Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cbe8f92c5fc5ec893c322ea903d8bd06212c236f.cer
File:                     cbe8f92c5fc5ec893c322ea903d8bd06212c236f.cer (raw, json)
Hash identifier:          8jRPzKTUGZ6OqOcF1H0CJfLkrqqNZ6rtBP+HvMt+jUI=
Subject key identifier:   FA:1A:F5:12:35:C7:1B:E3:D3:65:03:77:26:E4:FF:07:ED:8E:03:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD1AA7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/40098c8c-7223-4618-b04d-d565dc89dbec/cbe8f92c5fc5ec893c322ea903d8bd06212c236f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/40098c8c-7223-4618-b04d-d565dc89dbec/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Oct 2021 19:28:26 +0000
Certificate not after:    Mon 26 Feb 2024 03:45:03 +0000
Subordinate resources:    AS: 264697
                          IP: 168.232.88.0/22
                          IP: 2803:5340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14490279 (0xdd1aa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  7 19:28:26 2021 GMT
            Not After : Feb 26 03:45:03 2024 GMT
        Subject: CN=cbe8f92c5fc5ec893c322ea903d8bd06212c236f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ce:04:d5:db:7a:ff:9c:78:dc:b6:af:97:da:
                    67:dc:bd:9d:77:88:85:77:8a:e1:79:aa:42:71:da:
                    60:de:22:12:7c:85:d7:89:0e:17:44:7a:39:9c:71:
                    5f:dd:fd:ce:80:89:41:ab:09:61:3c:30:52:d3:2c:
                    40:4c:5b:1e:9a:28:42:39:0b:dd:0f:84:6e:8c:4c:
                    2c:63:da:b6:df:dc:90:ba:b2:af:71:e8:96:0b:99:
                    5f:d7:71:2e:d9:c3:7c:9b:bf:3a:e4:d9:a5:d0:3f:
                    8a:62:38:b2:fb:64:de:15:78:3e:51:8d:49:f6:a0:
                    bf:79:aa:c9:f1:38:a1:35:a9:aa:b3:a9:88:da:fb:
                    04:41:5a:77:c2:b8:55:89:77:70:66:61:65:67:39:
                    10:76:59:89:23:26:8a:7e:56:1f:2e:36:e0:ca:a5:
                    6d:1f:77:44:31:8e:a3:64:25:48:5c:b6:35:9a:9a:
                    86:8b:d2:44:f5:89:19:7e:8a:7c:ab:79:8c:c0:eb:
                    f5:f0:13:9e:84:06:c7:ad:84:f6:d2:ea:7b:50:a3:
                    47:a7:cd:e7:fa:5e:d4:39:a9:f1:cb:7f:2e:05:1f:
                    21:57:85:13:b9:b6:ba:94:74:6c:85:a3:60:15:9d:
                    71:41:71:2c:18:2f:65:a1:ac:8c:d9:4c:25:76:a9:
                    d5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:1A:F5:12:35:C7:1B:E3:D3:65:03:77:26:E4:FF:07:ED:8E:03:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/40098c8c-7223-4618-b04d-d565dc89dbec/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/40098c8c-7223-4618-b04d-d565dc89dbec/cbe8f92c5fc5ec893c322ea903d8bd06212c236f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.232.88.0/22
                IPv6:
                  2803:5340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264697

    Signature Algorithm: sha256WithRSAEncryption
         20:95:73:7a:0b:f3:6a:2c:65:f1:9e:64:82:39:b0:e0:4d:5c:
         70:d1:4f:80:33:4a:fd:51:f5:eb:63:db:ad:26:ec:bb:d2:b3:
         d3:b0:ad:f3:68:a9:bf:e8:2f:fa:2c:5a:ae:6d:25:fb:83:fe:
         3b:f8:83:1f:ae:12:e5:1e:27:63:46:30:cd:73:6b:7b:88:ce:
         20:84:d0:10:8c:5d:5b:e7:15:29:63:32:0c:5a:e7:8b:01:59:
         97:7f:41:13:ba:cf:08:ab:42:54:c6:74:b8:35:09:e0:5f:07:
         c9:29:86:ad:b4:84:3e:02:90:30:b7:aa:99:98:83:2a:d5:fd:
         a3:91:69:82:84:15:bc:46:18:14:45:38:19:02:e6:c3:d3:77:
         3a:d6:ee:84:18:5b:c2:ae:9b:f0:2e:71:67:01:ae:5e:58:45:
         38:2e:07:67:88:76:03:a2:03:67:e2:72:5c:f4:0d:31:04:cf:
         83:9f:5f:c9:90:65:23:ff:62:5f:a9:27:9e:f6:51:d3:88:3f:
         48:b4:1c:d3:96:16:b5:72:9f:98:39:ff:aa:ef:14:04:94:85:
         66:d1:86:1c:aa:94:e8:76:fe:b8:3a:a1:01:5d:db:ae:78:8a:
         b8:87:74:47:6c:9f:75:04:91:be:ff:e7:68:3e:51:70:3c:a7:
         38:39:3e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----