Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8ed6d5dd2700e018bbb3715c1f55317bb7e1ed9.cer
File:                     d8ed6d5dd2700e018bbb3715c1f55317bb7e1ed9.cer (raw, json)
Hash identifier:          /toXBKoBDDsMU7SeejdImYCV6TdS3glb2zz7Vq2WzLg=
Subject key identifier:   29:70:C6:AF:B7:2E:58:D0:59:86:E7:29:19:6F:E6:5C:5C:76:62:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0F8B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c25f6052-8dec-4ea9-a05d-847ad3b5d76c/d8ed6d5dd2700e018bbb3715c1f55317bb7e1ed9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c25f6052-8dec-4ea9-a05d-847ad3b5d76c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 11 May 2022 19:05:39 +0000
Certificate not after:    Tue 06 Aug 2024 19:08:15 +0000
Subordinate resources:    AS: 271811
                          IP: 177.184.88.0/22
                          IP: 2803:b010::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15792313 (0xf0f8b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 11 19:05:39 2022 GMT
            Not After : Aug  6 19:08:15 2024 GMT
        Subject: CN=d8ed6d5dd2700e018bbb3715c1f55317bb7e1ed9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:e3:93:ce:68:87:c2:8c:15:75:a8:ce:95:e5:
                    32:88:67:4c:bd:23:d1:db:2f:0e:0a:00:f1:13:d8:
                    89:49:d8:cf:77:f0:13:6d:56:a7:ff:f8:0e:bb:41:
                    0b:8f:4a:24:f2:8a:2b:1e:86:48:62:4f:92:b3:1a:
                    c9:27:77:c0:b5:7d:e2:c0:d6:12:3a:eb:13:34:6d:
                    64:0a:b2:8a:4e:cd:d8:5a:69:27:f2:22:bc:1d:17:
                    60:1d:36:6b:99:47:1e:22:27:08:fb:56:4a:3d:79:
                    2e:73:f9:65:c7:1c:c7:b3:7f:c0:97:29:e8:16:b9:
                    b9:ee:84:91:da:33:a3:c3:4b:f1:69:2c:be:2e:b0:
                    14:aa:5b:15:91:a8:ae:47:4a:bd:57:4d:b0:a0:37:
                    7d:05:95:e0:d8:6f:d8:09:4d:e4:d6:58:20:c8:a8:
                    14:34:ec:cd:de:cd:9d:90:80:2b:70:79:e8:3d:a2:
                    c1:96:7f:0f:fb:8e:eb:42:87:f9:a7:6d:e9:7b:51:
                    5d:9c:21:54:aa:69:10:f4:d0:e6:7b:fe:4c:34:aa:
                    3c:dc:08:7d:cc:db:5b:e9:bc:f7:bd:0b:4f:fe:e0:
                    0a:18:8c:81:5a:20:cc:74:3f:a4:d9:2b:43:7c:18:
                    0a:a3:fe:88:9f:df:ac:b9:44:3f:34:53:e9:61:13:
                    63:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:70:C6:AF:B7:2E:58:D0:59:86:E7:29:19:6F:E6:5C:5C:76:62:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c25f6052-8dec-4ea9-a05d-847ad3b5d76c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c25f6052-8dec-4ea9-a05d-847ad3b5d76c/d8ed6d5dd2700e018bbb3715c1f55317bb7e1ed9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.184.88.0/22
                IPv6:
                  2803:b010::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271811

    Signature Algorithm: sha256WithRSAEncryption
         09:bb:62:e9:aa:65:42:bb:0c:ae:fc:37:f0:91:e7:2b:c7:05:
         e2:4c:48:88:bc:ad:ca:6b:b1:cf:ea:07:53:6b:d6:77:04:c1:
         b1:ab:62:94:7e:80:84:84:89:1a:af:45:c5:1e:48:5b:61:57:
         c3:91:e9:c1:ae:11:b1:9d:0e:b6:8c:11:53:c9:8f:b0:c0:9c:
         b7:57:65:5d:98:f4:64:1d:47:6c:f9:5c:5d:16:1f:b2:07:0e:
         e3:71:da:04:bc:c6:41:aa:25:34:70:27:e0:49:d2:4d:74:65:
         e0:41:ca:81:d8:c4:01:f0:18:91:31:2d:a4:66:f6:ad:8d:98:
         08:ce:e0:4e:00:7a:89:10:65:33:2e:5b:a2:87:97:85:e1:0a:
         60:46:15:8c:e3:df:1d:f6:b5:5c:fb:05:35:9e:20:4a:4a:55:
         eb:27:76:b8:6c:c3:8e:df:de:c6:5e:2a:33:c6:ea:a6:f8:3b:
         20:4c:49:b1:4d:53:34:f3:60:9f:35:d3:b2:63:dc:c4:6d:fa:
         22:33:f4:60:b5:3d:2c:46:09:22:8d:54:fd:6a:33:06:17:7a:
         5d:94:64:c3:8a:7f:f7:f3:aa:ea:81:04:d4:91:ee:73:fa:93:
         19:9a:73:22:2e:c0:46:67:25:2f:b7:3d:54:bd:e8:0a:9c:fc:
         78:be:24:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----