Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f2fdf91f8121374b5822f5540d7632eedcfeacf1.cer
File:                     f2fdf91f8121374b5822f5540d7632eedcfeacf1.cer (raw, json)
Hash identifier:          vzZ6N2uxMZjXpihwvhUPshBzNWEE5DPisP75uXZ4lG8=
Subject key identifier:   42:5D:66:E0:3C:02:1D:5C:9B:06:9A:59:AE:E8:98:24:17:76:F0:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF0D54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1d2774ae-94a0-4995-8a85-b308fabb89c0/f2fdf91f8121374b5822f5540d7632eedcfeacf1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1d2774ae-94a0-4995-8a85-b308fabb89c0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 21:42:23 +0000
Certificate not after:    Wed 25 Dec 2024 18:12:10 +0000
Subordinate resources:    IP: 45.171.112.0/22
                          IP: 2803:d7a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15666516 (0xef0d54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 21:42:23 2023 GMT
            Not After : Dec 25 18:12:10 2024 GMT
        Subject: CN=f2fdf91f8121374b5822f5540d7632eedcfeacf1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bf:aa:88:88:8a:94:3f:59:a7:e6:16:f0:0c:
                    15:d0:81:f1:f9:51:d3:7f:4b:42:49:22:cb:fb:98:
                    95:34:99:14:71:12:78:6f:ac:18:9b:a5:c8:b1:b0:
                    b4:47:e6:83:b7:f2:e9:d0:62:36:e7:b5:53:9b:03:
                    cf:dc:ab:a8:42:0a:a8:c7:80:d6:7c:7b:3f:f0:08:
                    52:9c:d2:6c:c8:f6:33:1c:b3:a8:85:a7:e7:08:de:
                    9e:e1:0c:2c:82:78:20:7f:ce:cd:26:15:60:6b:24:
                    40:25:3d:4a:43:74:c6:ab:98:3a:d1:c5:a2:d4:81:
                    33:0d:b3:d7:4e:f3:55:33:8d:d9:92:ad:b0:bd:e5:
                    86:b2:be:76:23:bb:ff:b7:dc:50:d1:89:a1:1d:5b:
                    81:9b:5e:61:1a:64:61:50:60:33:a3:af:4a:20:d4:
                    e6:54:45:c5:bc:d2:fd:90:b4:c5:d6:b6:54:1d:11:
                    72:2a:90:01:36:03:4b:4d:27:be:fd:d4:c1:12:3d:
                    98:fa:3a:cd:b4:24:9b:70:39:11:05:b2:72:12:30:
                    7f:15:ef:8a:a9:86:9c:ed:2b:c5:ab:fb:33:ec:16:
                    a6:69:d4:53:7d:50:80:e6:36:bb:b0:cf:b5:b1:c7:
                    c9:36:5c:95:f3:6b:98:09:fc:72:05:26:91:cd:c3:
                    73:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:5D:66:E0:3C:02:1D:5C:9B:06:9A:59:AE:E8:98:24:17:76:F0:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1d2774ae-94a0-4995-8a85-b308fabb89c0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1d2774ae-94a0-4995-8a85-b308fabb89c0/f2fdf91f8121374b5822f5540d7632eedcfeacf1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.171.112.0/22
                IPv6:
                  2803:d7a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:28:22:58:79:f5:e8:1d:42:be:e2:07:ab:6e:53:ef:ee:69:
         e9:56:d1:05:9d:34:b3:cb:30:ab:ea:ad:35:bb:9c:30:54:5e:
         a2:5a:d7:4c:2c:84:b3:05:2f:27:f3:47:6e:45:3c:fe:a7:5f:
         bb:bd:af:44:dd:9f:d7:19:12:14:e3:74:6f:84:16:93:73:4f:
         a0:ff:ad:68:40:56:61:47:44:23:53:ff:4c:64:0f:d6:be:32:
         f0:95:f4:8b:08:11:78:f9:e8:3c:43:9e:05:65:4d:b1:85:28:
         f7:5a:3f:9e:f9:b3:fe:c4:de:30:f3:43:e7:d3:24:f5:8e:5d:
         f5:54:3f:29:ae:cc:92:f0:f8:a6:1a:7e:2b:29:21:7a:4c:92:
         af:1a:da:1e:64:ba:21:d8:6b:88:2a:c6:d8:5c:65:f4:70:3c:
         5f:a6:66:83:b8:e5:1d:cf:c5:b5:b0:f2:70:b5:d6:91:f2:86:
         36:df:fa:4d:67:5b:8e:1a:dd:e8:19:d2:dc:20:6d:5e:48:11:
         de:00:64:5d:bb:e6:a9:6d:dd:03:7e:43:5e:63:75:7c:02:8b:
         27:00:b3:9b:6c:be:db:57:69:f4:cc:fc:83:f5:b8:d4:24:b5:
         00:01:be:b5:b3:0d:07:90:84:f7:f3:ca:e9:f9:63:a4:36:92:
         0d:77:27:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----