Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.cer
File:                     c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.cer (raw, json)
Hash identifier:          jlKulArV6VEwfOmsfodGNsnLfqMX5GpbYois4Knhgw4=
Subject key identifier:   40:72:A6:1E:FA:C1:4C:06:80:7A:C9:1F:93:B0:F9:66:35:B4:65:21
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E41FEB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Mar 2022 15:06:06 +0000
Certificate not after:    Tue 07 May 2024 22:47:25 +0000
Subordinate resources:    AS: 271936
                          IP: 2803:fa10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14950379 (0xe41feb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 10 15:06:06 2022 GMT
            Not After : May  7 22:47:25 2024 GMT
        Subject: CN=c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:24:30:74:b2:f3:d1:79:a6:c0:a2:f6:7a:
                    cd:3c:ea:37:9d:ae:a0:4f:fd:66:6c:75:8f:5d:1b:
                    42:30:8f:7a:7d:5a:27:cc:9a:d3:2a:cd:d3:19:0a:
                    fb:77:77:6a:e3:68:30:41:06:49:b2:74:89:27:54:
                    e6:6c:d2:47:f0:e0:d5:17:d6:bb:74:44:4d:69:d1:
                    1b:bd:15:f2:86:3b:2f:f8:15:da:98:63:68:b1:c0:
                    df:4a:c0:32:06:da:b1:12:a7:30:7c:2b:20:0e:58:
                    0a:ca:3a:8c:03:fe:fa:37:ad:94:f3:c5:7f:64:b0:
                    52:10:46:ff:80:c2:47:f0:5f:c4:ee:c6:bb:aa:a9:
                    ed:ab:f9:c6:64:e2:fc:d0:d9:98:45:a2:ec:40:e7:
                    c0:af:d5:4b:c7:a9:30:e0:7c:1f:8a:fb:1b:34:a7:
                    17:dc:d4:cc:ca:c3:1f:0f:cc:38:75:92:9c:e6:ec:
                    5c:cb:bd:d7:10:0d:5d:05:a9:d1:58:72:c3:0c:19:
                    c8:d1:8c:1e:0f:6a:f1:51:85:21:62:87:2f:3c:ec:
                    81:e6:a2:c8:9f:40:d9:22:08:04:43:25:6a:7e:2a:
                    83:e2:f4:6e:da:39:40:37:7d:37:17:11:4c:27:21:
                    24:02:b5:70:9f:50:22:90:c5:92:e5:60:55:18:02:
                    df:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:72:A6:1E:FA:C1:4C:06:80:7A:C9:1F:93:B0:F9:66:35:B4:65:21
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/041bd34e-7e91-4026-9f6c-9c7a7ed4f7b7/c8d5d2f58c6c8370f4ffd8e364d9ae3c91bc4f19.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:fa10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271936

    Signature Algorithm: sha256WithRSAEncryption
         40:08:0b:a2:d3:d0:92:f0:4f:c8:55:a1:4e:de:06:2d:07:11:
         d9:88:c5:c2:38:9f:5a:d5:d9:77:9c:ec:3f:cd:aa:2d:62:03:
         33:7d:8f:db:2d:c3:8f:56:f9:fe:d0:2c:f6:c6:0a:f7:2d:7a:
         22:17:c0:ec:f9:f1:e0:2a:c5:4e:96:b5:34:14:7d:4f:aa:8d:
         46:f6:51:54:3d:37:e1:d9:cc:2d:38:89:92:73:7e:5c:a0:14:
         43:69:ce:00:c2:10:2f:47:d4:19:55:7b:8a:40:12:b7:c7:a0:
         d9:fa:b1:96:31:c7:75:49:41:2f:bb:c6:de:5f:af:66:05:19:
         3b:48:49:52:70:aa:8f:28:47:e1:0a:d3:d7:41:bd:22:2f:f9:
         3a:a3:cd:cc:f9:c9:15:87:a3:8d:c5:27:e6:b1:8e:1d:86:59:
         33:98:ea:54:ee:37:00:92:ab:64:5e:1b:a2:2d:7f:4e:45:d0:
         1e:89:14:8c:da:ad:17:e9:7c:67:16:25:8f:30:d3:2b:3a:b4:
         8c:54:c7:fe:0b:8b:01:48:31:8a:c2:11:5c:32:a2:a5:14:90:
         e9:5c:e4:15:d9:fb:2a:c4:70:0f:d0:b5:f6:bd:5c:78:1c:a6:
         85:d8:65:b7:b1:84:82:87:04:52:a9:fd:c9:16:0b:66:15:3e:
         6a:b7:a2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----