Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c5ef86124a38f3fc46e85e51e01411db37fdb204.cer
File:                     c5ef86124a38f3fc46e85e51e01411db37fdb204.cer (raw, json)
Hash identifier:          +kPF5icmcXMLuofnhm/iwjthLOvjrEhN5EgzXis768k=
Subject key identifier:   86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE83CB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Dec 2021 17:24:32 +0000
Certificate not after:    Wed 13 Mar 2024 15:12:35 +0000
Subordinate resources:    AS: 272086
                          IP: 189.85.40.0/22
                          IP: 2803:21e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14582731 (0xde83cb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 14 17:24:32 2021 GMT
            Not After : Mar 13 15:12:35 2024 GMT
        Subject: CN=c5ef86124a38f3fc46e85e51e01411db37fdb204
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ab:de:f3:13:c2:5b:99:d3:6e:33:f4:42:20:
                    f9:67:ba:07:46:64:12:7d:f4:6e:39:06:bc:94:57:
                    fe:53:68:9e:99:fd:fe:66:ea:d1:2f:90:07:3f:2e:
                    0d:c5:8b:38:21:bb:ce:6a:96:26:af:52:f9:51:94:
                    5f:dd:03:ef:b7:f1:7b:0c:cd:9b:a9:bf:ae:fb:71:
                    02:eb:89:53:29:2b:99:d6:8c:4f:86:cf:f9:14:b1:
                    be:6e:25:fa:7f:6e:5d:42:16:01:e5:56:45:7e:f3:
                    62:7a:b6:0d:01:93:2a:f2:53:d0:1d:37:4b:37:2c:
                    e0:c4:e4:ee:7f:d5:a4:3c:0a:4d:20:8c:e9:90:c8:
                    91:17:ea:9c:48:a7:c4:0f:9f:95:60:d3:75:b3:77:
                    73:74:89:bb:c2:1f:66:d2:c7:e9:3a:ca:91:5f:8c:
                    24:2f:2c:fe:62:62:bc:f2:1f:4a:0c:65:8c:69:d6:
                    0f:5d:5c:0c:78:7b:58:6f:10:a4:32:4f:18:74:89:
                    c6:df:92:a7:7b:2f:11:53:f4:33:92:56:da:d8:b6:
                    06:36:ff:c9:6a:f3:5e:53:d9:7e:4f:2a:a2:f4:67:
                    1c:5a:d9:10:ed:ad:bb:b5:5b:5a:23:17:72:61:c0:
                    7c:10:9c:24:42:94:49:f5:ac:71:db:32:fb:80:dd:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:56:69:72:80:4D:BD:ED:14:7F:F3:A0:38:C2:B6:95:AD:C2:C8:6B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/191c01fe-5e02-4280-b2c3-e3be1f20c06d/c5ef86124a38f3fc46e85e51e01411db37fdb204.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.40.0/22
                IPv6:
                  2803:21e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272086

    Signature Algorithm: sha256WithRSAEncryption
         31:64:c7:46:8c:f5:5f:5d:6e:f0:f6:5a:ff:a3:23:e7:ba:57:
         ec:26:b9:89:50:4d:ee:d2:76:d6:39:0f:24:a6:5f:d2:f0:d0:
         0f:a8:98:f3:d5:bf:7c:b2:ae:09:75:27:a8:d3:2c:0e:e4:d1:
         5a:5e:56:55:05:45:22:49:d8:ca:5d:26:0f:82:a7:bb:e3:da:
         8e:d8:52:d0:73:c2:da:7c:97:bb:7c:99:90:66:dc:18:6c:17:
         a8:be:cb:9c:5d:8f:90:8d:64:14:e9:21:00:b7:b2:a3:13:41:
         64:50:91:f4:91:0e:87:60:fe:14:63:2b:1c:cc:46:c5:51:4e:
         9c:57:f5:c8:b2:70:ce:0c:1b:89:c4:0b:2d:92:56:c2:55:bb:
         06:b5:f9:33:5c:3c:f3:25:34:6e:7e:b3:0e:65:ff:60:f4:7f:
         7a:40:8e:a5:1e:7b:d6:8e:52:4e:86:f0:9e:a0:4e:fb:a2:b4:
         55:ff:40:45:b8:85:d9:4b:d3:0d:5c:1b:71:17:a5:bd:4f:af:
         a2:eb:54:21:4c:80:1c:9a:3c:e0:5f:f8:d8:da:ad:66:ed:82:
         6d:91:79:b3:03:08:8e:9c:db:d0:ea:93:50:34:30:ee:17:12:
         32:c2:13:db:1e:50:04:0c:d3:42:16:63:f4:18:23:bf:b6:96:
         aa:05:25:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----