Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/de1d132dcee440b2c8e49412f22186fb39f7c848.cer
File:                     de1d132dcee440b2c8e49412f22186fb39f7c848.cer (raw, json)
Hash identifier:          lomYii+O5Lqyg6DW0zJ5MZQYWdtGMEgCVu/W/d3iQbQ=
Subject key identifier:   4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDE5E3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 11 Nov 2022 18:38:55 +0000
Certificate not after:    Wed 06 Dec 2023 19:23:27 +0000
Subordinate resources:    AS: 267768
                          IP: 45.170.232.0/22
                          IP: 2803:bba0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14542307 (0xdde5e3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 11 18:38:55 2022 GMT
            Not After : Dec  6 19:23:27 2023 GMT
        Subject: CN=de1d132dcee440b2c8e49412f22186fb39f7c848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a1:86:21:4f:88:c3:f1:91:83:cc:e6:45:82:
                    01:7f:52:ea:8b:31:e7:bb:75:22:be:4c:68:a6:2c:
                    d9:56:b1:d1:4e:1e:8d:33:57:91:08:6c:32:dd:f3:
                    2b:7f:a2:65:fe:b1:fb:bb:e3:37:ff:d0:1d:fc:b0:
                    6c:20:a0:fb:af:bb:20:21:9e:ad:40:4c:37:4b:48:
                    9f:3d:59:d9:e0:65:33:7c:cf:65:ea:82:eb:6f:c4:
                    7a:75:a1:98:aa:8f:77:c8:b5:00:2f:1d:60:33:16:
                    ce:45:69:dd:44:77:ad:05:33:63:3a:44:df:47:31:
                    ca:ec:45:1a:c5:ca:2f:01:52:23:dd:a7:8e:a8:16:
                    20:f9:14:4d:1d:14:33:0d:25:00:3a:a3:06:0b:c0:
                    95:a4:03:4e:2e:d6:5b:63:3d:00:70:a9:e3:c2:1f:
                    28:1c:13:a1:02:34:be:c9:f7:5f:9a:21:ec:5f:f0:
                    8b:ad:9d:b0:3a:af:d4:e3:55:58:aa:95:15:02:70:
                    24:f2:4b:44:e4:54:34:c3:c9:67:55:ab:81:ec:43:
                    0f:a8:8a:7c:dc:7d:7c:09:13:d8:c6:99:56:dc:8e:
                    53:ac:55:c4:8b:0b:f2:15:83:27:e8:c7:ad:d7:34:
                    21:e4:c1:91:24:25:7a:7f:71:bb:60:4e:3b:1e:32:
                    08:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:40:24:50:02:75:21:EE:6E:20:63:21:73:98:E1:A1:F5:3C:6D:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/11ff89a1-0603-42a1-91df-6d1080f8c5a4/de1d132dcee440b2c8e49412f22186fb39f7c848.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.170.232.0/22
                IPv6:
                  2803:bba0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267768

    Signature Algorithm: sha256WithRSAEncryption
         43:30:b7:83:96:6d:dc:4d:d0:54:f1:d5:67:5d:1f:4b:fa:a0:
         d3:75:e2:72:96:b4:84:28:49:aa:02:ee:f2:6c:a7:9a:85:3f:
         2a:3c:76:84:c6:d7:03:c6:ea:03:80:53:a4:b2:a1:16:9d:c3:
         85:e7:30:41:0b:7e:0e:a4:df:4a:af:54:27:af:75:fa:b8:1b:
         47:3c:83:a8:95:b6:64:78:e4:a4:de:23:5d:20:ac:68:97:dd:
         6d:d9:5d:85:62:60:4b:7f:16:d8:93:8f:26:9e:37:3d:2c:0b:
         23:bb:eb:08:86:c6:73:23:e1:37:d2:33:7f:35:06:5f:71:8e:
         15:32:3a:18:dc:67:1a:5a:c4:8c:12:ee:01:a3:54:17:77:77:
         ab:c6:7a:87:3f:10:70:30:8f:28:b0:6b:8d:05:5d:26:64:ad:
         ca:64:97:f3:43:0d:59:16:da:bd:e4:28:62:49:ad:e8:f3:e7:
         d1:11:fe:0a:e8:ec:01:6f:98:6d:03:81:11:db:45:8e:3e:65:
         3c:6e:8c:db:69:4c:c3:ab:b7:11:42:50:84:e7:3f:8c:b5:96:
         91:7b:7a:91:24:92:6e:6e:16:91:a9:b4:40:c0:7b:ab:d7:e2:
         6f:35:16:6c:da:5f:f3:e0:aa:83:9b:00:74:25:48:a9:09:85:
         7b:c1:bb:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----