Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d1fcf893b76a71b058ee84fb27ab0888816b3eda.cer
File:                     d1fcf893b76a71b058ee84fb27ab0888816b3eda.cer (raw, json)
Hash identifier:          MhWR8A6mnZUZs9BPLp9H4Pqf3j7dAubeKicdHhHqLkI=
Subject key identifier:   14:2B:00:54:6D:50:86:0C:28:69:EA:78:95:FD:38:E9:68:02:47:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D7E973
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0b6fb1be-392e-4c01-a0c1-5adbc6cb22a4/d1fcf893b76a71b058ee84fb27ab0888816b3eda.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0b6fb1be-392e-4c01-a0c1-5adbc6cb22a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 22 Nov 2022 22:44:45 +0000
Certificate not after:    Sun 21 Jul 2024 16:47:33 +0000
Subordinate resources:    AS: 265693
                          IP: 143.137.96.0/22
                          IP: 2803:7640::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14150003 (0xd7e973)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 22 22:44:45 2022 GMT
            Not After : Jul 21 16:47:33 2024 GMT
        Subject: CN=d1fcf893b76a71b058ee84fb27ab0888816b3eda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:dd:8f:7f:2a:76:b2:f7:27:8a:c1:e2:84:e0:
                    8a:16:c0:4e:37:09:9a:18:8f:a3:da:c1:14:ad:90:
                    2b:b5:a2:36:77:8f:13:fc:cf:de:d5:e1:94:2f:ab:
                    19:f7:84:c2:aa:c6:f3:50:30:ca:f4:d4:8f:ea:ae:
                    31:ee:09:b1:50:fe:26:bf:01:6b:db:ff:32:97:e8:
                    0a:87:f2:bd:2b:6c:5a:60:19:a8:90:6c:74:63:7d:
                    b1:df:80:0c:46:87:9f:6d:1c:74:ab:69:86:e2:a0:
                    7e:39:46:e6:64:36:bc:b2:e1:2c:ef:8e:29:32:8e:
                    95:d9:6d:45:96:b9:ba:31:5c:62:d7:00:45:3f:f7:
                    02:92:0c:63:52:b9:b0:1e:86:d8:2d:93:69:b4:0a:
                    09:c0:c6:63:29:ae:03:86:4c:8a:73:e6:3a:39:4f:
                    cc:f4:5f:29:88:38:81:d9:d7:6c:78:4c:cb:fc:d7:
                    10:7f:5f:04:7e:98:ed:8c:2c:b4:99:da:67:c3:6e:
                    52:d8:0f:2d:b5:4d:f6:46:9d:31:59:ad:2a:45:3b:
                    7b:c1:20:44:77:42:28:9c:d8:5f:6e:7c:30:45:ad:
                    3d:b3:5d:63:e1:98:0d:cf:8b:04:dd:86:39:ec:a9:
                    a6:fd:48:a7:92:07:0a:c3:4d:e1:15:21:e9:a2:8d:
                    3d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:2B:00:54:6D:50:86:0C:28:69:EA:78:95:FD:38:E9:68:02:47:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0b6fb1be-392e-4c01-a0c1-5adbc6cb22a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0b6fb1be-392e-4c01-a0c1-5adbc6cb22a4/d1fcf893b76a71b058ee84fb27ab0888816b3eda.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.96.0/22
                IPv6:
                  2803:7640::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265693

    Signature Algorithm: sha256WithRSAEncryption
         0a:70:62:9f:4b:74:79:6e:d2:84:88:7f:20:e3:44:09:77:8d:
         bb:3e:ed:6b:69:a2:7d:2f:c3:1c:b8:ff:c8:66:91:1c:24:37:
         de:be:45:84:39:e4:73:cd:11:ea:46:80:1c:ad:8d:f5:f6:98:
         a1:6f:93:c1:f4:94:b7:47:c4:d2:b2:5c:d1:f1:a3:33:64:ee:
         dd:9c:12:3c:f1:09:88:cf:f7:aa:03:56:e8:59:0f:0f:df:a1:
         36:78:5c:b6:be:b1:65:5c:71:a1:b8:53:2f:0f:3a:b9:d8:04:
         c2:28:58:d2:ba:0f:53:1b:47:66:98:e5:ff:e7:04:7d:27:a1:
         15:2e:ea:ed:7d:be:65:d4:4e:28:05:26:a7:1c:99:5f:11:22:
         23:ce:e3:89:21:60:33:f9:2b:af:17:db:96:c6:33:6d:36:a4:
         43:fb:97:d5:5f:35:1f:e0:60:93:b7:2c:b5:4f:fd:5a:86:41:
         93:74:9d:95:46:bd:08:cb:e8:66:ef:b0:af:d5:a7:d1:8c:ed:
         d9:73:3d:f4:b2:ae:35:1e:c2:d6:ef:01:06:44:3a:f1:cc:c2:
         35:be:c8:42:90:04:88:6a:58:62:b4:fb:ce:96:99:ef:02:ba:
         9c:dd:ba:23:52:64:08:98:e3:3f:69:cf:90:38:57:ff:00:df:
         64:01:a7:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----