Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c421a24623084ac56fd5acff08e76a5dd734e47f.cer
File:                     c421a24623084ac56fd5acff08e76a5dd734e47f.cer (raw, json)
Hash identifier:          qIA2GZ+YgE7aerbUWBAzh+kAJ9XX9xg9c3Gn1dZxyRY=
Subject key identifier:   39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBF4C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Mar 2022 03:00:24 +0000
Certificate not after:    Fri 03 Jan 2025 13:34:15 +0000
Subordinate resources:    AS: 272079
                          IP: 2801:1e:9800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16512195 (0xfbf4c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  4 03:00:24 2022 GMT
            Not After : Jan  3 13:34:15 2025 GMT
        Subject: CN=c421a24623084ac56fd5acff08e76a5dd734e47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:6a:a4:bd:9d:53:88:05:6c:94:72:2c:80:68:
                    89:14:c4:a2:c8:96:03:d2:9c:c6:13:ab:c8:c1:e1:
                    3e:7f:ea:34:2f:2b:04:47:58:4b:40:a9:97:a4:05:
                    38:b4:6d:dc:7b:30:4c:ac:2b:0d:e7:08:f9:b1:c4:
                    7c:82:81:97:2f:b8:62:9f:8f:6b:28:cf:86:41:43:
                    17:63:8e:b0:cf:69:e2:be:b9:b1:e2:56:1b:37:bf:
                    e5:35:6f:f1:b7:ea:b7:34:14:d5:d4:f1:72:a1:fc:
                    25:b9:d4:16:f5:ec:f9:96:99:ed:fd:ba:61:be:41:
                    83:83:73:90:80:0b:68:da:4f:03:25:64:05:d2:6b:
                    f5:17:bd:af:26:09:97:39:d8:62:bb:8d:43:d0:8d:
                    9b:7b:a6:7b:47:28:94:80:04:8c:86:7e:b4:ec:5f:
                    56:22:68:4a:13:82:08:45:db:5d:65:77:b4:46:eb:
                    16:21:a8:99:96:6a:d5:c1:10:35:54:67:30:5c:b1:
                    83:ee:79:1f:fa:46:53:39:6a:d5:2d:ab:cc:55:c1:
                    fd:fb:86:45:92:1f:a2:92:79:23:2c:6f:26:3e:32:
                    37:a4:e2:39:95:34:22:16:ff:11:3e:3a:c7:45:9d:
                    19:3b:1d:9d:d5:ff:4e:54:2c:36:5a:aa:f8:4e:2e:
                    db:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:8D:D2:31:95:B4:86:C9:83:8C:1E:F7:B6:03:E7:31:73:72:A4:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/36095d5e-b959-4736-a4e1-72b3ddd7e760/c421a24623084ac56fd5acff08e76a5dd734e47f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1e:9800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272079

    Signature Algorithm: sha256WithRSAEncryption
         46:67:57:34:07:b9:6a:dd:9c:81:a7:41:31:a8:d9:61:22:53:
         b1:6f:2f:f1:ec:cd:8e:06:3a:e2:3e:9f:bb:ce:a4:93:98:90:
         b5:02:b3:03:8c:a5:96:25:1f:de:37:98:25:32:b2:2f:9c:40:
         93:ad:44:89:f3:c7:70:be:a9:d8:28:5f:19:47:44:7b:9f:74:
         85:da:55:e2:b0:49:95:bf:52:8f:62:e2:4f:58:9c:18:3a:eb:
         da:c7:c5:ec:94:47:2b:ba:29:08:b3:48:b9:ce:a8:17:0b:bb:
         be:d5:f1:f4:31:a0:8b:09:35:92:82:e9:36:fe:ef:98:a5:4a:
         7b:18:6a:5d:c1:03:6b:e8:50:dc:74:4e:73:f7:63:1b:37:db:
         fb:c1:a2:3b:47:10:90:4e:f2:2c:d5:9d:09:e9:5c:52:0a:31:
         50:c6:0d:07:6b:cd:1a:61:50:f2:f4:b2:93:ab:d4:6f:70:32:
         25:23:e0:78:b3:54:a8:e0:c8:3e:f8:1f:34:20:4d:64:28:6d:
         9a:2f:de:7f:82:0c:dc:d9:05:24:b5:47:65:05:75:b7:2f:59:
         05:44:b8:d6:5c:76:e7:09:49:12:5c:f4:69:3e:1e:5f:5b:23:
         cd:23:ce:7d:53:91:c6:84:2b:a2:5b:f6:5c:c9:78:04:93:44:
         67:8e:b6:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----