Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d09b29fafea894e6b788dbdd1de3f40383aa6226.cer
File:                     d09b29fafea894e6b788dbdd1de3f40383aa6226.cer (raw, json)
Hash identifier:          i+bQcBqZh9lKN+o8pppiajrJoxlNq6I8aqHkWT745Mk=
Subject key identifier:   29:56:8F:C7:D8:6D:06:3D:95:71:B4:B2:6E:CD:B5:1C:AF:A5:8D:E9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0AEDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/d09b29fafea894e6b788dbdd1de3f40383aa6226.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Sep 2022 22:01:04 +0000
Certificate not after:    Sun 04 Aug 2024 19:06:52 +0000
Subordinate resources:    AS: 265515
                          IP: 170.78.188.0/22
                          IP: 2806:283::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15773405 (0xf0aedd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 28 22:01:04 2022 GMT
            Not After : Aug  4 19:06:52 2024 GMT
        Subject: CN=d09b29fafea894e6b788dbdd1de3f40383aa6226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:c0:96:34:c2:94:ec:f6:54:a3:dd:e3:88:4d:
                    37:67:34:43:1d:0c:ff:9f:23:2a:29:3a:c8:46:f8:
                    b8:6a:69:74:39:52:5e:09:a2:33:1e:f4:92:61:9b:
                    06:a0:b1:e5:30:48:41:33:45:da:7d:63:94:58:18:
                    98:5a:d6:55:ea:ec:aa:97:20:5f:ca:82:39:2c:45:
                    20:3d:09:f5:1b:16:f5:20:4d:74:d9:77:70:6f:24:
                    0e:60:dc:86:6d:a6:49:bf:6a:af:cd:8e:53:4f:6b:
                    7b:cd:be:c2:61:8f:34:aa:75:8b:0a:ba:34:36:92:
                    99:f2:40:1b:2f:a3:95:c3:56:b2:24:60:44:b6:73:
                    b6:03:6e:01:45:2b:db:e6:66:31:3c:81:24:a5:0c:
                    f6:7a:9b:71:72:9b:f9:68:07:6b:77:17:a6:bf:56:
                    73:9e:2b:25:c8:db:ec:70:48:87:cb:f0:b7:62:b7:
                    b9:85:4b:83:94:44:de:3e:8d:08:9f:5a:b4:aa:1b:
                    3e:74:f3:f2:e4:26:ac:aa:06:c1:e4:a2:4b:f6:74:
                    59:27:73:b0:d5:6a:22:52:19:58:cf:b9:e5:05:0e:
                    53:32:72:88:02:78:81:64:05:26:17:3e:5f:21:7f:
                    1e:74:8d:bf:11:a8:8b:5b:97:dd:8d:cb:31:43:c1:
                    2c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:56:8F:C7:D8:6D:06:3D:95:71:B4:B2:6E:CD:B5:1C:AF:A5:8D:E9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/876e99f3-1975-4edd-9d63-9cedccd26842/d09b29fafea894e6b788dbdd1de3f40383aa6226.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.78.188.0/22
                IPv6:
                  2806:283::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265515

    Signature Algorithm: sha256WithRSAEncryption
         af:4f:61:f3:44:f5:04:a3:2f:0d:a9:04:d0:33:54:5a:89:88:
         82:32:5e:40:62:42:2d:e4:e3:16:96:f6:bd:45:3e:44:5d:b8:
         32:14:47:b1:3a:2e:20:ef:6c:ae:4d:4d:4a:57:c0:1c:c8:90:
         79:50:1e:a2:66:59:07:ee:26:12:6a:c9:8f:a3:51:b1:7e:92:
         d2:cd:ef:ef:3c:12:49:b5:7c:26:d7:ab:d1:6a:67:b8:6f:a4:
         26:4e:0e:ad:44:ad:30:78:02:24:6f:9e:3a:f0:77:2c:8d:37:
         51:a0:9e:88:ab:77:5c:58:2f:52:30:2f:74:48:96:3c:69:e9:
         85:f2:10:7a:61:b0:9c:fa:d8:3c:e2:b8:fb:58:48:f5:6b:21:
         22:d3:d5:f6:0d:04:23:bb:1c:ce:db:f2:a1:e9:f9:78:88:a1:
         aa:1b:66:ef:e9:11:9d:cd:ba:5f:c1:d1:81:99:c3:f1:11:3a:
         e8:12:ca:30:ae:a7:b2:ba:97:71:39:79:b5:98:0f:a2:8e:f4:
         e3:12:b8:d7:63:00:42:b5:d4:58:ed:b2:35:65:f2:e9:d7:44:
         44:00:af:8a:73:2a:e8:bd:b8:40:02:7b:57:15:48:a5:e3:0f:
         dd:5f:71:2d:7f:37:93:a8:b6:8b:2a:d6:ee:43:a7:2a:c9:4d:
         6d:b9:eb:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----