Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c49e65f2a47cf3812758576517457a8d5bdcb549.cer
File:                     c49e65f2a47cf3812758576517457a8d5bdcb549.cer (raw, json)
Hash identifier:          LJdfreUzbUJYt3duu19fC+ue5oIGNRgQdGFi4dOYgdk=
Subject key identifier:   55:4D:B7:65:06:02:C4:DA:1E:6F:30:86:52:B7:B8:A8:4B:8D:07:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D12D19
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10da8312-5c7f-4afd-99f7-97de81dfb189/c49e65f2a47cf3812758576517457a8d5bdcb549.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10da8312-5c7f-4afd-99f7-97de81dfb189/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Jun 2021 21:46:39 +0000
Certificate not after:    Wed 04 Oct 2023 05:00:00 +0000
Subordinate resources:    AS: 22698
                          IP: 179.18.0.0/16
                          IP: 190.13.192.0/20
                          IP: 2803:a80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13708569 (0xd12d19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 16 21:46:39 2021 GMT
            Not After : Oct  4 05:00:00 2023 GMT
        Subject: CN=c49e65f2a47cf3812758576517457a8d5bdcb549
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:d8:b5:f2:84:0a:e5:c4:cc:c2:e3:54:ff:4e:
                    da:36:63:80:da:d0:86:dc:8a:6a:22:bb:f8:31:94:
                    3c:1d:33:f0:c0:90:e9:fd:6a:58:9d:c2:c6:45:0d:
                    94:d3:d2:ef:45:1f:71:2e:1c:1c:56:e1:04:fb:88:
                    8a:1d:19:63:9c:34:7f:16:b7:31:bd:2f:9b:c9:65:
                    88:13:4f:74:be:81:2c:26:02:2a:62:3a:f7:b0:2b:
                    b5:2e:6d:dc:96:39:90:50:b1:2e:89:e2:be:4d:34:
                    7a:18:3f:a5:13:a8:a2:3b:8c:80:67:fa:60:a0:69:
                    d8:08:82:0b:85:12:49:f6:b0:0a:bc:ee:14:58:d9:
                    22:7a:25:36:ad:3f:0f:00:5b:2a:a4:15:da:40:0d:
                    3f:75:d2:ee:af:dd:84:15:b2:33:ae:41:66:e8:c4:
                    06:d6:fd:1d:02:3a:84:95:3e:48:43:7c:59:2d:04:
                    91:96:63:dd:5a:59:6c:2f:9f:46:97:be:4b:4d:a1:
                    a1:24:c3:0b:03:23:c6:6f:8e:44:0b:fc:51:d7:71:
                    53:8f:77:64:3d:cf:d2:f8:21:0a:97:e7:d7:9c:dc:
                    1e:aa:db:db:1d:bf:0a:63:ee:bc:b5:9f:79:f8:d3:
                    f0:95:d4:1f:df:1b:e2:9c:24:85:30:e2:ee:33:f7:
                    5c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:4D:B7:65:06:02:C4:DA:1E:6F:30:86:52:B7:B8:A8:4B:8D:07:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10da8312-5c7f-4afd-99f7-97de81dfb189/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10da8312-5c7f-4afd-99f7-97de81dfb189/c49e65f2a47cf3812758576517457a8d5bdcb549.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.18.0.0/16
                  190.13.192.0/20
                IPv6:
                  2803:a80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22698

    Signature Algorithm: sha256WithRSAEncryption
         01:d2:4d:ca:ce:61:4b:97:59:5e:a0:9e:42:af:16:28:b4:02:
         36:97:9b:3b:ec:fb:c7:98:11:11:09:02:a0:d4:3b:fc:c7:1c:
         9d:f0:da:fd:9e:ed:ac:e9:c9:4f:8b:40:e6:a9:91:79:14:f7:
         e8:98:1a:95:12:5d:16:54:7e:c3:39:2d:7c:32:33:64:64:ca:
         56:11:70:29:f1:bf:f4:1d:0b:07:a5:e4:6a:05:d4:e5:c3:64:
         7d:b1:cf:20:73:c5:b3:43:aa:52:91:e2:14:c2:c8:76:96:7c:
         8f:7c:a1:8b:f4:e7:39:9f:60:ba:a9:8e:39:4d:fd:dd:63:c5:
         4b:bf:0f:6a:dd:2f:80:25:f8:63:d9:26:ff:9c:d1:32:99:a8:
         e1:f8:a3:67:1c:26:d9:04:0e:a7:af:c9:11:af:20:5f:cb:f8:
         3c:7b:0a:a8:fd:63:f2:88:7a:ad:4a:b4:42:f6:48:d6:ad:28:
         77:bd:27:1a:65:7b:4e:44:58:62:f5:d6:ab:0a:ec:d4:42:4f:
         d6:a8:34:aa:7e:83:68:b7:10:d2:50:89:b8:37:77:0f:10:1d:
         96:7e:8e:a9:52:f4:15:5e:9f:a8:bc:19:b8:e7:a6:5b:0d:e8:
         96:0f:b2:fd:bd:90:fd:9e:3c:1c:72:71:59:15:2a:5e:4a:8d:
         05:fe:bb:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----