Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c143a9a223751cb68971cd886abedb1b29019262.cer
File:                     c143a9a223751cb68971cd886abedb1b29019262.cer (raw, json)
Hash identifier:          jrJGMhc6pdHTIQ5z6FhcdofDnH3cuvIwOP5avfHQWm4=
Subject key identifier:   71:62:1C:D6:14:86:86:37:4E:E8:5C:E4:16:66:26:BD:69:8F:D3:6E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCC86B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/36700014-adba-4be4-8b79-9b31432e29be/c143a9a223751cb68971cd886abedb1b29019262.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/36700014-adba-4be4-8b79-9b31432e29be/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Oct 2021 18:35:32 +0000
Certificate not after:    Wed 13 Nov 2024 16:52:55 +0000
Subordinate resources:    AS: 269903
                          IP: 200.26.236.0/22
                          IP: 2803:8ce0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16566379 (0xfcc86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 18:35:32 2021 GMT
            Not After : Nov 13 16:52:55 2024 GMT
        Subject: CN=c143a9a223751cb68971cd886abedb1b29019262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:01:8d:13:dd:5f:af:cb:81:45:40:72:ca:20:
                    86:78:c2:34:a2:86:ba:79:0f:6a:41:45:9b:f7:71:
                    3e:79:9c:15:04:0f:6c:b4:64:6c:38:71:4d:7c:26:
                    35:33:65:79:39:4b:e6:ea:83:4b:4f:93:fd:07:bb:
                    69:c1:61:9f:b3:38:ee:89:af:9b:33:00:a9:a0:f0:
                    17:39:78:36:76:bd:e1:ed:5e:0a:34:82:86:28:29:
                    64:a4:54:41:c5:fb:2f:6c:39:6a:5d:33:79:6d:6d:
                    75:69:61:79:cd:01:f1:3a:98:35:bf:9f:dc:c3:fb:
                    a7:17:fd:cb:1d:92:23:95:f3:eb:fc:24:b9:e7:b3:
                    30:bf:0b:0a:ab:bb:48:75:b7:3a:e9:a1:71:47:85:
                    83:e6:ae:98:32:79:29:4c:ab:86:b3:5b:ea:39:38:
                    db:9d:c4:10:0c:64:46:9b:c2:92:49:24:36:f0:eb:
                    43:7d:0a:fc:da:5a:2f:a8:f8:53:0e:4b:9c:f5:51:
                    92:6f:c1:40:72:48:b6:7b:6c:9a:08:cb:60:de:72:
                    c8:f8:61:e9:93:ab:1b:41:23:ff:85:75:1d:f1:ad:
                    1b:42:95:3a:dc:18:1e:b4:7a:08:a2:56:ff:27:4d:
                    5d:59:76:d5:a5:08:96:64:80:8c:1a:d5:d6:10:af:
                    0b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:62:1C:D6:14:86:86:37:4E:E8:5C:E4:16:66:26:BD:69:8F:D3:6E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/36700014-adba-4be4-8b79-9b31432e29be/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/36700014-adba-4be4-8b79-9b31432e29be/c143a9a223751cb68971cd886abedb1b29019262.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.236.0/22
                IPv6:
                  2803:8ce0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269903

    Signature Algorithm: sha256WithRSAEncryption
         a3:36:8a:f5:d3:eb:71:bc:e3:25:55:13:99:c7:f2:25:59:00:
         ce:6a:e8:da:25:35:d6:26:a2:cd:f4:19:e3:86:be:ff:e5:97:
         c2:7b:65:85:5b:cf:d0:2c:58:06:93:96:a9:fa:2c:c9:ab:96:
         24:95:41:8f:ee:f2:0c:57:cf:d3:de:a6:f8:0c:4a:d6:f6:6f:
         dd:5b:c0:cc:5d:77:8d:05:be:f5:64:86:1c:88:9a:ce:2d:b1:
         f4:16:68:2c:cc:31:d2:2f:c5:df:ee:a6:a7:25:3b:88:37:ae:
         0c:b8:8d:0a:4a:8f:0d:89:77:91:f8:27:99:6d:a7:08:f0:cd:
         52:b3:86:bf:e9:37:bf:43:4f:d8:6b:a6:0e:d6:99:d7:a2:6a:
         4c:fc:f3:d1:cd:8f:b6:f4:82:94:00:f6:0e:79:eb:9c:c4:64:
         c2:68:73:4f:a4:c1:f5:d1:ef:9f:24:f5:b2:66:8e:45:57:40:
         83:90:df:f0:4e:90:33:cd:9e:cf:28:67:f7:ea:43:5f:b1:54:
         4b:f6:fb:d7:47:d0:9c:a8:35:8a:af:2a:04:67:a7:0a:bb:4d:
         2a:e8:3e:61:61:b3:45:f0:9c:37:2a:92:a5:1a:40:dc:a8:a8:
         62:c1:f4:6b:cb:3b:31:99:1f:fa:7f:6e:b3:04:a3:3b:01:66:
         a8:be:60:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----