Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer
File:                     c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.cer (raw, json)
Hash identifier:          I8xqpLxT21HcbbJ0+r4V+mBr3KhjbfyGprW44MM5ri4=
Subject key identifier:   84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       BDB7C8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 12 Jan 2022 17:46:14 +0000
Certificate not after:    Sun 29 Oct 2023 17:19:19 +0000
Subordinate resources:    IP: 201.219.252.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12433352 (0xbdb7c8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 12 17:46:14 2022 GMT
            Not After : Oct 29 17:19:19 2023 GMT
        Subject: CN=c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4b:2b:da:57:00:f1:bb:19:92:60:e1:81:76:
                    39:cb:85:74:7e:44:2b:c1:6f:64:8e:1e:89:e4:59:
                    df:32:7f:fb:5d:6c:c6:62:0a:a7:c1:a2:92:e4:f5:
                    8a:9d:8a:81:2d:73:f0:76:d9:b7:fe:b5:58:f4:b5:
                    20:28:42:40:dc:4e:22:2c:4f:5a:a9:1e:ef:f5:c6:
                    f1:7b:c0:47:93:d5:fc:9a:b0:e2:02:be:8c:81:95:
                    a2:c2:47:ef:13:ed:19:a6:3a:4e:c1:a8:bb:4d:24:
                    d8:3b:38:52:f8:ea:e5:5a:63:56:01:a2:6a:03:68:
                    2b:3c:0e:a6:a3:13:5a:a8:e4:d7:60:a1:42:a1:11:
                    26:e9:83:4f:85:69:29:fa:75:0c:0c:c3:61:ca:98:
                    51:47:d6:13:d3:16:de:4b:6c:ab:c1:18:24:17:bc:
                    b9:47:98:2f:82:23:d0:54:95:a5:d4:6b:eb:7b:78:
                    91:fe:b1:50:23:69:3d:64:0e:b2:3f:fa:68:3f:3a:
                    a4:32:10:78:45:81:f7:40:e2:8b:cd:f0:07:f4:13:
                    06:52:c0:db:73:78:26:54:60:30:13:b9:f5:31:00:
                    08:13:aa:a9:1e:63:77:2d:ad:0e:e8:06:1d:5b:fa:
                    4e:fb:37:be:64:23:60:92:36:d8:f4:82:e5:a8:27:
                    5c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:E5:87:83:A1:C6:1A:F0:A3:B7:AE:CC:4F:0E:A4:08:B0:BC:3D:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9ddc4dcd-fff1-4698-bc7c-be5edda4e615/c149f01d7f57fa2c2fef394d00fe9bc2a0d899ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.219.252.0/23

    Signature Algorithm: sha256WithRSAEncryption
         26:2e:67:9e:4f:46:2a:c8:87:06:72:be:af:df:d2:ee:ab:90:
         83:bd:0f:73:7c:6e:b1:7a:26:f8:cb:f6:1b:20:14:22:c4:70:
         3a:9f:81:fd:09:c4:6d:c7:63:82:5f:d4:cc:36:47:4e:f9:2e:
         16:2f:69:cd:53:b6:78:66:ea:1b:c3:da:30:7e:73:2d:55:b5:
         14:02:c0:0c:6c:8d:b1:ad:12:10:f9:8a:70:50:a7:fb:25:e9:
         9c:7f:d3:da:bd:0c:73:d1:2e:c6:e9:1b:0a:ec:d2:b0:9d:69:
         40:8b:4b:43:28:af:54:ba:44:9d:45:ea:74:7e:d5:53:16:d4:
         a2:6d:9f:e6:53:f7:d2:b9:bd:e1:27:5e:9d:e0:ba:14:cb:1a:
         30:3f:cb:3e:c9:7b:14:48:1d:42:82:1c:5f:34:3d:63:08:2f:
         b0:f7:35:2a:de:cc:98:7a:24:7e:b9:5b:05:86:9e:fd:7f:31:
         a3:9a:30:cf:fa:b1:90:28:34:d0:85:3d:8a:a2:a5:41:1f:16:
         6c:01:2d:b1:c0:09:08:b0:63:5f:f9:61:02:b6:4e:f8:98:ea:
         af:ab:a4:15:63:dc:64:5e:ea:22:e0:f5:93:9d:6c:2b:f6:c6:
         f9:9c:cd:89:c3:6d:af:40:7f:5d:78:65:72:a1:55:4d:0a:1e:
         17:a1:e4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----