Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f13554e9fe6b271d74bda29f1da6f16965693a84.cer
File:                     f13554e9fe6b271d74bda29f1da6f16965693a84.cer (raw, json)
Hash identifier:          JedBCsou9JyELW32zqD6B2x2i0i3AnWC3Y+AI5vYVAk=
Subject key identifier:   BF:C8:57:3E:2E:36:FB:BE:C5:E1:B9:8F:28:E1:20:5D:0A:90:80:61
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D561E8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5e4952a4-7e74-42a5-9633-02b48b4b6fe3/f13554e9fe6b271d74bda29f1da6f16965693a84.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5e4952a4-7e74-42a5-9633-02b48b4b6fe3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 22 Oct 2022 15:42:58 +0000
Certificate not after:    Mon 10 Jun 2024 17:47:11 +0000
Subordinate resources:    AS: 272844
                          IP: 170.84.254.0/24
                          IP: 2801:19:5800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13984232 (0xd561e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 22 15:42:58 2022 GMT
            Not After : Jun 10 17:47:11 2024 GMT
        Subject: CN=f13554e9fe6b271d74bda29f1da6f16965693a84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:1c:63:2c:f4:cf:9f:a5:52:0d:c5:b1:0e:05:
                    ca:b9:f7:6d:18:c5:e3:92:3a:ac:72:d1:d9:26:eb:
                    9f:b1:72:3f:08:45:81:fd:d5:de:0a:ef:3f:a2:ed:
                    84:73:cb:e4:20:26:7a:46:c4:c3:4f:4d:08:fc:fd:
                    1d:b4:f8:39:6d:49:5d:cd:8a:dd:ea:68:4f:01:fc:
                    eb:d8:5d:22:4b:bf:7c:ea:a6:15:c1:b4:c5:8e:bf:
                    d5:72:17:49:b5:c5:79:d8:17:b8:a0:70:08:3f:f1:
                    ef:49:fd:67:2d:f3:0f:89:a3:d3:f2:5c:0f:db:0b:
                    84:aa:75:de:30:a5:8d:73:fe:7d:96:97:76:32:b9:
                    83:13:df:8c:27:43:a6:2c:ca:2e:08:40:16:0c:ea:
                    3a:7d:4e:cd:83:da:0f:5c:9b:24:f2:1a:c0:5e:10:
                    24:0f:d2:eb:ed:8b:ce:55:24:f9:8f:65:88:32:6a:
                    47:d7:2a:57:71:33:1f:62:9b:4c:c3:17:f0:a5:cd:
                    03:eb:9a:24:4e:be:2e:f6:73:2f:85:04:94:67:12:
                    bc:8e:13:98:6d:ef:30:41:57:01:eb:58:34:61:1c:
                    6e:fa:4f:23:13:cc:5f:f8:72:b4:2e:5f:67:20:66:
                    f3:6b:fd:13:d0:7d:f6:e6:75:c6:25:90:7e:25:09:
                    5c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:C8:57:3E:2E:36:FB:BE:C5:E1:B9:8F:28:E1:20:5D:0A:90:80:61
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5e4952a4-7e74-42a5-9633-02b48b4b6fe3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5e4952a4-7e74-42a5-9633-02b48b4b6fe3/f13554e9fe6b271d74bda29f1da6f16965693a84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.254.0/24
                IPv6:
                  2801:19:5800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272844

    Signature Algorithm: sha256WithRSAEncryption
         b3:25:fd:e9:35:02:00:f9:eb:73:21:52:de:50:6d:08:9d:5c:
         ca:46:cc:bf:77:a6:f3:79:ac:82:42:9e:dc:e7:a8:fc:27:f3:
         cb:ea:e3:7a:89:54:6a:a3:2a:c7:73:b9:52:73:58:eb:7e:79:
         ec:62:30:25:37:66:e5:4a:31:b5:27:f5:b5:9c:e8:49:3b:90:
         a5:54:72:bd:69:fe:ca:39:2e:57:9d:58:0a:6e:0d:f1:fb:73:
         fb:2f:9d:31:57:f0:5c:fd:24:02:4a:81:64:d8:95:b9:83:87:
         7f:2c:37:55:e1:61:60:90:0f:f9:2f:45:49:49:7a:7f:6c:84:
         d4:7c:7c:69:1a:a1:fa:df:65:0d:b0:ab:5c:f3:50:37:7f:c6:
         86:55:c2:47:6e:0c:ee:fb:bc:c0:a0:a5:b8:78:9a:92:dd:44:
         0a:61:58:5f:ca:fe:fa:3e:fe:49:32:bd:45:67:5a:4c:80:00:
         87:b0:65:75:44:17:81:9d:52:c5:09:51:c6:c7:e5:2e:5a:2c:
         df:0d:94:f8:d3:f9:6e:c3:6e:60:ed:e3:07:55:78:29:65:13:
         6c:3a:16:fc:a6:d1:55:2c:c0:a6:c7:e7:9d:b9:41:46:b6:9a:
         6c:0b:f8:96:84:50:b7:22:68:04:65:9d:77:e3:40:54:64:b6:
         3b:35:27:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----