Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f04c66e47b3a8a66f313f04f07882f394b836678.cer
File:                     f04c66e47b3a8a66f313f04f07882f394b836678.cer (raw, json)
Hash identifier:          +YpaGaVf5T4++nA4WIfK/ebqj/3cuKO/Wg9LWa4DIBQ=
Subject key identifier:   F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB9ED5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 25 Nov 2021 17:01:36 +0000
Certificate not after:    Fri 09 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 52235
                          IP: 190.99.64.0/21
                          IP: 2800:610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14393045 (0xdb9ed5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 25 17:01:36 2021 GMT
            Not After : Feb  9 05:00:00 2024 GMT
        Subject: CN=f04c66e47b3a8a66f313f04f07882f394b836678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:81:8a:14:a7:46:28:3b:b3:30:23:52:8b:4b:
                    aa:0d:30:79:4f:6f:15:60:02:0f:5b:7a:5f:86:5f:
                    20:a5:e9:d3:81:8e:61:09:4a:89:6e:a7:6a:c4:4a:
                    27:19:c5:89:81:34:45:04:f1:5b:c0:78:4e:f8:34:
                    d1:8e:83:6d:c3:62:b0:e4:20:a1:34:85:d2:3b:50:
                    1d:78:db:72:df:c2:6f:87:84:2c:9e:c1:a3:23:e7:
                    b1:f3:21:fc:8c:6c:62:d7:83:02:7a:95:df:8e:87:
                    91:19:09:42:88:0f:30:77:ea:13:03:24:1a:8e:61:
                    06:0a:34:8b:4f:24:4b:d6:5a:e5:9b:78:ae:85:82:
                    d9:e8:73:94:af:96:fc:de:11:81:dc:70:66:42:ff:
                    13:fd:37:d7:0f:d0:8f:34:72:6b:96:9a:89:f3:25:
                    7d:e7:3e:3c:66:c4:bb:4a:9a:e1:89:ab:fb:a3:65:
                    7b:6f:d8:d5:04:c3:30:a8:f3:59:6e:7b:e8:17:88:
                    e3:eb:eb:b5:4a:71:31:15:0c:a7:7d:c9:08:1e:d3:
                    b3:02:b1:99:a2:23:c8:03:9b:37:b2:3d:3a:d0:75:
                    05:02:6a:97:02:00:52:a2:f6:8a:96:84:2f:d3:99:
                    87:9d:56:6f:68:43:1a:fa:88:37:0c:22:32:0e:7e:
                    61:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:04:EF:80:58:90:50:4B:5F:78:F3:09:6F:2A:3B:28:C5:7C:F5:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/851f3860-cec2-4096-988f-00e0156570ac/f04c66e47b3a8a66f313f04f07882f394b836678.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.99.64.0/21
                IPv6:
                  2800:610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52235

    Signature Algorithm: sha256WithRSAEncryption
         73:3e:db:78:71:47:49:0d:23:2d:5e:19:84:eb:dd:58:3c:a8:
         56:e2:1d:1d:d0:ac:59:c4:08:46:43:3c:fc:0e:4d:6b:ff:8b:
         73:01:a2:bf:3a:cf:19:b9:19:d6:72:d1:da:81:c9:f2:eb:df:
         ce:3a:d6:a4:8f:cb:96:ae:b9:21:31:08:6b:e1:d9:ae:ac:0a:
         4b:de:49:72:3d:bb:e8:93:56:af:e8:48:f0:30:e1:55:c1:a3:
         3b:a4:ec:24:e5:85:5f:13:00:ee:aa:eb:fc:4c:3a:85:ee:e0:
         c6:9b:66:fa:20:29:61:bb:2f:ad:50:3d:31:0f:81:15:3e:82:
         f8:17:d1:44:06:68:71:f7:0f:7f:d7:b2:58:08:a2:f8:8b:b1:
         59:bf:9d:7d:0f:d8:33:e5:f5:cf:02:de:b0:50:bc:23:a2:ef:
         20:40:fe:12:07:1c:fe:22:c6:76:7e:1f:b4:e4:26:ad:5a:43:
         36:4b:4d:a0:66:8a:eb:93:ca:84:9a:c9:6c:b5:f3:5f:75:73:
         b3:d3:9a:db:1e:8b:26:98:bd:05:ae:e9:39:fa:8f:ee:0e:5d:
         ed:74:91:81:72:2c:33:8d:29:b6:72:c1:a5:44:5f:cd:1b:7b:
         a8:d9:36:3a:5f:09:96:0c:b1:38:90:e4:0d:cd:43:64:fc:27:
         ae:cd:d5:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----