:
         37:70:5f:5d:11:dd:4d:96:15:c7:6e:00:59:66:72:97:53:3e:
         1b:78:7a:0c:14:e1:18:b8:69:92:9f:71:c9:22:3a:fb:8b:84:
         a6:cd:8e:f3:76:2f:79:6e:95:94:cd:53:ac:37:dd:0c:4a:2f:
         ee:f0:95:ad:51:38:fc:79:cc:f2:64:26:c5:22:04:5b:c9:f7:
         97:cc:d7:bd:cd:81:bb:50:01:d2:5b:85:d0:16:95:e9:1b:18:
         c5:92:81:62:10:f9:be:d8:7b:f4:6e:18:cb:83:b5:4a:72:48:
         e9:dc:ae:de:72:74:a1:6e:13:fb:30:8c:a7:c3:22:d5:58:22:
         12:d1:13:07:30:a8:a6:90:cb:80:15:05:04:88:a2:92:42:e3:
         fe:95:66:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----