Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e625c59405949e985fb1c5870f6fb53749352bff.cer
File:                     e625c59405949e985fb1c5870f6fb53749352bff.cer (raw, json)
Hash identifier:          tS3exAwYrlQlS+rNDujQWGyNCrEluc7uCVo1IJzOaiQ=
Subject key identifier:   5C:CD:0F:5A:95:0D:4D:6C:6F:13:48:89:29:E2:99:05:7D:C2:96:E1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFE47B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/84d35b47-5d4d-4f59-a6af-b99b5d94a2f5/e625c59405949e985fb1c5870f6fb53749352bff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/84d35b47-5d4d-4f59-a6af-b99b5d94a2f5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 02 Apr 2022 19:16:07 +0000
Certificate not after:    Thu 28 Mar 2024 19:00:29 +0000
Subordinate resources:    AS: 270010
                          IP: 200.39.152.0/22
                          IP: 2803:49e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14673019 (0xdfe47b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  2 19:16:07 2022 GMT
            Not After : Mar 28 19:00:29 2024 GMT
        Subject: CN=e625c59405949e985fb1c5870f6fb53749352bff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:bd:8c:47:0f:37:3a:a8:ba:bc:e8:c8:0c:23:
                    c8:7d:62:15:a4:4a:00:6a:f0:bb:e2:8d:44:1e:94:
                    c5:b6:c0:a2:a2:bd:18:75:ce:5d:ed:69:da:e7:c9:
                    5b:5c:39:50:fe:d1:af:f8:07:a8:56:82:b3:8b:6d:
                    2a:64:ee:90:f5:ff:b4:a3:74:0d:87:db:88:4f:62:
                    44:fc:88:59:57:64:31:38:a4:aa:6c:56:66:8a:53:
                    3f:e4:e6:f2:87:1d:14:37:99:cd:aa:eb:57:4f:95:
                    da:30:fe:e2:66:76:e8:ed:22:26:a4:68:82:b9:cd:
                    81:a8:38:7b:16:81:8a:c9:88:ac:a2:2d:ea:92:b9:
                    4a:1d:f5:fb:99:2e:eb:f8:d0:96:e6:53:98:75:49:
                    b0:21:01:7f:a4:25:db:df:2b:73:91:2d:95:4b:27:
                    1d:f0:46:ac:a0:f9:b1:04:b9:c0:86:77:9b:eb:c8:
                    9f:b2:57:96:6a:e6:51:12:16:42:3b:81:60:00:8d:
                    52:7d:a3:29:32:e5:f4:38:41:df:70:3d:e6:9b:8f:
                    e1:da:56:f1:28:17:cb:d4:3e:5d:f9:fb:f8:b3:6f:
                    02:83:11:36:17:bb:01:80:ef:70:d5:b8:f1:d1:17:
                    c1:0a:ad:b5:7f:ec:3f:35:92:18:ab:55:ed:d6:08:
                    18:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:CD:0F:5A:95:0D:4D:6C:6F:13:48:89:29:E2:99:05:7D:C2:96:E1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/84d35b47-5d4d-4f59-a6af-b99b5d94a2f5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/84d35b47-5d4d-4f59-a6af-b99b5d94a2f5/e625c59405949e985fb1c5870f6fb53749352bff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.152.0/22
                IPv6:
                  2803:49e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270010

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:87:7b:70:a6:6c:46:d9:b2:3a:e4:ce:6e:31:9b:3c:b2:
         04:ce:0d:3f:88:c3:3a:62:cd:65:00:95:6e:c9:b1:e9:e8:95:
         c4:8a:c3:72:9e:a7:80:61:39:32:93:e0:cb:54:18:ca:79:7c:
         9c:f1:d7:f8:6e:37:86:6e:2c:a1:13:51:6d:14:ba:57:0b:c5:
         73:6e:83:a6:56:51:50:a5:93:e1:2b:f6:e6:ce:ef:fd:6a:bf:
         f9:9a:19:d9:6d:b4:f9:59:43:b1:1e:ac:9b:3a:c3:03:82:ca:
         5a:02:ca:11:8d:a3:35:68:b7:65:df:5c:91:25:9f:e3:b7:7b:
         22:3a:15:d5:16:29:3e:95:44:fe:40:93:ed:b1:fb:92:64:17:
         e9:36:61:e6:f4:49:45:e4:67:aa:50:db:aa:eb:0d:43:a6:a9:
         c9:fe:fb:61:84:8c:28:82:bd:cf:e7:f6:aa:e9:7d:f6:e8:fd:
         3c:36:87:d9:7c:33:ba:0f:82:1c:2b:85:24:b8:b1:ed:b7:93:
         8a:9e:0d:ae:38:61:df:f8:9c:38:c7:d0:35:f0:ee:ce:b1:95:
         6a:91:9b:fb:bb:0f:8c:71:1a:c1:b2:cc:24:76:d3:aa:31:3f:
         4a:2c:26:4f:d7:5f:92:3c:72:95:36:20:bc:dd:c2:49:67:3f:
         26:bb:e2:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----